| Offset 1, 6 lines modified | Offset 1, 6 lines modified | ||
| 1 | · | 1 | ·5bc5f47cbaaad8bc5bf41b5258a206b9·153720·admin·optional·ssg-applications_0.1.76-1_all.deb |
| 2 | ·ea0c1f19113a8a6c0a6e8b10e8e208a9·32632·admin·optional·ssg-base_0.1.76-1_all.deb | 2 | ·ea0c1f19113a8a6c0a6e8b10e8e208a9·32632·admin·optional·ssg-base_0.1.76-1_all.deb |
| 3 | ·af69e2c3fbac1b650f2cc0aa3947517b·3725356·admin·optional·ssg-debderived_0.1.76-1_all.deb | ||
| 4 | ·806257a4d33d041784f82b8be390f7c3·1232656·admin·optional·ssg-debian_0.1.76-1_all.deb | ||
| 5 | · | 3 | ·10e575595d0f2a3fe85def59c05d6877·3724804·admin·optional·ssg-debderived_0.1.76-1_all.deb |
| 4 | ·089a045c23076f31050ef79c0393026b·1230576·admin·optional·ssg-debian_0.1.76-1_all.deb | ||
| 5 | ·8529509927fc7fd706d0efeac7d95950·37096756·admin·optional·ssg-nondebian_0.1.76-1_all.deb | ||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····1728·2025-03-01·08:08:00.000000·control.tar.xz | 2 | -rw-r--r--···0········0········0·····1728·2025-03-01·08:08:00.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0···1518 | 3 | -rw-r--r--···0········0········0···151800·2025-03-01·08:08:00.000000·data.tar.xz |
| Offset 19, 23 lines modified | Offset 19, 23 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:google:chromium-browser"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:google:chromium-browser"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Google·Chromium·Browser</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Google·Chromium·Browser</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-chromium-cpe-oval.xml">oval:ssg-installed_app_is_chromium:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-chromium-cpe-oval.xml">oval:ssg-installed_app_is_chromium:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-xccdf.xml"·timestamp="2025-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Chromium.·It·is·a·rendering·of | 40 | configuration·settings·for·Chromium.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 1675, 15 lines modified | Offset 1675, 15 lines modified | ||
| 1675 | ··········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> | 1675 | ··········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> |
| 1676 | ············<xccdf-1.2:check-content-ref·href="ssg-chromium-ocil.xml"·name="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"/> | 1676 | ············<xccdf-1.2:check-content-ref·href="ssg-chromium-ocil.xml"·name="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"/> |
| 1677 | ··········</xccdf-1.2:check> | 1677 | ··········</xccdf-1.2:check> |
| 1678 | ········</xccdf-1.2:Rule> | 1678 | ········</xccdf-1.2:Rule> |
| 1679 | ······</xccdf-1.2:Group> | 1679 | ······</xccdf-1.2:Group> |
| 1680 | ····</xccdf-1.2:Benchmark> | 1680 | ····</xccdf-1.2:Benchmark> |
| 1681 | ··</ds:component> | 1681 | ··</ds:component> |
| 1682 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-oval.xml"·timestamp="2025-0 | 1682 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-oval.xml"·timestamp="2025-03-01T22:08:00"> |
| 1683 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 1683 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 1684 | ······<oval-def:generator> | 1684 | ······<oval-def:generator> |
| 1685 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 1685 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 1686 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> | 1686 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> |
| 1687 | ········<oval:schema_version>5.11</oval:schema_version> | 1687 | ········<oval:schema_version>5.11</oval:schema_version> |
| 1688 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> | 1688 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> |
| 1689 | ······</oval-def:generator> | 1689 | ······</oval-def:generator> |
| Offset 2539, 813 lines modified | Offset 2539, 813 lines modified | ||
| 2539 | ········<oval-def:external_variable·id="oval:ssg-var_enable_encrypted_searching:var:1"·version="1"·datatype="string"·comment="Expected·search·provider·name"/> | 2539 | ········<oval-def:external_variable·id="oval:ssg-var_enable_encrypted_searching:var:1"·version="1"·datatype="string"·comment="Expected·search·provider·name"/> |
| 2540 | ········<oval-def:external_variable·id="oval:ssg-var_extension_whitelist:var:1"·version="1"·datatype="string"·comment="Expected·approved·extensions"/> | 2540 | ········<oval-def:external_variable·id="oval:ssg-var_extension_whitelist:var:1"·version="1"·datatype="string"·comment="Expected·approved·extensions"/> |
| 2541 | ········<oval-def:external_variable·id="oval:ssg-var_auth_schema:var:1"·version="1"·datatype="string"·comment="Expected·HTTP·authentication·type"/> | 2541 | ········<oval-def:external_variable·id="oval:ssg-var_auth_schema:var:1"·version="1"·datatype="string"·comment="Expected·HTTP·authentication·type"/> |
| 2542 | ········<oval-def:external_variable·id="oval:ssg-var_trusted_home_page:var:1"·version="1"·datatype="string"·comment="Expected·home·page"/> | 2542 | ········<oval-def:external_variable·id="oval:ssg-var_trusted_home_page:var:1"·version="1"·datatype="string"·comment="Expected·home·page"/> |
| 2543 | ······</oval-def:variables> | 2543 | ······</oval-def:variables> |
| 2544 | ····</oval-def:oval_definitions> | 2544 | ····</oval-def:oval_definitions> |
| 2545 | ··</ds:component> | 2545 | ··</ds:component> |
| 2546 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-ocil.xml"·timestamp="2025-0 | 2546 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-ocil.xml"·timestamp="2025-03-01T22:08:00"> |
| 2547 | ····<ocil:ocil> | 2547 | ····<ocil:ocil> |
| 2548 | ······<ocil:generator> | 2548 | ······<ocil:generator> |
| 2549 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 2549 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 2550 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 2550 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 2551 | ········<ocil:schema_version>2.0</ocil:schema_version> | 2551 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 2552 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 2552 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 2553 | ······</ocil:generator> | 2553 | ······</ocil:generator> |
| 2554 | ······<ocil:questionnaires> | 2554 | ······<ocil:questionnaires> |
| 2555 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2555 | ········<ocil:questionnaire·id="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"> |
| 2556 | ··········<ocil:title> | 2556 | ··········<ocil:title>Enable·Plugins·for·Only·Approved·URLs</ocil:title> |
| 2557 | ··········<ocil:actions> | 2557 | ··········<ocil:actions> |
| 2558 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2558 | ············<ocil:test_action_ref>ocil:ssg-chromium_whitelist_plugin_urls_action:testaction:1</ocil:test_action_ref> |
| 2559 | ··········</ocil:actions> | 2559 | ··········</ocil:actions> |
| 2560 | ········</ocil:questionnaire> | 2560 | ········</ocil:questionnaire> |
| 2561 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2561 | ········<ocil:questionnaire·id="ocil:ssg-chromium_http_authentication_ocil:questionnaire:1"> |
| 2562 | ··········<ocil:title>Set· | 2562 | ··········<ocil:title>Set·Chromium's·HTTP·Authentication·Scheme</ocil:title> |
| 2563 | ··········<ocil:actions> | 2563 | ··········<ocil:actions> |
| 2564 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2564 | ············<ocil:test_action_ref>ocil:ssg-chromium_http_authentication_action:testaction:1</ocil:test_action_ref> |
| 2565 | ··········</ocil:actions> | 2565 | ··········</ocil:actions> |
| 2566 | ········</ocil:questionnaire> | 2566 | ········</ocil:questionnaire> |
| 2567 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2567 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_outdated_plugins_ocil:questionnaire:1"> |
| 2568 | ··········<ocil:title>Disable·P | 2568 | ··········<ocil:title>Disable·Outdated·Plugins</ocil:title> |
| 2569 | ··········<ocil:actions> | 2569 | ··········<ocil:actions> |
| 2570 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2570 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_outdated_plugins_action:testaction:1</ocil:test_action_ref> |
| 2571 | ··········</ocil:actions> | 2571 | ··········</ocil:actions> |
| 2572 | ········</ocil:questionnaire> | 2572 | ········</ocil:questionnaire> |
| 2573 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_s | 2573 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_password_manager_ocil:questionnaire:1"> |
| 2574 | ··········<ocil:title>Disable· | 2574 | ··········<ocil:title>Disable·Chromium·Password·Manager</ocil:title> |
| 2575 | ··········<ocil:actions> | 2575 | ··········<ocil:actions> |
| 2576 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_s | 2576 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_password_manager_action:testaction:1</ocil:test_action_ref> |
| 2577 | ··········</ocil:actions> | 2577 | ··········</ocil:actions> |
| 2578 | ········</ocil:questionnaire> | 2578 | ········</ocil:questionnaire> |
| 2579 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2579 | ········<ocil:questionnaire·id="ocil:ssg-chromium_enable_approved_plugins_ocil:questionnaire:1"> |
| 2580 | ··········<ocil:title> | 2580 | ··········<ocil:title>Enable·Only·Approved·Plugins</ocil:title> |
| 2581 | ··········<ocil:actions> | 2581 | ··········<ocil:actions> |
| 2582 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2582 | ············<ocil:test_action_ref>ocil:ssg-chromium_enable_approved_plugins_action:testaction:1</ocil:test_action_ref> |
| 2583 | ··········</ocil:actions> | 2583 | ··········</ocil:actions> |
| 2584 | ········</ocil:questionnaire> | 2584 | ········</ocil:questionnaire> |
| 2585 | ········<ocil:questionnaire·id="ocil:ssg-chromium_d | 2585 | ········<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_name_ocil:questionnaire:1"> |
| 2586 | ··········<ocil:title> | 2586 | ··········<ocil:title>Set·the·Default·Search·Provider's·URL</ocil:title> |
| 2587 | ··········<ocil:actions> | 2587 | ··········<ocil:actions> |
| 2588 | ············<ocil:test_action_ref>ocil:ssg-chromium_d | 2588 | ············<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_name_action:testaction:1</ocil:test_action_ref> |
| 2589 | ··········</ocil:actions> | 2589 | ··········</ocil:actions> |
| 2590 | ········</ocil:questionnaire> | 2590 | ········</ocil:questionnaire> |
| 2591 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2591 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_automatic_installation_ocil:questionnaire:1"> |
| 2592 | ··········<ocil:title>Disable·Ses | 2592 | ··········<ocil:title>Disable·Automatic·Search·And·Installation·of·Plugins</ocil:title> |
| 2593 | ··········<ocil:actions> | 2593 | ··········<ocil:actions> |
| 2594 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2594 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_automatic_installation_action:testaction:1</ocil:test_action_ref> |
| 2595 | ··········</ocil:actions> | 2595 | ··········</ocil:actions> |
| 2596 | ········</ocil:questionnaire> | 2596 | ········</ocil:questionnaire> |
| 2597 | ········<ocil:questionnaire·id="ocil:ssg-chromium_d | 2597 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_3d_graphics_api_ocil:questionnaire:1"> |
| 2598 | ··········<ocil:title> | 2598 | ··········<ocil:title>Disable·the·3D·Graphics·APIs</ocil:title> |
| 2599 | ··········<ocil:actions> | 2599 | ··········<ocil:actions> |
| 2600 | ············<ocil:test_action_ref>ocil:ssg-chromium_d | 2600 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_3d_graphics_api_action:testaction:1</ocil:test_action_ref> |
| 2601 | ··········</ocil:actions> | 2601 | ··········</ocil:actions> |
| 2602 | ········</ocil:questionnaire> | 2602 | ········</ocil:questionnaire> |
| 2603 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2603 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_google_sync_ocil:questionnaire:1"> |
| 2604 | ··········<ocil:title>Disable· | 2604 | ··········<ocil:title>Disable·Data·Synchronization·to·Google</ocil:title> |
| 2605 | ··········<ocil:actions> | 2605 | ··········<ocil:actions> |
| 2606 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2606 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_google_sync_action:testaction:1</ocil:test_action_ref> |
| 2607 | ··········</ocil:actions> | 2607 | ··········</ocil:actions> |
| 2608 | ········</ocil:questionnaire> | 2608 | ········</ocil:questionnaire> |
| 2609 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2609 | ········<ocil:questionnaire·id="ocil:ssg-chromium_policy_file_ocil:questionnaire:1"> |
| 2610 | ··········<ocil:title>En | 2610 | ··········<ocil:title>Ensure·the·Chromium·Policy·Configuration·File·Exists</ocil:title> |
| 2611 | ··········<ocil:actions> | 2611 | ··········<ocil:actions> |
| 2612 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2612 | ············<ocil:test_action_ref>ocil:ssg-chromium_policy_file_action:testaction:1</ocil:test_action_ref> |
| 2613 | ··········</ocil:actions> | 2613 | ··········</ocil:actions> |
| 2614 | ········</ocil:questionnaire> | 2614 | ········</ocil:questionnaire> |
| 2615 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2615 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_background_processing_ocil:questionnaire:1"> |
| 2616 | ··········<ocil:title>Disable· | 2616 | ··········<ocil:title>Disable·Background·Processing</ocil:title> |
| 2617 | ··········<ocil:actions> | 2617 | ··········<ocil:actions> |
| 2618 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2618 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_background_processing_action:testaction:1</ocil:test_action_ref> |
| 2619 | ··········</ocil:actions> | 2619 | ··········</ocil:actions> |
| 2620 | ········</ocil:questionnaire> | 2620 | ········</ocil:questionnaire> |
| 2621 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2621 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_network_prediction_ocil:questionnaire:1"> |
| 2622 | ··········<ocil:title> | 2622 | ··········<ocil:title>Disable·Network·Prediction</ocil:title> |
| 2623 | ··········<ocil:actions> | 2623 | ··········<ocil:actions> |
| 2624 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2624 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_network_prediction_action:testaction:1</ocil:test_action_ref> |
| 2625 | ··········</ocil:actions> | 2625 | ··········</ocil:actions> |
| Max diff block lines reached; 69895/82553 bytes (84.67%) of diff not shown. | |||
| Offset 3, 795 lines modified | Offset 3, 795 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Enable·Plugins·for·Only·Approved·URLs</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 13 | ········<ocil:test_action_ref>ocil:ssg-chromium_whitelist_plugin_urls_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 16 | ····<ocil:questionnaire·id="ocil:ssg-chromium_http_authentication_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Set· | 17 | ······<ocil:title>Set·Chromium's·HTTP·Authentication·Scheme</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 19 | ········<ocil:test_action_ref>ocil:ssg-chromium_http_authentication_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 22 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_outdated_plugins_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Disable·P | 23 | ······<ocil:title>Disable·Outdated·Plugins</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 25 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_outdated_plugins_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_s | 28 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_password_manager_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Disable· | 29 | ······<ocil:title>Disable·Chromium·Password·Manager</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_s | 31 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_password_manager_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 34 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_approved_plugins_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Enable·Only·Approved·Plugins</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 37 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_approved_plugins_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-chromium_d | 40 | ····<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_name_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Set·the·Default·Search·Provider's·URL</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-chromium_d | 43 | ········<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_name_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 46 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_automatic_installation_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Disable·Ses | 47 | ······<ocil:title>Disable·Automatic·Search·And·Installation·of·Plugins</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 49 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_automatic_installation_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-chromium_d | 52 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_3d_graphics_api_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Disable·the·3D·Graphics·APIs</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-chromium_d | 55 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_3d_graphics_api_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_google_sync_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Disable· | 59 | ······<ocil:title>Disable·Data·Synchronization·to·Google</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 61 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_google_sync_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 64 | ····<ocil:questionnaire·id="ocil:ssg-chromium_policy_file_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>En | 65 | ······<ocil:title>Ensure·the·Chromium·Policy·Configuration·File·Exists</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 67 | ········<ocil:test_action_ref>ocil:ssg-chromium_policy_file_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 70 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_background_processing_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Disable· | 71 | ······<ocil:title>Disable·Background·Processing</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 73 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_background_processing_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 76 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_network_prediction_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Disable·Network·Prediction</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 79 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_network_prediction_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 82 | ····<ocil:questionnaire·id="ocil:ssg-chromium_blacklist_extension_installation_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Disable· | 83 | ······<ocil:title>Disable·All·Extensions·by·Default</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 85 | ········<ocil:test_action_ref>ocil:ssg-chromium_blacklist_extension_installation_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_a | 88 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_cleartext_passwords_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Disable· | 89 | ······<ocil:title>Disable·Use·of·Cleartext·Passwords</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_a | 91 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_cleartext_passwords_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 94 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_thirdparty_cookies_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Disable· | 95 | ······<ocil:title>Disable·3rd·Party·Cookies</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 97 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_thirdparty_cookies_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_firewall_traversal_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Disable·Chromium's·Ability·to·Traverse·Firewalls</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 103 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_firewall_traversal_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 106 | ····<ocil:questionnaire·id="ocil:ssg-chromium_extension_whitelist_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Enable·Only·Approved·Extensions</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 109 | ········<ocil:test_action_ref>ocil:ssg-chromium_extension_whitelist_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 112 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_popups_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Disable· | 113 | ······<ocil:title>Disable·Popups</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 115 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_popups_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 118 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_incognito_mode_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Disable·Incognito·Mode</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 121 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_incognito_mode_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-chromium_d | 124 | ····<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_ocil:questionnaire:1"> |
| 125 | ······<ocil:title> | 125 | ······<ocil:title>Enable·the·Default·Search·Provider</ocil:title> |
| 126 | ······<ocil:actions> | 126 | ······<ocil:actions> |
| 127 | ········<ocil:test_action_ref>ocil:ssg-chromium_d | 127 | ········<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_action:testaction:1</ocil:test_action_ref> |
| 128 | ······</ocil:actions> | 128 | ······</ocil:actions> |
| 129 | ····</ocil:questionnaire> | 129 | ····</ocil:questionnaire> |
| Max diff block lines reached; 60529/73680 bytes (82.15%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service:1"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service:1"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·1.21</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·1.21</cpe-dict:title> |
| Offset 35, 15 lines modified | Offset 35, 15 lines modified | ||
| 35 | ······</cpe-dict:cpe-item> | 35 | ······</cpe-dict:cpe-item> |
| 36 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:elastic_kubernetes_service_node:1"> | 36 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:elastic_kubernetes_service_node:1"> |
| 37 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·Node</cpe-dict:title> | 37 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·Node</cpe-dict:title> |
| 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks_node:def:1</cpe-dict:check> | 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks_node:def:1</cpe-dict:check> |
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ····</cpe-dict:cpe-list> | 40 | ····</cpe-dict:cpe-list> |
| 41 | ··</ds:component> | 41 | ··</ds:component> |
| 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-xccdf.xml"·timestamp="2025-0 | 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 44 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 44 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> | 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> |
| 46 | ······<xccdf-1.2:description> | 46 | ······<xccdf-1.2:description> |
| 47 | ········This·guide·presents·a·catalog·of·security-relevant | 47 | ········This·guide·presents·a·catalog·of·security-relevant |
| 48 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of | 48 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of |
| 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 113, 24 lines modified | Offset 113, 24 lines modified | ||
| 113 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 113 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 114 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 114 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 115 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 115 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 116 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 118 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 118 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 119 | ······<cpe-lang:platform-specification> | 119 | ······<cpe-lang:platform-specification> |
| 120 | ········<cpe-lang:platform·id="eks-node"> | ||
| 121 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 122 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 123 | ··········</cpe-lang:logical-test> | ||
| 124 | ········</cpe-lang:platform> | ||
| 125 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift"> | 120 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift"> |
| 126 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | 121 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 127 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | 122 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> |
| 128 | ··········</cpe-lang:logical-test> | 123 | ··········</cpe-lang:logical-test> |
| 129 | ········</cpe-lang:platform> | 124 | ········</cpe-lang:platform> |
| 125 | ········<cpe-lang:platform·id="eks-node"> | ||
| 126 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 127 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 128 | ··········</cpe-lang:logical-test> | ||
| 129 | ········</cpe-lang:platform> | ||
| 130 | ······</cpe-lang:platform-specification> | 130 | ······</cpe-lang:platform-specification> |
| 131 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> | 131 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> |
| 132 | ······<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> | 132 | ······<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> |
| 133 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> | 133 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> |
| 134 | ······<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.76</xccdf-1.2:version> | 134 | ······<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.76</xccdf-1.2:version> |
| 135 | ······<xccdf-1.2:metadata> | 135 | ······<xccdf-1.2:metadata> |
| 136 | ········<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> | 136 | ········<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> |
| Offset 1545, 15 lines modified | Offset 1545, 15 lines modified | ||
| 1545 | ··············<xccdf-1.2:check-content-ref·href="ssg-eks-ocil.xml"·name="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"/> | 1545 | ··············<xccdf-1.2:check-content-ref·href="ssg-eks-ocil.xml"·name="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"/> |
| 1546 | ············</xccdf-1.2:check> | 1546 | ············</xccdf-1.2:check> |
| 1547 | ··········</xccdf-1.2:Rule> | 1547 | ··········</xccdf-1.2:Rule> |
| 1548 | ········</xccdf-1.2:Group> | 1548 | ········</xccdf-1.2:Group> |
| 1549 | ······</xccdf-1.2:Group> | 1549 | ······</xccdf-1.2:Group> |
| 1550 | ····</xccdf-1.2:Benchmark> | 1550 | ····</xccdf-1.2:Benchmark> |
| 1551 | ··</ds:component> | 1551 | ··</ds:component> |
| 1552 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-oval.xml"·timestamp="2025-0 | 1552 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-oval.xml"·timestamp="2025-03-01T22:08:00"> |
| 1553 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 1553 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 1554 | ······<oval-def:generator> | 1554 | ······<oval-def:generator> |
| 1555 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 1555 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 1556 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> | 1556 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> |
| 1557 | ········<oval:schema_version>5.11</oval:schema_version> | 1557 | ········<oval:schema_version>5.11</oval:schema_version> |
| 1558 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> | 1558 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> |
| 1559 | ······</oval-def:generator> | 1559 | ······</oval-def:generator> |
| Offset 2166, 386 lines modified | Offset 2166, 386 lines modified | ||
| 2166 | ········<oval-def:external_variable·id="oval:ssg-var_streaming_connection_timeouts:var:1"·version="1"·datatype="string"·comment="variable"/> | 2166 | ········<oval-def:external_variable·id="oval:ssg-var_streaming_connection_timeouts:var:1"·version="1"·datatype="string"·comment="variable"/> |
| 2167 | ········<oval-def:local_variable·id="oval:ssg-kubelet_read_only_port_secured_file_location:var:1"·version="1"·datatype="string"·comment="The·actual·path·of·the·file·to·scan."> | 2167 | ········<oval-def:local_variable·id="oval:ssg-kubelet_read_only_port_secured_file_location:var:1"·version="1"·datatype="string"·comment="The·actual·path·of·the·file·to·scan."> |
| 2168 | ··········<oval-def:literal_component>/etc/kubernetes/compliance-operator/kubeletconfig/openscap-kubeletconfig</oval-def:literal_component> | 2168 | ··········<oval-def:literal_component>/etc/kubernetes/compliance-operator/kubeletconfig/openscap-kubeletconfig</oval-def:literal_component> |
| 2169 | ········</oval-def:local_variable> | 2169 | ········</oval-def:local_variable> |
| 2170 | ······</oval-def:variables> | 2170 | ······</oval-def:variables> |
| 2171 | ····</oval-def:oval_definitions> | 2171 | ····</oval-def:oval_definitions> |
| 2172 | ··</ds:component> | 2172 | ··</ds:component> |
| 2173 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-ocil.xml"·timestamp="2025-0 | 2173 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-ocil.xml"·timestamp="2025-03-01T22:08:00"> |
| 2174 | ····<ocil:ocil> | 2174 | ····<ocil:ocil> |
| 2175 | ······<ocil:generator> | 2175 | ······<ocil:generator> |
| 2176 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 2176 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 2177 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 2177 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 2178 | ········<ocil:schema_version>2.0</ocil:schema_version> | 2178 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 2179 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 2179 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 2180 | ······</ocil:generator> | 2180 | ······</ocil:generator> |
| 2181 | ······<ocil:questionnaires> | 2181 | ······<ocil:questionnaires> |
| 2182 | ········<ocil:questionnaire·id="ocil:ssg-control_plane_access_ocil:questionnaire:1"> | 2182 | ········<ocil:questionnaire·id="ocil:ssg-control_plane_access_ocil:questionnaire:1"> |
| 2183 | ··········<ocil:title>Restrict·Access·to·the·Control·Plane·Endpoint</ocil:title> | 2183 | ··········<ocil:title>Restrict·Access·to·the·Control·Plane·Endpoint</ocil:title> |
| 2184 | ··········<ocil:actions> | 2184 | ··········<ocil:actions> |
| 2185 | ············<ocil:test_action_ref>ocil:ssg-control_plane_access_action:testaction:1</ocil:test_action_ref> | 2185 | ············<ocil:test_action_ref>ocil:ssg-control_plane_access_action:testaction:1</ocil:test_action_ref> |
| 2186 | ··········</ocil:actions> | 2186 | ··········</ocil:actions> |
| 2187 | ········</ocil:questionnaire> | 2187 | ········</ocil:questionnaire> |
| 2188 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_deprecated_ocil:questionnaire:1"> | ||
| 2189 | ··········<ocil:title>kubelet·-·Do·Not·Disable·Streaming·Timeouts</ocil:title> | ||
| 2190 | ··········<ocil:actions> | ||
| 2191 | ············<ocil:test_action_ref>ocil:ssg-kubelet_enable_streaming_connections_deprecated_action:testaction:1</ocil:test_action_ref> | ||
| 2192 | ··········</ocil:actions> | ||
| 2193 | ········</ocil:questionnaire> | ||
| 2194 | ········<ocil:questionnaire·id="ocil:ssg-file_ | 2188 | ········<ocil:questionnaire·id="ocil:ssg-file_owner_worker_kubeconfig_ocil:questionnaire:1"> |
| 2195 | ··········<ocil:title>Verify· | 2189 | ··········<ocil:title>Verify·User·Who·Owns·The·Worker·Kubeconfig·File</ocil:title> |
| 2196 | ··········<ocil:actions> | 2190 | ··········<ocil:actions> |
| 2197 | ············<ocil:test_action_ref>ocil:ssg-file_ | 2191 | ············<ocil:test_action_ref>ocil:ssg-file_owner_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 2198 | ··········</ocil:actions> | 2192 | ··········</ocil:actions> |
| 2199 | ········</ocil:questionnaire> | 2193 | ········</ocil:questionnaire> |
| 2200 | ········<ocil:questionnaire·id="ocil:ssg- | 2194 | ········<ocil:questionnaire·id="ocil:ssg-audit_logging_ocil:questionnaire:1"> |
| 2201 | ··········<ocil:title>Ensure· | 2195 | ··········<ocil:title>Ensure·Audit·Logging·is·Enabled</ocil:title> |
| 2202 | ··········<ocil:actions> | 2196 | ··········<ocil:actions> |
| 2203 | ············<ocil:test_action_ref>ocil:ssg- | 2197 | ············<ocil:test_action_ref>ocil:ssg-audit_logging_action:testaction:1</ocil:test_action_ref> |
| 2204 | ··········</ocil:actions> | 2198 | ··········</ocil:actions> |
| 2205 | ········</ocil:questionnaire> | 2199 | ········</ocil:questionnaire> |
| 2206 | ········<ocil:questionnaire·id="ocil:ssg- | 2200 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_anonymous_auth_ocil:questionnaire:1"> |
| 2207 | ··········<ocil:title> | 2201 | ··········<ocil:title>Disable·Anonymous·Authentication·to·the·Kubelet</ocil:title> |
| 2208 | ··········<ocil:actions> | 2202 | ··········<ocil:actions> |
| 2209 | ············<ocil:test_action_ref>ocil:ssg- | 2203 | ············<ocil:test_action_ref>ocil:ssg-kubelet_anonymous_auth_action:testaction:1</ocil:test_action_ref> |
| 2210 | ··········</ocil:actions> | 2204 | ··········</ocil:actions> |
| 2211 | ········</ocil:questionnaire> | 2205 | ········</ocil:questionnaire> |
| 2212 | ········<ocil:questionnaire·id="ocil:ssg-configure_network_policy_ocil:questionnaire:1"> | ||
| 2213 | ········ | 2206 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_enable_client_cert_rotation_ocil:questionnaire:1"> |
| 2207 | ··········<ocil:title>kubelet·-·Enable·Client·Certificate·Rotation</ocil:title> | ||
| Max diff block lines reached; 73995/84756 bytes (87.30%) of diff not shown. | |||
| Offset 9, 371 lines modified | Offset 9, 371 lines modified | ||
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-control_plane_access_ocil:questionnaire:1"> | 10 | ····<ocil:questionnaire·id="ocil:ssg-control_plane_access_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Restrict·Access·to·the·Control·Plane·Endpoint</ocil:title> | 11 | ······<ocil:title>Restrict·Access·to·the·Control·Plane·Endpoint</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-control_plane_access_action:testaction:1</ocil:test_action_ref> | 13 | ········<ocil:test_action_ref>ocil:ssg-control_plane_access_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_deprecated_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>kubelet·-·Do·Not·Disable·Streaming·Timeouts</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_streaming_connections_deprecated_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_worker_kubeconfig_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Verify· | 17 | ······<ocil:title>Verify·User·Who·Owns·The·Worker·Kubeconfig·File</ocil:title> |
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-file_ | 19 | ········<ocil:test_action_ref>ocil:ssg-file_owner_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-configure_network_policies_namespaces_ocil:questionnaire:1"> | ||
| 29 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_logging_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Ensure·Audit·Logging·is·Enabled</ocil:title> | ||
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-audit_logging_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_anonymous_auth_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 29 | ······<ocil:title>Disable·Anonymous·Authentication·to·the·Kubelet</ocil:title> |
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-kubelet_anonymous_auth_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-configure_network_policy_ocil:questionnaire:1"> | ||
| 41 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_client_cert_rotation_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>kubelet·-·Enable·Client·Certificate·Rotation</ocil:title> | ||
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_client_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-approved_registries_ocil:questionnaire:1"> | ||
| 47 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_server_cert_rotation_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>kubelet·-·Enable·Server·Certificate·Rotation</ocil:title> | ||
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-a | 43 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_server_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-read_only_registry_access_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 47 | ······<ocil:title>Ensure·Cluster·Service·Account·with·read-only·access·to·Amazon·ECR</ocil:title> |
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-read_only_registry_access_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_ | 52 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_protect_kernel_defaults_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>kubelet·-·Enable· | 53 | ······<ocil:title>kubelet·-·Enable·Protect·Kernel·Defaults</ocil:title> |
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_ | 55 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_protect_kernel_defaults_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-private_nodes_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 59 | ······<ocil:title>Ensure·Cluster·Private·Nodes</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-private_nodes_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-registry_access_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 65 | ······<ocil:title>Minimize·user·access·to·Amazon·ECR</ocil:title> |
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-registry_access_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-image_scanning_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 71 | ······<ocil:title>Ensure·Image·Vulnerability·Scanning</ocil:title> |
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-image_scanning_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-approved_registries_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 77 | ······<ocil:title>Only·use·approved·container·registries</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-approved_registries_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_kubelet_conf_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 83 | ······<ocil:title>Verify·Group·Who·Owns·The·Kubelet·Configuration·File</ocil:title> |
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_kubelet_conf_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_read_only_port_secured_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 89 | ······<ocil:title>kubelet·-·Ensure·that·the·--read-only-port·is·secured</ocil:title> |
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-kubelet_read_only_port_secured_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_ | 94 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_deprecated_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>kubelet·-· | 95 | ······<ocil:title>kubelet·-·Do·Not·Disable·Streaming·Timeouts</ocil:title> |
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-kubelet_ | 97 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_streaming_connections_deprecated_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-dedicated_service_accounts_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 101 | ······<ocil:title>Use·Dedicated·Service·Accounts</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-dedicated_service_accounts_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_authorization_mode_ocil:questionnaire:1"> | 106 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_authorization_mode_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Ensure·authorization·is·set·to·Webhook</ocil:title> | 107 | ······<ocil:title>Ensure·authorization·is·set·to·Webhook</ocil:title> |
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-kubelet_authorization_mode_action:testaction:1</ocil:test_action_ref> | 109 | ········<ocil:test_action_ref>ocil:ssg-kubelet_authorization_mode_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_logging_ocil:questionnaire:1"> | ||
| 119 | ······<ocil:title>Ensure·Audit·Logging·is·Enabled</ocil:title> | ||
| 120 | ······<ocil:actions> | ||
| 121 | ········<ocil:test_action_ref>ocil:ssg-audit_logging_action:testaction:1</ocil:test_action_ref> | ||
| 122 | ······</ocil:actions> | ||
| 123 | ····</ocil:questionnaire> | ||
| 124 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_ | 112 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_iptables_util_chains_ocil:questionnaire:1"> |
| 125 | ······<ocil:title>kubelet·-· | 113 | ······<ocil:title>kubelet·-·Allow·Automatic·Firewall·Configuration</ocil:title> |
| 126 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 127 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_ | 115 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_iptables_util_chains_action:testaction:1</ocil:test_action_ref> |
| 128 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 129 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 130 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_server_cert_rotation_ocil:questionnaire:1"> | ||
| 131 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_worker_kubeconfig_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Verify·Group·Who·Owns·The·Worker·Kubeconfig·File</ocil:title> | ||
| Max diff block lines reached; 61449/73192 bytes (83.96%) of diff not shown. | |||
| Offset 72, 24 lines modified | Offset 72, 24 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="eks-node"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift"> | 79 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> |
| 87 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id="eks-node"> | ||
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ··</cpe-lang:platform-specification> | 89 | ··</cpe-lang:platform-specification> |
| 90 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> | 90 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> |
| 91 | ··<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> | 91 | ··<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> |
| 92 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> | 92 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> |
| 93 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.76</xccdf-1.2:version> | 93 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.76</xccdf-1.2:version> |
| 94 | ··<xccdf-1.2:metadata> | 94 | ··<xccdf-1.2:metadata> |
| 95 | ····<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> | 95 | ····<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> |
| Offset 19, 23 lines modified | Offset 19, 23 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:mozilla:firefox"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:mozilla:firefox"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Mozilla·Firefox</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Mozilla·Firefox</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-firefox-cpe-oval.xml">oval:ssg-installed_app_is_firefox:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-firefox-cpe-oval.xml">oval:ssg-installed_app_is_firefox:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-xccdf.xml"·timestamp="2025-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Firefox.·It·is·a·rendering·of | 40 | configuration·settings·for·Firefox.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 3488, 15 lines modified | Offset 3488, 15 lines modified | ||
| 3488 | ··············<xccdf-1.2:check-content-ref·href="ssg-firefox-ocil.xml"·name="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"/> | 3488 | ··············<xccdf-1.2:check-content-ref·href="ssg-firefox-ocil.xml"·name="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"/> |
| 3489 | ············</xccdf-1.2:check> | 3489 | ············</xccdf-1.2:check> |
| 3490 | ··········</xccdf-1.2:Rule> | 3490 | ··········</xccdf-1.2:Rule> |
| 3491 | ········</xccdf-1.2:Group> | 3491 | ········</xccdf-1.2:Group> |
| 3492 | ······</xccdf-1.2:Group> | 3492 | ······</xccdf-1.2:Group> |
| 3493 | ····</xccdf-1.2:Benchmark> | 3493 | ····</xccdf-1.2:Benchmark> |
| 3494 | ··</ds:component> | 3494 | ··</ds:component> |
| 3495 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-oval.xml"·timestamp="2025-0 | 3495 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-oval.xml"·timestamp="2025-03-01T22:08:00"> |
| 3496 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 3496 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 3497 | ······<oval-def:generator> | 3497 | ······<oval-def:generator> |
| 3498 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 3498 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 3499 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> | 3499 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> |
| 3500 | ········<oval:schema_version>5.11</oval:schema_version> | 3500 | ········<oval:schema_version>5.11</oval:schema_version> |
| 3501 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> | 3501 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> |
| 3502 | ······</oval-def:generator> | 3502 | ······</oval-def:generator> |
| Offset 5198, 403 lines modified | Offset 5198, 474 lines modified | ||
| 5198 | ··············<oval-def:literal_component>/distribution</oval-def:literal_component> | 5198 | ··············<oval-def:literal_component>/distribution</oval-def:literal_component> |
| 5199 | ············</oval-def:concat> | 5199 | ············</oval-def:concat> |
| 5200 | ··········</oval-def:unique> | 5200 | ··········</oval-def:unique> |
| 5201 | ········</oval-def:local_variable> | 5201 | ········</oval-def:local_variable> |
| 5202 | ······</oval-def:variables> | 5202 | ······</oval-def:variables> |
| 5203 | ····</oval-def:oval_definitions> | 5203 | ····</oval-def:oval_definitions> |
| 5204 | ··</ds:component> | 5204 | ··</ds:component> |
| 5205 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-ocil.xml"·timestamp="2025-0 | 5205 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-ocil.xml"·timestamp="2025-03-01T22:08:00"> |
| 5206 | ····<ocil:ocil> | 5206 | ····<ocil:ocil> |
| 5207 | ······<ocil:generator> | 5207 | ······<ocil:generator> |
| 5208 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 5208 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5209 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5209 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 5210 | ········<ocil:schema_version>2.0</ocil:schema_version> | 5210 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 5211 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 5211 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 5212 | ······</ocil:generator> | 5212 | ······</ocil:generator> |
| 5213 | ······<ocil:questionnaires> | 5213 | ······<ocil:questionnaires> |
| 5214 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5214 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-development_tools_ocil:questionnaire:1"> |
| 5215 | ··········<ocil:title>Disable·Firefox·Development·Tools</ocil:title> | ||
| 5215 | ··········<ocil:title>Firefox·must·prevent·the·user·from·quickly·deleting·data.</ocil:title> | ||
| 5216 | ··········<ocil:actions> | ||
| 5217 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-forget_button_action:testaction:1</ocil:test_action_ref> | ||
| 5218 | ··········</ocil:actions> | ||
| 5219 | ········</ocil:questionnaire> | ||
| 5220 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-extension_update_ocil:questionnaire:1"> | ||
| 5221 | ··········<ocil:title>Firefox·must·be·configured·to·not·automatically·update·installed·add-ons·and·plugins.</ocil:title> | ||
| 5222 | ··········<ocil:actions> | ||
| 5223 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-extension_update_action:testaction:1</ocil:test_action_ref> | ||
| 5224 | ··········</ocil:actions> | ||
| 5225 | ········</ocil:questionnaire> | ||
| 5226 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_update_ocil:questionnaire:1"> | ||
| 5227 | ··········<ocil:title>Disable·Installed·Search·Plugins·Update·Checking</ocil:title> | ||
| 5228 | ··········<ocil:actions> | 5216 | ··········<ocil:actions> |
| 5229 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5217 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-development_tools_action:testaction:1</ocil:test_action_ref> |
| 5230 | ··········</ocil:actions> | 5218 | ··········</ocil:actions> |
| 5231 | ········</ocil:questionnaire> | 5219 | ········</ocil:questionnaire> |
| 5232 | ········<ocil:questionnaire·id="ocil:ssg-firefox_p | 5220 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-pop-up_windows_ocil:questionnaire:1"> |
| 5233 | ··········<ocil:title> | 5221 | ··········<ocil:title>Enable·Firefox·Pop-up·Blocker</ocil:title> |
| 5234 | ··········<ocil:actions> | 5222 | ··········<ocil:actions> |
| 5235 | ············<ocil:test_action_ref>ocil:ssg-firefox_p | 5223 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-pop-up_windows_action:testaction:1</ocil:test_action_ref> |
| 5236 | ··········</ocil:actions> | 5224 | ··········</ocil:actions> |
| 5237 | ········</ocil:questionnaire> | 5225 | ········</ocil:questionnaire> |
| 5238 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5226 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-extension_recommendation_ocil:questionnaire:1"> |
| 5239 | ··········<ocil:title> | 5227 | ··········<ocil:title>Disabled·Firefox·Extension·Recommendations</ocil:title> |
| 5240 | ··········<ocil:actions> | 5228 | ··········<ocil:actions> |
| 5241 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5229 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-extension_recommendation_action:testaction:1</ocil:test_action_ref> |
| 5242 | ··········</ocil:actions> | 5230 | ··········</ocil:actions> |
| 5243 | ········</ocil:questionnaire> | 5231 | ········</ocil:questionnaire> |
| 5244 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5232 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-fingerprinting_protection_ocil:questionnaire:1"> |
| 5245 | ··········<ocil:title>Firefox· | 5233 | ··········<ocil:title>Enabled·Firefox·Fingerprinting·Protection</ocil:title> |
| 5246 | ··········<ocil:actions> | 5234 | ··········<ocil:actions> |
| 5247 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5235 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-fingerprinting_protection_action:testaction:1</ocil:test_action_ref> |
| 5248 | ··········</ocil:actions> | 5236 | ··········</ocil:actions> |
| 5249 | ········</ocil:questionnaire> | 5237 | ········</ocil:questionnaire> |
| 5250 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5238 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-telemetry_ocil:questionnaire:1"> |
| 5251 | ··········<ocil:title>Disable· | 5239 | ··········<ocil:title>Disable·Firefox·Telemetry</ocil:title> |
| 5252 | ··········<ocil:actions> | 5240 | ··········<ocil:actions> |
| 5253 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5241 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-telemetry_action:testaction:1</ocil:test_action_ref> |
| 5254 | ··········</ocil:actions> | 5242 | ··········</ocil:actions> |
| 5255 | ········</ocil:questionnaire> | 5243 | ········</ocil:questionnaire> |
| 5256 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5244 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-network_prediction_ocil:questionnaire:1"> |
| 5257 | ··········<ocil:title> | 5245 | ··········<ocil:title>Disable·Firefox·network·prediction</ocil:title> |
| 5258 | ··········<ocil:actions> | 5246 | ··········<ocil:actions> |
| 5259 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5247 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-network_prediction_action:testaction:1</ocil:test_action_ref> |
| 5260 | ··········</ocil:actions> | 5248 | ··········</ocil:actions> |
| 5261 | ········</ocil:questionnaire> | 5249 | ········</ocil:questionnaire> |
| 5262 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5250 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-private_browsing_ocil:questionnaire:1"> |
| 5263 | ··········<ocil:title> | 5251 | ··········<ocil:title>Firefox·private·browsing·must·be·disabled.</ocil:title> |
| 5264 | ··········<ocil:actions> | 5252 | ··········<ocil:actions> |
| 5265 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5253 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-private_browsing_action:testaction:1</ocil:test_action_ref> |
| 5266 | ··········</ocil:actions> | 5254 | ··········</ocil:actions> |
| 5267 | ········</ocil:questionnaire> | 5255 | ········</ocil:questionnaire> |
| 5268 | ········<ocil:questionnaire·id="ocil:ssg- | 5256 | ········<ocil:questionnaire·id="ocil:ssg-installed_firefox_version_supported_ocil:questionnaire:1"> |
| 5269 | ··········<ocil:title> | 5257 | ··········<ocil:title>Supported·Version·of·Firefox·Installed</ocil:title> |
| 5270 | ··········<ocil:actions> | 5258 | ··········<ocil:actions> |
| 5271 | ············<ocil:test_action_ref>ocil:ssg- | 5259 | ············<ocil:test_action_ref>ocil:ssg-installed_firefox_version_supported_action:testaction:1</ocil:test_action_ref> |
| 5272 | ··········</ocil:actions> | 5260 | ··········</ocil:actions> |
| 5273 | ········</ocil:questionnaire> | 5261 | ········</ocil:questionnaire> |
| 5274 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5262 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_suggestion_ocil:questionnaire:1"> |
| 5275 | ··········<ocil:title> | 5263 | ··········<ocil:title>Firefox·search·suggestions·must·be·disabled.</ocil:title> |
| 5276 | ··········<ocil:actions> | 5264 | ··········<ocil:actions> |
| 5277 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5265 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-search_suggestion_action:testaction:1</ocil:test_action_ref> |
| 5278 | ··········</ocil:actions> | 5266 | ··········</ocil:actions> |
| 5279 | ········</ocil:questionnaire> | 5267 | ········</ocil:questionnaire> |
| 5280 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_deprecated_ciphers_ocil:questionnaire:1"> | 5268 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_deprecated_ciphers_ocil:questionnaire:1"> |
| 5281 | ··········<ocil:title>Disable·Firefox·deprecated·ciphers</ocil:title> | 5269 | ··········<ocil:title>Disable·Firefox·deprecated·ciphers</ocil:title> |
| 5282 | ··········<ocil:actions> | 5270 | ··········<ocil:actions> |
| 5283 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_deprecated_ciphers_action:testaction:1</ocil:test_action_ref> | 5271 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_deprecated_ciphers_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 45806/57312 bytes (79.92%) of diff not shown. | |||
| Offset 3, 394 lines modified | Offset 3, 465 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 10 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-development_tools_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Disable·Firefox·Development·Tools</ocil:title> | ||
| 11 | ······<ocil:title>Firefox·must·prevent·the·user·from·quickly·deleting·data.</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-forget_button_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-extension_update_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Firefox·must·be·configured·to·not·automatically·update·installed·add-ons·and·plugins.</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-extension_update_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_update_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Disable·Installed·Search·Plugins·Update·Checking</ocil:title> | ||
| 24 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 13 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-development_tools_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 16 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-pop-up_windows_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 17 | ······<ocil:title>Enable·Firefox·Pop-up·Blocker</ocil:title> |
| 30 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 19 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-pop-up_windows_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 22 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-extension_recommendation_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 23 | ······<ocil:title>Disabled·Firefox·Extension·Recommendations</ocil:title> |
| 36 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 25 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-extension_recommendation_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 28 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-fingerprinting_protection_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Firefox· | 29 | ······<ocil:title>Enabled·Firefox·Fingerprinting·Protection</ocil:title> |
| 42 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 31 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-fingerprinting_protection_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 34 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-telemetry_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Disable· | 35 | ······<ocil:title>Disable·Firefox·Telemetry</ocil:title> |
| 48 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 37 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-telemetry_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 40 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-network_prediction_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 41 | ······<ocil:title>Disable·Firefox·network·prediction</ocil:title> |
| 54 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 43 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-network_prediction_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 46 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-private_browsing_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 47 | ······<ocil:title>Firefox·private·browsing·must·be·disabled.</ocil:title> |
| 60 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 49 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-private_browsing_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"> | ||
| 65 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-installed_firefox_version_supported_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Supported·Version·of·Firefox·Installed</ocil:title> | ||
| 66 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-installed_firefox_version_supported_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 58 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_suggestion_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 59 | ······<ocil:title>Firefox·search·suggestions·must·be·disabled.</ocil:title> |
| 72 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 61 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-search_suggestion_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_deprecated_ciphers_ocil:questionnaire:1"> | 64 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_deprecated_ciphers_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Disable·Firefox·deprecated·ciphers</ocil:title> | 65 | ······<ocil:title>Disable·Firefox·deprecated·ciphers</ocil:title> |
| 78 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_deprecated_ciphers_action:testaction:1</ocil:test_action_ref> | 67 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_deprecated_ciphers_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-e | 70 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-extension_update_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 71 | ······<ocil:title>Firefox·must·be·configured·to·not·automatically·update·installed·add-ons·and·plugins.</ocil:title> |
| 84 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-e | 73 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-extension_update_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 76 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-auto-download_actions_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Disable· | 77 | ······<ocil:title>Disable·auto-download·for·proscribed·MIME·types.</ocil:title> |
| 90 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 79 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-auto-download_actions_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-dod_root_certificate_installed_ocil:questionnaire:1"> | ||
| 95 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-content_blocker_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Ensure·the·Content·Blocker·uBlock·Origin·is·Installed</ocil:title> | ||
| 96 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 85 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-content_blocker_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 88 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-dod_root_certificate_installed_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 89 | ······<ocil:title>The·DoD·Root·Certificate·Exists</ocil:title> |
| 102 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 91 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-dod_root_certificate_installed_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 94 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-enhanced_tracking_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 95 | ······<ocil:title>Enabled·Firefox·Enhanced·Tracking·Protection</ocil:title> |
| 108 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 97 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-enhanced_tracking_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-a | 100 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_resizing_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 101 | ······<ocil:title>Disable·JavaScript's·Moving·Or·Resizing·Windows·Capability</ocil:title> |
| 114 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-a | 103 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_resizing_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 106 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 107 | ······<ocil:title>Enable·Shared·System·Certificates</ocil:title> |
| 120 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 109 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-enable_ca_trust_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 112 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-forget_button_ocil:questionnaire:1"> |
| 125 | ······<ocil:title> | 113 | ······<ocil:title>Firefox·must·prevent·the·user·from·quickly·deleting·data.</ocil:title> |
| 126 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| Max diff block lines reached; 37574/50030 bytes (75.10%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····304 | 2 | -rw-r--r--···0········0········0·····3044·2025-03-01·08:08:00.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0··372 | 3 | -rw-r--r--···0········0········0··3721568·2025-03-01·08:08:00.000000·data.tar.xz |
| Offset 15999, 146 lines modified | Offset 15999, 146 lines modified | ||
| 0003e7e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003e7e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003e7f0:·2223·6964·6d31·3736·3722·2074·6162·696e··"#idm1767"·tabin | 0003e7f0:·2223·6964·6d31·3736·3722·2074·6162·696e··"#idm1767"·tabin | ||
| 0003e800:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003e800:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003e810:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003e810:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003e820:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003e820:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003e830:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003e830:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003e840:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003e840:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003e850:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003e860:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003e870:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003e880:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003e890:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003e8a0:·6d31·3736·3722·3e3c·7461·626c·6520·636c··m1767"><table·cl | |||
| 0003e8b0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003e8c0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003e8d0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003e8e0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003e8f0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003e900:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003e910:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003e920:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003e930:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003e940:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003e950:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003e960:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003e970:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003e980:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003e990:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003e9a0:·3e0a·666f·7220·6620·696e·202f·6574·632f··>.for·f·in·/etc/ | |||
| 0003e9b0:·7375·646f·6572·7320·2f65·7463·2f73·7564··sudoers·/etc/sud | |||
| 0003e9c0:·6f65·7273·2e64·2f2a·203b·2064·6f0a·2020··oers.d/*·;·do.·· | |||
| 0003e9d0:·6966·205b·2021·202d·6520·2224·6622·205d··if·[·!·-e·"$f"·] | |||
| 0003e9e0:·203b·2074·6865·6e0a·2020·2020·636f·6e74···;·then.····cont | |||
| 0003e9f0:·696e·7565·0a20·2066·690a·2020·6d61·7463··inue.··fi.··matc | |||
| 0003ea00:·6869·6e67·5f6c·6973·743d·2428·6772·6570··hing_list=$(grep | |||
| 0003ea10:·202d·5020·275e·283f·2123·292e·2a5b·5c73···-P·'^(?!#).*[\s | |||
| 0003ea20:·5d2b·5c21·6175·7468·656e·7469·6361·7465··]+\!authenticate | |||
| 0003ea30:·2e2a·2427·2024·6620·7c20·756e·6971·2029··.*$'·$f·|·uniq·) | |||
| 0003ea40:·0a20·2069·6620·2120·7465·7374·202d·7a20··.··if·!·test·-z· | |||
| 0003ea50:·2224·6d61·7463·6869·6e67·5f6c·6973·7422··"$matching_list" | |||
| 0003ea60:·3b20·7468·656e·0a20·2020·2077·6869·6c65··;·then.····while | |||
| 0003ea70:·2049·4653·3d20·7265·6164·202d·7220·656e···IFS=·read·-r·en | |||
| 0003ea80:·7472·793b·2064·6f0a·2020·2020·2020·2320··try;·do.······#· | |||
| 0003ea90:·636f·6d6d·656e·7420·6f75·7420·2221·6175··comment·out·"!au | |||
| 0003eaa0:·7468·656e·7469·6361·7465·2220·6d61·7463··thenticate"·matc | |||
| 0003eab0:·6865·7320·746f·2070·7265·7365·7276·6520··hes·to·preserve· | |||
| 0003eac0:·7573·6572·2064·6174·610a·2020·2020·2020··user·data.······ | |||
| 0003ead0:·7365·6420·2d69·2022·732f·5e24·7b65·6e74··sed·-i·"s/^${ent | |||
| 0003eae0:·7279·7d24·2f23·2026·616d·703b·2f67·2220··ry}$/#·&/g"· | |||
| 0003eaf0:·2466·0a20·2020·2064·6f6e·6520·266c·743b··$f.····done·< | |||
| 0003eb00:·266c·743b·266c·743b·2022·246d·6174·6368··<<·"$match | |||
| 0003eb10:·696e·675f·6c69·7374·220a·0a20·2020·202f··ing_list"..····/ | |||
| 0003eb20:·7573·722f·7362·696e·2f76·6973·7564·6f20··usr/sbin/visudo· | |||
| 0003eb30:·2d63·6620·2466·2026·616d·703b·2667·743b··-cf·$f·&> | |||
| 0003eb40:·202f·6465·762f·6e75·6c6c·207c·7c20·6563···/dev/null·||·ec | |||
| 0003eb50:·686f·2022·4661·696c·2074·6f20·7661·6c69··ho·"Fail·to·vali | |||
| 0003eb60:·6461·7465·2024·6620·7769·7468·2076·6973··date·$f·with·vis | |||
| 0003eb70:·7564·6f22·0a20·2066·690a·646f·6e65·0a3c··udo".··fi.done.< | |||
| 0003eb80:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003eb90:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003eba0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003ebb0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003ebc0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003ebd0:·2223·6964·6d31·3736·3822·2074·6162·696e··"#idm1768"·tabin | |||
| 0003ebe0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003ebf0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003ec00:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003ec10:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003ec20:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003e | 0003ec30:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003e | 0003ec40:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003e | 0003ec50:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003e | 0003ec60:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003e | 0003ec70:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003e8a0:·2269·646d·3137·3637·223e·3c74·6162·6c65··"idm1767"><table | |||
| 0003e8b0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003e8c0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003e8d0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003e8e0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003e8f0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003e900:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003e910:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003e920:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003e930:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003e940:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003e950:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003e960:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003e970:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003e980:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003e990:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003e9a0:·6f64·653e·2d20·6e61·6d65·3a20·4669·6e64··ode>-·name:·Find | |||
| 0003e9b0:·202f·6574·632f·7375·646f·6572·732e·642f···/etc/sudoers.d/ | |||
| 0003e9c0:·2066·696c·6573·0a20·2061·6e73·6962·6c65···files.··ansible | |||
| 0003e9d0:·2e62·7569·6c74·696e·2e66·696e·643a·0a20··.builtin.find:.· | |||
| 0003e9e0:·2020·2070·6174·6873·3a0a·2020·2020·2d20·····paths:.····-· | |||
| 0003e9f0:·2f65·7463·2f73·7564·6f65·7273·2e64·2f0a··/etc/sudoers.d/. | |||
| 0003ea00:·2020·7265·6769·7374·6572·3a20·7375·646f····register:·sudo | |||
| 0003ea10:·6572·730a·2020·7461·6773·3a0a·2020·2d20··ers.··tags:.··-· | |||
| 0003ea20:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003ea30:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | |||
| 0003ea40:·2d35·332d·4941·2d31·310a·2020·2d20·6c6f··-53-IA-11.··-·lo | |||
| 0003ea50:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003ea60:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003ea70:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003ea80:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003ea90:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | |||
| 0003eaa0:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | |||
| 0003eab0:·202d·2073·7564·6f5f·7265·6d6f·7665·5f6e···-·sudo_remove_n | |||
| 0003eac0:·6f5f·6175·7468·656e·7469·6361·7465·0a0a··o_authenticate.. | |||
| 0003ead0:·2d20·6e61·6d65·3a20·5265·6d6f·7665·206c··-·name:·Remove·l | |||
| 0003eae0:·696e·6573·2063·6f6e·7461·696e·696e·6720··ines·containing· | |||
| 0003eaf0:·2161·7574·6865·6e74·6963·6174·6520·6672··!authenticate·fr | |||
| 0003eb00:·6f6d·2073·7564·6f65·7273·2066·696c·6573··om·sudoers·files | |||
| 0003eb10:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | |||
| 0003eb20:·696e·2e72·6570·6c61·6365·3a0a·2020·2020··in.replace:.···· | |||
| 0003eb30:·7265·6765·7870·3a20·285e·283f·2123·292e··regexp:·(^(?!#). | |||
| 0003eb40:·2a5b·5c73·5d2b·5c21·6175·7468·656e·7469··*[\s]+\!authenti | |||
| 0003eb50:·6361·7465·2e2a·2429·0a20·2020·2072·6570··cate.*$).····rep | |||
| 0003eb60:·6c61·6365·3a20·2723·205c·6726·6c74·3b31··lace:·'#·\g<1 | |||
| 0003eb70:·2667·743b·270a·2020·2020·7061·7468·3a20··>'.····path:· | |||
| 0003eb80:·277b·7b20·6974·656d·2e70·6174·6820·7d7d··'{{·item.path·}} | |||
| 0003eb90:·270a·2020·2020·7661·6c69·6461·7465·3a20··'.····validate:· | |||
| 0003eba0:·2f75·7372·2f73·6269·6e2f·7669·7375·646f··/usr/sbin/visudo | |||
| 0003ebb0:·202d·6366·2025·730a·2020·7769·7468·5f69···-cf·%s.··with_i | |||
| 0003ebc0:·7465·6d73·3a0a·2020·2d20·7061·7468·3a20··tems:.··-·path:· | |||
| 0003ebd0:·2f65·7463·2f73·7564·6f65·7273·0a20·202d··/etc/sudoers.··- | |||
| 0003ebe0:·2027·7b7b·2073·7564·6f65·7273·2e66·696c···'{{·sudoers.fil | |||
| Max diff block lines reached; 1016880/1035676 bytes (98.19%) of diff not shown. | |||
| Offset 227, 14 lines modified | Offset 227, 35 lines modified | ||
| 227 | ···························1.7,·SR·1.8,·SR·1.9 | 227 | ···························1.7,·SR·1.8,·SR·1.9 |
| 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 233 | ···························SRG-OS-000373-GPOS-00158 | 233 | ···························SRG-OS-000373-GPOS-00158 |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 239 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 240 | ··if·[·!·-e·"$f"·]·;·then | ||
| 241 | ····continue | ||
| 242 | ··fi | ||
| 243 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 244 | ··if·!·test·-z·"$matching_list";·then | ||
| 245 | ····while·IFS=·read·-r·entry;·do | ||
| 246 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 247 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 248 | ····done·<<<·"$matching_list" | ||
| 249 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 250 | visudo" | ||
| 251 | ··fi | ||
| 252 | done | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 253 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 254 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 255 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 256 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 257 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Find·/etc/sudoers.d/·files | 258 | -·name:·Find·/etc/sudoers.d/·files |
| 240 | ··ansible.builtin.find: | 259 | ··ansible.builtin.find: |
| Offset 265, 35 lines modified | Offset 286, 14 lines modified | ||
| 265 | ··-·NIST-800-53-IA-11 | 286 | ··-·NIST-800-53-IA-11 |
| 266 | ··-·low_complexity | 287 | ··-·low_complexity |
| 267 | ··-·low_disruption | 288 | ··-·low_disruption |
| 268 | ··-·medium_severity | 289 | ··-·medium_severity |
| 269 | ··-·no_reboot_needed | 290 | ··-·no_reboot_needed |
| 270 | ··-·restrict_strategy | 291 | ··-·restrict_strategy |
| 271 | ··-·sudo_remove_no_authenticate | 292 | ··-·sudo_remove_no_authenticate |
| 272 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 273 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 274 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 275 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 276 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 277 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 278 | ··if·[·!·-e·"$f"·]·;·then | ||
| 279 | ····continue | ||
| 280 | ··fi | ||
| 281 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 282 | ··if·!·test·-z·"$matching_list";·then | ||
| 283 | ····while·IFS=·read·-r·entry;·do | ||
| 284 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 285 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 286 | ····done·<<<·"$matching_list" | ||
| 287 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 288 | visudo" | ||
| 289 | ··fi | ||
| 290 | done | ||
| 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 292 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 293 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 294 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 295 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 296 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 297 | ············Without·re-authentication,·users·may·access·resources·or·perform | 299 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 314, 14 lines modified | Offset 314, 35 lines modified | ||
| 314 | ···························1.7,·SR·1.8,·SR·1.9 | 314 | ···························1.7,·SR·1.8,·SR·1.9 |
| 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 320 | ···························SRG-OS-000373-GPOS-00158 | 320 | ···························SRG-OS-000373-GPOS-00158 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 327 | ··if·[·!·-e·"$f"·]·;·then | ||
| 328 | ····continue | ||
| 329 | ··fi | ||
| 330 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 331 | ··if·!·test·-z·"$matching_list";·then | ||
| 332 | ····while·IFS=·read·-r·entry;·do | ||
| 333 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 334 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 335 | ····done·<<<·"$matching_list" | ||
| 336 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 337 | visudo" | ||
| 338 | ··fi | ||
| 339 | done | ||
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 340 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 341 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 342 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 343 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 344 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 326 | -·name:·Find·/etc/sudoers.d/·files | 345 | -·name:·Find·/etc/sudoers.d/·files |
| 327 | ··ansible.builtin.find: | 346 | ··ansible.builtin.find: |
| Offset 352, 35 lines modified | Offset 373, 14 lines modified | ||
| 352 | ··-·NIST-800-53-IA-11 | 373 | ··-·NIST-800-53-IA-11 |
| 353 | ··-·low_complexity | 374 | ··-·low_complexity |
| 354 | ··-·low_disruption | 375 | ··-·low_disruption |
| 355 | ··-·medium_severity | 376 | ··-·medium_severity |
| 356 | ··-·no_reboot_needed | 377 | ··-·no_reboot_needed |
| 357 | ··-·restrict_strategy | 378 | ··-·restrict_strategy |
| 358 | ··-·sudo_remove_nopasswd | 379 | ··-·sudo_remove_nopasswd |
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 360 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 361 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 362 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 363 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 364 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 365 | ··if·[·!·-e·"$f"·]·;·then | ||
| 366 | ····continue | ||
| 367 | ··fi | ||
| 368 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 369 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 118478/123926 bytes (95.60%) of diff not shown. | |||
| Offset 16020, 146 lines modified | Offset 16020, 146 lines modified | ||
| 0003e930:·6765·743d·2223·6964·6d31·3736·3722·2074··get="#idm1767"·t | 0003e930:·6765·743d·2223·6964·6d31·3736·3722·2074··get="#idm1767"·t | ||
| 0003e940:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003e940:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003e950:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003e950:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003e960:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003e960:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003e970:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003e970:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003e980:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003e980:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003e990:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003e990:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003e9a0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003e9b0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003e9c0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003e9d0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003e9e0:·3d22·6964·6d31·3736·3722·3e3c·7461·626c··="idm1767"><tabl | |||
| 0003e9f0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ea00:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ea10:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ea20:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ea30:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ea40:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ea50:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ea60:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ea70:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ea80:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ea90:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003eaa0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003eab0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003eac0:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 0003ead0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003eae0:·636f·6465·3e0a·666f·7220·6620·696e·202f··code>.for·f·in·/ | |||
| 0003eaf0:·6574·632f·7375·646f·6572·7320·2f65·7463··etc/sudoers·/etc | |||
| 0003eb00:·2f73·7564·6f65·7273·2e64·2f2a·203b·2064··/sudoers.d/*·;·d | |||
| 0003eb10:·6f0a·2020·6966·205b·2021·202d·6520·2224··o.··if·[·!·-e·"$ | |||
| 0003eb20:·6622·205d·203b·2074·6865·6e0a·2020·2020··f"·]·;·then.···· | |||
| 0003eb30:·636f·6e74·696e·7565·0a20·2066·690a·2020··continue.··fi.·· | |||
| 0003eb40:·6d61·7463·6869·6e67·5f6c·6973·743d·2428··matching_list=$( | |||
| 0003eb50:·6772·6570·202d·5020·275e·283f·2123·292e··grep·-P·'^(?!#). | |||
| 0003eb60:·2a5b·5c73·5d2b·5c21·6175·7468·656e·7469··*[\s]+\!authenti | |||
| 0003eb70:·6361·7465·2e2a·2427·2024·6620·7c20·756e··cate.*$'·$f·|·un | |||
| 0003eb80:·6971·2029·0a20·2069·6620·2120·7465·7374··iq·).··if·!·test | |||
| 0003eb90:·202d·7a20·2224·6d61·7463·6869·6e67·5f6c···-z·"$matching_l | |||
| 0003eba0:·6973·7422·3b20·7468·656e·0a20·2020·2077··ist";·then.····w | |||
| 0003ebb0:·6869·6c65·2049·4653·3d20·7265·6164·202d··hile·IFS=·read·- | |||
| 0003ebc0:·7220·656e·7472·793b·2064·6f0a·2020·2020··r·entry;·do.···· | |||
| 0003ebd0:·2020·2320·636f·6d6d·656e·7420·6f75·7420····#·comment·out· | |||
| 0003ebe0:·2221·6175·7468·656e·7469·6361·7465·2220··"!authenticate"· | |||
| 0003ebf0:·6d61·7463·6865·7320·746f·2070·7265·7365··matches·to·prese | |||
| 0003ec00:·7276·6520·7573·6572·2064·6174·610a·2020··rve·user·data.·· | |||
| 0003ec10:·2020·2020·7365·6420·2d69·2022·732f·5e24······sed·-i·"s/^$ | |||
| 0003ec20:·7b65·6e74·7279·7d24·2f23·2026·616d·703b··{entry}$/#·& | |||
| 0003ec30:·2f67·2220·2466·0a20·2020·2064·6f6e·6520··/g"·$f.····done· | |||
| 0003ec40:·266c·743b·266c·743b·266c·743b·2022·246d··<<<·"$m | |||
| 0003ec50:·6174·6368·696e·675f·6c69·7374·220a·0a20··atching_list"..· | |||
| 0003ec60:·2020·202f·7573·722f·7362·696e·2f76·6973·····/usr/sbin/vis | |||
| 0003ec70:·7564·6f20·2d63·6620·2466·2026·616d·703b··udo·-cf·$f·& | |||
| 0003ec80:·2667·743b·202f·6465·762f·6e75·6c6c·207c··>·/dev/null·| | |||
| 0003ec90:·7c20·6563·686f·2022·4661·696c·2074·6f20··|·echo·"Fail·to· | |||
| 0003eca0:·7661·6c69·6461·7465·2024·6620·7769·7468··validate·$f·with | |||
| 0003ecb0:·2076·6973·7564·6f22·0a20·2066·690a·646f···visudo".··fi.do | |||
| 0003ecc0:·6e65·0a3c·2f63·6f64·653e·3c2f·7072·653e··ne.</code></pre> | |||
| 0003ecd0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003ece0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003ecf0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003ed00:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003ed10:·6765·743d·2223·6964·6d31·3736·3822·2074··get="#idm1768"·t | |||
| 0003ed20:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ed30:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ed40:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ed50:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ed60:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003ed70:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003e | 0003ed80:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003e | 0003ed90:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003e9c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003e9d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003e9e0:·2069·643d·2269·646d·3137·3637·223e·3c74···id="idm1767"><t | |||
| 0003e9f0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003ea00:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003ea10:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ea20:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003ea30:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003ea40:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003ea50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ea60:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003ea70:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ea80:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003ea90:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003eaa0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003eab0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003eac0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003ead0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003eae0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003eaf0:·4669·6e64·202f·6574·632f·7375·646f·6572··Find·/etc/sudoer | |||
| 0003eb00:·732e·642f·2066·696c·6573·0a20·2061·6e73··s.d/·files.··ans | |||
| 0003eb10:·6962·6c65·2e62·7569·6c74·696e·2e66·696e··ible.builtin.fin | |||
| 0003eb20:·643a·0a20·2020·2070·6174·6873·3a0a·2020··d:.····paths:.·· | |||
| 0003eb30:·2020·2d20·2f65·7463·2f73·7564·6f65·7273····-·/etc/sudoers | |||
| 0003eb40:·2e64·2f0a·2020·7265·6769·7374·6572·3a20··.d/.··register:· | |||
| 0003eb50:·7375·646f·6572·730a·2020·7461·6773·3a0a··sudoers.··tags:. | |||
| 0003eb60:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003eb70:·434d·2d36·2861·290a·2020·2d20·4e49·5354··CM-6(a).··-·NIST | |||
| 0003eb80:·2d38·3030·2d35·332d·4941·2d31·310a·2020··-800-53-IA-11.·· | |||
| 0003eb90:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003eba0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003ebb0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003ebc0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003ebd0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003ebe0:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | |||
| 0003ebf0:·6779·0a20·202d·2073·7564·6f5f·7265·6d6f··gy.··-·sudo_remo | |||
| 0003ec00:·7665·5f6e·6f5f·6175·7468·656e·7469·6361··ve_no_authentica | |||
| 0003ec10:·7465·0a0a·2d20·6e61·6d65·3a20·5265·6d6f··te..-·name:·Remo | |||
| 0003ec20:·7665·206c·696e·6573·2063·6f6e·7461·696e··ve·lines·contain | |||
| 0003ec30:·696e·6720·2161·7574·6865·6e74·6963·6174··ing·!authenticat | |||
| 0003ec40:·6520·6672·6f6d·2073·7564·6f65·7273·2066··e·from·sudoers·f | |||
| 0003ec50:·696c·6573·0a20·2061·6e73·6962·6c65·2e62··iles.··ansible.b | |||
| 0003ec60:·7569·6c74·696e·2e72·6570·6c61·6365·3a0a··uiltin.replace:. | |||
| 0003ec70:·2020·2020·7265·6765·7870·3a20·285e·283f······regexp:·(^(? | |||
| 0003ec80:·2123·292e·2a5b·5c73·5d2b·5c21·6175·7468··!#).*[\s]+\!auth | |||
| 0003ec90:·656e·7469·6361·7465·2e2a·2429·0a20·2020··enticate.*$).··· | |||
| 0003eca0:·2072·6570·6c61·6365·3a20·2723·205c·6726···replace:·'#·\g& | |||
| 0003ecb0:·6c74·3b31·2667·743b·270a·2020·2020·7061··lt;1>'.····pa | |||
| 0003ecc0:·7468·3a20·277b·7b20·6974·656d·2e70·6174··th:·'{{·item.pat | |||
| 0003ecd0:·6820·7d7d·270a·2020·2020·7661·6c69·6461··h·}}'.····valida | |||
| 0003ece0:·7465·3a20·2f75·7372·2f73·6269·6e2f·7669··te:·/usr/sbin/vi | |||
| 0003ecf0:·7375·646f·202d·6366·2025·730a·2020·7769··sudo·-cf·%s.··wi | |||
| 0003ed00:·7468·5f69·7465·6d73·3a0a·2020·2d20·7061··th_items:.··-·pa | |||
| 0003ed10:·7468·3a20·2f65·7463·2f73·7564·6f65·7273··th:·/etc/sudoers | |||
| 0003ed20:·0a20·202d·2027·7b7b·2073·7564·6f65·7273··.··-·'{{·sudoers | |||
| 0003ed30:·2e66·696c·6573·207d·7d27·0a20·2074·6167··.files·}}'.··tag | |||
| Max diff block lines reached; 1166750/1185546 bytes (98.41%) of diff not shown. | |||
| Offset 231, 14 lines modified | Offset 231, 35 lines modified | ||
| 231 | ···························1.7,·SR·1.8,·SR·1.9 | 231 | ···························1.7,·SR·1.8,·SR·1.9 |
| 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 237 | ···························SRG-OS-000373-GPOS-00158 | 237 | ···························SRG-OS-000373-GPOS-00158 |
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 243 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 244 | ··if·[·!·-e·"$f"·]·;·then | ||
| 245 | ····continue | ||
| 246 | ··fi | ||
| 247 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 248 | ··if·!·test·-z·"$matching_list";·then | ||
| 249 | ····while·IFS=·read·-r·entry;·do | ||
| 250 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 251 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 252 | ····done·<<<·"$matching_list" | ||
| 253 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 254 | visudo" | ||
| 255 | ··fi | ||
| 256 | done | ||
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 258 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 259 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 260 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 261 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 243 | -·name:·Find·/etc/sudoers.d/·files | 262 | -·name:·Find·/etc/sudoers.d/·files |
| 244 | ··ansible.builtin.find: | 263 | ··ansible.builtin.find: |
| Offset 269, 35 lines modified | Offset 290, 14 lines modified | ||
| 269 | ··-·NIST-800-53-IA-11 | 290 | ··-·NIST-800-53-IA-11 |
| 270 | ··-·low_complexity | 291 | ··-·low_complexity |
| 271 | ··-·low_disruption | 292 | ··-·low_disruption |
| 272 | ··-·medium_severity | 293 | ··-·medium_severity |
| 273 | ··-·no_reboot_needed | 294 | ··-·no_reboot_needed |
| 274 | ··-·restrict_strategy | 295 | ··-·restrict_strategy |
| 275 | ··-·sudo_remove_no_authenticate | 296 | ··-·sudo_remove_no_authenticate |
| 276 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 277 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 278 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 279 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 280 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 281 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 282 | ··if·[·!·-e·"$f"·]·;·then | ||
| 283 | ····continue | ||
| 284 | ··fi | ||
| 285 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 286 | ··if·!·test·-z·"$matching_list";·then | ||
| 287 | ····while·IFS=·read·-r·entry;·do | ||
| 288 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 289 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 290 | ····done·<<<·"$matching_list" | ||
| 291 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 292 | visudo" | ||
| 293 | ··fi | ||
| 294 | done | ||
| 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 298 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 299 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 300 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 301 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 302 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 301 | ············Without·re-authentication,·users·may·access·resources·or·perform | 303 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 318, 14 lines modified | Offset 318, 35 lines modified | ||
| 318 | ···························1.7,·SR·1.8,·SR·1.9 | 318 | ···························1.7,·SR·1.8,·SR·1.9 |
| 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 324 | ···························SRG-OS-000373-GPOS-00158 | 324 | ···························SRG-OS-000373-GPOS-00158 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 330 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 331 | ··if·[·!·-e·"$f"·]·;·then | ||
| 332 | ····continue | ||
| 333 | ··fi | ||
| 334 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 335 | ··if·!·test·-z·"$matching_list";·then | ||
| 336 | ····while·IFS=·read·-r·entry;·do | ||
| 337 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 338 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 339 | ····done·<<<·"$matching_list" | ||
| 340 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 341 | visudo" | ||
| 342 | ··fi | ||
| 343 | done | ||
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 330 | -·name:·Find·/etc/sudoers.d/·files | 349 | -·name:·Find·/etc/sudoers.d/·files |
| 331 | ··ansible.builtin.find: | 350 | ··ansible.builtin.find: |
| Offset 356, 35 lines modified | Offset 377, 14 lines modified | ||
| 356 | ··-·NIST-800-53-IA-11 | 377 | ··-·NIST-800-53-IA-11 |
| 357 | ··-·low_complexity | 378 | ··-·low_complexity |
| 358 | ··-·low_disruption | 379 | ··-·low_disruption |
| 359 | ··-·medium_severity | 380 | ··-·medium_severity |
| 360 | ··-·no_reboot_needed | 381 | ··-·no_reboot_needed |
| 361 | ··-·restrict_strategy | 382 | ··-·restrict_strategy |
| 362 | ··-·sudo_remove_nopasswd | 383 | ··-·sudo_remove_nopasswd |
| 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 364 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 365 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 366 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 367 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 368 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 369 | ··if·[·!·-e·"$f"·]·;·then | ||
| 370 | ····continue | ||
| 371 | ··fi | ||
| 372 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 373 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 137047/142495 bytes (96.18%) of diff not shown. | |||
| Offset 14774, 147 lines modified | Offset 14774, 147 lines modified | ||
| 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00039b60:·743d·2223·6964·6d31·3736·3722·2074·6162··t="#idm1767"·tab | 00039b60:·743d·2223·6964·6d31·3736·3722·2074·6162··t="#idm1767"·tab | ||
| 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 00039bc0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 00039bd0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 00039be0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00039bf0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00039c00:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00039c10:·6964·6d31·3736·3722·3e3c·7461·626c·6520··idm1767"><table· | |||
| 00039c20:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00039c30:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00039c40:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00039c50:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00039c60:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00039c70:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00039c80:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00039c90:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00039ca0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039cb0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00039cc0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00039cd0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00039ce0:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 00039cf0:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 00039d00:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00039d10:·6465·3e0a·666f·7220·6620·696e·202f·6574··de>.for·f·in·/et | |||
| 00039d20:·632f·7375·646f·6572·7320·2f65·7463·2f73··c/sudoers·/etc/s | |||
| 00039d30:·7564·6f65·7273·2e64·2f2a·203b·2064·6f0a··udoers.d/*·;·do. | |||
| 00039d40:·2020·6966·205b·2021·202d·6520·2224·6622····if·[·!·-e·"$f" | |||
| 00039d50:·205d·203b·2074·6865·6e0a·2020·2020·636f···]·;·then.····co | |||
| 00039d60:·6e74·696e·7565·0a20·2066·690a·2020·6d61··ntinue.··fi.··ma | |||
| 00039d70:·7463·6869·6e67·5f6c·6973·743d·2428·6772··tching_list=$(gr | |||
| 00039d80:·6570·202d·5020·275e·283f·2123·292e·2a5b··ep·-P·'^(?!#).*[ | |||
| 00039d90:·5c73·5d2b·5c21·6175·7468·656e·7469·6361··\s]+\!authentica | |||
| 00039da0:·7465·2e2a·2427·2024·6620·7c20·756e·6971··te.*$'·$f·|·uniq | |||
| 00039db0:·2029·0a20·2069·6620·2120·7465·7374·202d···).··if·!·test·- | |||
| 00039dc0:·7a20·2224·6d61·7463·6869·6e67·5f6c·6973··z·"$matching_lis | |||
| 00039dd0:·7422·3b20·7468·656e·0a20·2020·2077·6869··t";·then.····whi | |||
| 00039de0:·6c65·2049·4653·3d20·7265·6164·202d·7220··le·IFS=·read·-r· | |||
| 00039df0:·656e·7472·793b·2064·6f0a·2020·2020·2020··entry;·do.······ | |||
| 00039e00:·2320·636f·6d6d·656e·7420·6f75·7420·2221··#·comment·out·"! | |||
| 00039e10:·6175·7468·656e·7469·6361·7465·2220·6d61··authenticate"·ma | |||
| 00039e20:·7463·6865·7320·746f·2070·7265·7365·7276··tches·to·preserv | |||
| 00039e30:·6520·7573·6572·2064·6174·610a·2020·2020··e·user·data.···· | |||
| 00039e40:·2020·7365·6420·2d69·2022·732f·5e24·7b65····sed·-i·"s/^${e | |||
| 00039e50:·6e74·7279·7d24·2f23·2026·616d·703b·2f67··ntry}$/#·&/g | |||
| 00039e60:·2220·2466·0a20·2020·2064·6f6e·6520·266c··"·$f.····done·&l | |||
| 00039e70:·743b·266c·743b·266c·743b·2022·246d·6174··t;<<·"$mat | |||
| 00039e80:·6368·696e·675f·6c69·7374·220a·0a20·2020··ching_list"..··· | |||
| 00039e90:·202f·7573·722f·7362·696e·2f76·6973·7564···/usr/sbin/visud | |||
| 00039ea0:·6f20·2d63·6620·2466·2026·616d·703b·2667··o·-cf·$f·&&g | |||
| 00039eb0:·743b·202f·6465·762f·6e75·6c6c·207c·7c20··t;·/dev/null·||· | |||
| 00039ec0:·6563·686f·2022·4661·696c·2074·6f20·7661··echo·"Fail·to·va | |||
| 00039ed0:·6c69·6461·7465·2024·6620·7769·7468·2076··lidate·$f·with·v | |||
| 00039ee0:·6973·7564·6f22·0a20·2066·690a·646f·6e65··isudo".··fi.done | |||
| 00039ef0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00039f00:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00039f10:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00039f20:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00039f30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00039f40:·743d·2223·6964·6d31·3736·3822·2074·6162··t="#idm1768"·tab | |||
| 00039f50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00039f60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00039f70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00039f80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00039f90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00039 | 00039fa0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 00039 | 00039fb0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 00039 | 00039fc0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 00039 | 00039fd0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 00039 | 00039fe0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 00039c10:·643d·2269·646d·3137·3637·223e·3c74·6162··d="idm1767"><tab | |||
| 00039c20:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00039c30:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00039c40:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00039c50:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00039c60:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00039c70:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00039c80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00039c90:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00039ca0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039cb0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00039cc0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00039cd0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00039ce0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00039cf0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 00039d00:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00039d10:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4669··<code>-·name:·Fi | |||
| 00039d20:·6e64·202f·6574·632f·7375·646f·6572·732e··nd·/etc/sudoers. | |||
| 00039d30:·642f·2066·696c·6573·0a20·2061·6e73·6962··d/·files.··ansib | |||
| 00039d40:·6c65·2e62·7569·6c74·696e·2e66·696e·643a··le.builtin.find: | |||
| 00039d50:·0a20·2020·2070·6174·6873·3a0a·2020·2020··.····paths:.···· | |||
| 00039d60:·2d20·2f65·7463·2f73·7564·6f65·7273·2e64··-·/etc/sudoers.d | |||
| 00039d70:·2f0a·2020·7265·6769·7374·6572·3a20·7375··/.··register:·su | |||
| 00039d80:·646f·6572·730a·2020·7461·6773·3a0a·2020··doers.··tags:.·· | |||
| 00039d90:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 00039da0:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | |||
| 00039db0:·3030·2d35·332d·4941·2d31·310a·2020·2d20··00-53-IA-11.··-· | |||
| 00039dc0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 00039dd0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 00039de0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 00039df0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 00039e00:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | |||
| 00039e10:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | |||
| 00039e20:·0a20·202d·2073·7564·6f5f·7265·6d6f·7665··.··-·sudo_remove | |||
| 00039e30:·5f6e·6f5f·6175·7468·656e·7469·6361·7465··_no_authenticate | |||
| 00039e40:·0a0a·2d20·6e61·6d65·3a20·5265·6d6f·7665··..-·name:·Remove | |||
| 00039e50:·206c·696e·6573·2063·6f6e·7461·696e·696e···lines·containin | |||
| 00039e60:·6720·2161·7574·6865·6e74·6963·6174·6520··g·!authenticate· | |||
| 00039e70:·6672·6f6d·2073·7564·6f65·7273·2066·696c··from·sudoers·fil | |||
| 00039e80:·6573·0a20·2061·6e73·6962·6c65·2e62·7569··es.··ansible.bui | |||
| 00039e90:·6c74·696e·2e72·6570·6c61·6365·3a0a·2020··ltin.replace:.·· | |||
| 00039ea0:·2020·7265·6765·7870·3a20·285e·283f·2123····regexp:·(^(?!# | |||
| 00039eb0:·292e·2a5b·5c73·5d2b·5c21·6175·7468·656e··).*[\s]+\!authen | |||
| 00039ec0:·7469·6361·7465·2e2a·2429·0a20·2020·2072··ticate.*$).····r | |||
| 00039ed0:·6570·6c61·6365·3a20·2723·205c·6726·6c74··eplace:·'#·\g< | |||
| 00039ee0:·3b31·2667·743b·270a·2020·2020·7061·7468··;1>'.····path | |||
| 00039ef0:·3a20·277b·7b20·6974·656d·2e70·6174·6820··:·'{{·item.path· | |||
| 00039f00:·7d7d·270a·2020·2020·7661·6c69·6461·7465··}}'.····validate | |||
| 00039f10:·3a20·2f75·7372·2f73·6269·6e2f·7669·7375··:·/usr/sbin/visu | |||
| 00039f20:·646f·202d·6366·2025·730a·2020·7769·7468··do·-cf·%s.··with | |||
| 00039f30:·5f69·7465·6d73·3a0a·2020·2d20·7061·7468··_items:.··-·path | |||
| 00039f40:·3a20·2f65·7463·2f73·7564·6f65·7273·0a20··:·/etc/sudoers.· | |||
| 00039f50:·202d·2027·7b7b·2073·7564·6f65·7273·2e66···-·'{{·sudoers.f | |||
| Max diff block lines reached; 274130/293064 bytes (93.54%) of diff not shown. | |||
| Offset 90, 14 lines modified | Offset 90, 35 lines modified | ||
| 90 | ···························1.7,·SR·1.8,·SR·1.9 | 90 | ···························1.7,·SR·1.8,·SR·1.9 |
| 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 96 | ···························SRG-OS-000373-GPOS-00158 | 96 | ···························SRG-OS-000373-GPOS-00158 |
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 102 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 103 | ··if·[·!·-e·"$f"·]·;·then | ||
| 104 | ····continue | ||
| 105 | ··fi | ||
| 106 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 107 | ··if·!·test·-z·"$matching_list";·then | ||
| 108 | ····while·IFS=·read·-r·entry;·do | ||
| 109 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 110 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 111 | ····done·<<<·"$matching_list" | ||
| 112 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 113 | visudo" | ||
| 114 | ··fi | ||
| 115 | done | ||
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 102 | -·name:·Find·/etc/sudoers.d/·files | 121 | -·name:·Find·/etc/sudoers.d/·files |
| 103 | ··ansible.builtin.find: | 122 | ··ansible.builtin.find: |
| Offset 128, 35 lines modified | Offset 149, 14 lines modified | ||
| 128 | ··-·NIST-800-53-IA-11 | 149 | ··-·NIST-800-53-IA-11 |
| 129 | ··-·low_complexity | 150 | ··-·low_complexity |
| 130 | ··-·low_disruption | 151 | ··-·low_disruption |
| 131 | ··-·medium_severity | 152 | ··-·medium_severity |
| 132 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 133 | ··-·restrict_strategy | 154 | ··-·restrict_strategy |
| 134 | ··-·sudo_remove_no_authenticate | 155 | ··-·sudo_remove_no_authenticate |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 140 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 141 | ··if·[·!·-e·"$f"·]·;·then | ||
| 142 | ····continue | ||
| 143 | ··fi | ||
| 144 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 145 | ··if·!·test·-z·"$matching_list";·then | ||
| 146 | ····while·IFS=·read·-r·entry;·do | ||
| 147 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 148 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 149 | ····done·<<<·"$matching_list" | ||
| 150 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 151 | visudo" | ||
| 152 | ··fi | ||
| 153 | done | ||
| 154 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 155 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 157 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 156 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 158 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 157 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 159 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 158 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 160 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 159 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 161 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 160 | ············Without·re-authentication,·users·may·access·resources·or·perform | 162 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 177, 14 lines modified | Offset 177, 35 lines modified | ||
| 177 | ···························1.7,·SR·1.8,·SR·1.9 | 177 | ···························1.7,·SR·1.8,·SR·1.9 |
| 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 183 | ···························SRG-OS-000373-GPOS-00158 | 183 | ···························SRG-OS-000373-GPOS-00158 |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 189 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 190 | ··if·[·!·-e·"$f"·]·;·then | ||
| 191 | ····continue | ||
| 192 | ··fi | ||
| 193 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 194 | ··if·!·test·-z·"$matching_list";·then | ||
| 195 | ····while·IFS=·read·-r·entry;·do | ||
| 196 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 197 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 198 | ····done·<<<·"$matching_list" | ||
| 199 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 200 | visudo" | ||
| 201 | ··fi | ||
| 202 | done | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 189 | -·name:·Find·/etc/sudoers.d/·files | 208 | -·name:·Find·/etc/sudoers.d/·files |
| 190 | ··ansible.builtin.find: | 209 | ··ansible.builtin.find: |
| Offset 215, 35 lines modified | Offset 236, 14 lines modified | ||
| 215 | ··-·NIST-800-53-IA-11 | 236 | ··-·NIST-800-53-IA-11 |
| 216 | ··-·low_complexity | 237 | ··-·low_complexity |
| 217 | ··-·low_disruption | 238 | ··-·low_disruption |
| 218 | ··-·medium_severity | 239 | ··-·medium_severity |
| 219 | ··-·no_reboot_needed | 240 | ··-·no_reboot_needed |
| 220 | ··-·restrict_strategy | 241 | ··-·restrict_strategy |
| 221 | ··-·sudo_remove_nopasswd | 242 | ··-·sudo_remove_nopasswd |
| 222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 227 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 228 | ··if·[·!·-e·"$f"·]·;·then | ||
| 229 | ····continue | ||
| 230 | ··fi | ||
| 231 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 232 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 34594/40051 bytes (86.37%) of diff not shown. | |||
| Offset 16010, 146 lines modified | Offset 16010, 146 lines modified | ||
| 0003e890:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003e890:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003e8a0:·6d31·3736·3722·2074·6162·696e·6465·783d··m1767"·tabindex= | 0003e8a0:·6d31·3736·3722·2074·6162·696e·6465·783d··m1767"·tabindex= | ||
| 0003e8b0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003e8b0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003e8c0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003e8c0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003e8d0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003e8d0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003e8e0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003e8e0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003e8f0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003e8f0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003e900:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003e910:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003e920:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003e930:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003e940:·6170·7365·2220·6964·3d22·6964·6d31·3736··apse"·id="idm176 | |||
| 0003e950:·3722·3e3c·7461·626c·6520·636c·6173·733d··7"><table·class= | |||
| 0003e960:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003e970:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003e980:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003e990:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003e9a0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003e9b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003e9c0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003e9d0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003e9e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003e9f0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003ea00:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003ea10:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003ea20:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003ea30:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003ea40:·653e·3c70·7265·3e3c·636f·6465·3e0a·666f··e><pre><code>.fo | |||
| 0003ea50:·7220·6620·696e·202f·6574·632f·7375·646f··r·f·in·/etc/sudo | |||
| 0003ea60:·6572·7320·2f65·7463·2f73·7564·6f65·7273··ers·/etc/sudoers | |||
| 0003ea70:·2e64·2f2a·203b·2064·6f0a·2020·6966·205b··.d/*·;·do.··if·[ | |||
| 0003ea80:·2021·202d·6520·2224·6622·205d·203b·2074···!·-e·"$f"·]·;·t | |||
| 0003ea90:·6865·6e0a·2020·2020·636f·6e74·696e·7565··hen.····continue | |||
| 0003eaa0:·0a20·2066·690a·2020·6d61·7463·6869·6e67··.··fi.··matching | |||
| 0003eab0:·5f6c·6973·743d·2428·6772·6570·202d·5020··_list=$(grep·-P· | |||
| 0003eac0:·275e·283f·2123·292e·2a5b·5c73·5d2b·5c21··'^(?!#).*[\s]+\! | |||
| 0003ead0:·6175·7468·656e·7469·6361·7465·2e2a·2427··authenticate.*$' | |||
| 0003eae0:·2024·6620·7c20·756e·6971·2029·0a20·2069···$f·|·uniq·).··i | |||
| 0003eaf0:·6620·2120·7465·7374·202d·7a20·2224·6d61··f·!·test·-z·"$ma | |||
| 0003eb00:·7463·6869·6e67·5f6c·6973·7422·3b20·7468··tching_list";·th | |||
| 0003eb10:·656e·0a20·2020·2077·6869·6c65·2049·4653··en.····while·IFS | |||
| 0003eb20:·3d20·7265·6164·202d·7220·656e·7472·793b··=·read·-r·entry; | |||
| 0003eb30:·2064·6f0a·2020·2020·2020·2320·636f·6d6d···do.······#·comm | |||
| 0003eb40:·656e·7420·6f75·7420·2221·6175·7468·656e··ent·out·"!authen | |||
| 0003eb50:·7469·6361·7465·2220·6d61·7463·6865·7320··ticate"·matches· | |||
| 0003eb60:·746f·2070·7265·7365·7276·6520·7573·6572··to·preserve·user | |||
| 0003eb70:·2064·6174·610a·2020·2020·2020·7365·6420···data.······sed· | |||
| 0003eb80:·2d69·2022·732f·5e24·7b65·6e74·7279·7d24··-i·"s/^${entry}$ | |||
| 0003eb90:·2f23·2026·616d·703b·2f67·2220·2466·0a20··/#·&/g"·$f.· | |||
| 0003eba0:·2020·2064·6f6e·6520·266c·743b·266c·743b·····done·<< | |||
| 0003ebb0:·266c·743b·2022·246d·6174·6368·696e·675f··<·"$matching_ | |||
| 0003ebc0:·6c69·7374·220a·0a20·2020·202f·7573·722f··list"..····/usr/ | |||
| 0003ebd0:·7362·696e·2f76·6973·7564·6f20·2d63·6620··sbin/visudo·-cf· | |||
| 0003ebe0:·2466·2026·616d·703b·2667·743b·202f·6465··$f·&>·/de | |||
| 0003ebf0:·762f·6e75·6c6c·207c·7c20·6563·686f·2022··v/null·||·echo·" | |||
| 0003ec00:·4661·696c·2074·6f20·7661·6c69·6461·7465··Fail·to·validate | |||
| 0003ec10:·2024·6620·7769·7468·2076·6973·7564·6f22···$f·with·visudo" | |||
| 0003ec20:·0a20·2066·690a·646f·6e65·0a3c·2f63·6f64··.··fi.done.</cod | |||
| 0003ec30:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003ec40:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003ec50:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003ec60:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003ec70:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003ec80:·6d31·3736·3822·2074·6162·696e·6465·783d··m1768"·tabindex= | |||
| 0003ec90:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003eca0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003ecb0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003ecc0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003ecd0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003e | 0003ece0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003e | 0003ecf0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003e | 0003ed00:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003e | 0003ed10:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003e | 0003ed20:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003e | 0003ed30:·3137·3638·223e·3c74·6162·6c65·2063·6c61··1768"><table·cla | ||
| 0003e | 0003ed40:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003e | 0003ed50:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003e | 0003ed60:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003e | 0003ed70:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003e | 0003ed80:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003e | 0003ed90:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003e9c0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003e9d0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003e9e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003e9f0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003ea00:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003ea10:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003ea20:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | |||
| 0003ea30:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | |||
| 0003ea40:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003ea50:·2d20·6e61·6d65·3a20·4669·6e64·202f·6574··-·name:·Find·/et | |||
| 0003ea60:·632f·7375·646f·6572·732e·642f·2066·696c··c/sudoers.d/·fil | |||
| 0003ea70:·6573·0a20·2061·6e73·6962·6c65·2e62·7569··es.··ansible.bui | |||
| 0003ea80:·6c74·696e·2e66·696e·643a·0a20·2020·2070··ltin.find:.····p | |||
| 0003ea90:·6174·6873·3a0a·2020·2020·2d20·2f65·7463··aths:.····-·/etc | |||
| 0003eaa0:·2f73·7564·6f65·7273·2e64·2f0a·2020·7265··/sudoers.d/.··re | |||
| 0003eab0:·6769·7374·6572·3a20·7375·646f·6572·730a··gister:·sudoers. | |||
| 0003eac0:·2020·7461·6773·3a0a·2020·2d20·4e49·5354····tags:.··-·NIST | |||
| 0003ead0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003eae0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003eaf0:·4941·2d31·310a·2020·2d20·6c6f·775f·636f··IA-11.··-·low_co | |||
| 0003eb00:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003eb10:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003eb20:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003eb30:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003eb40:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | |||
| 0003eb50:·745f·7374·7261·7465·6779·0a20·202d·2073··t_strategy.··-·s | |||
| 0003eb60:·7564·6f5f·7265·6d6f·7665·5f6e·6f5f·6175··udo_remove_no_au | |||
| 0003eb70:·7468·656e·7469·6361·7465·0a0a·2d20·6e61··thenticate..-·na | |||
| 0003eb80:·6d65·3a20·5265·6d6f·7665·206c·696e·6573··me:·Remove·lines | |||
| 0003eb90:·2063·6f6e·7461·696e·696e·6720·2161·7574···containing·!aut | |||
| 0003eba0:·6865·6e74·6963·6174·6520·6672·6f6d·2073··henticate·from·s | |||
| 0003ebb0:·7564·6f65·7273·2066·696c·6573·0a20·2061··udoers·files.··a | |||
| 0003ebc0:·6e73·6962·6c65·2e62·7569·6c74·696e·2e72··nsible.builtin.r | |||
| 0003ebd0:·6570·6c61·6365·3a0a·2020·2020·7265·6765··eplace:.····rege | |||
| 0003ebe0:·7870·3a20·285e·283f·2123·292e·2a5b·5c73··xp:·(^(?!#).*[\s | |||
| 0003ebf0:·5d2b·5c21·6175·7468·656e·7469·6361·7465··]+\!authenticate | |||
| 0003ec00:·2e2a·2429·0a20·2020·2072·6570·6c61·6365··.*$).····replace | |||
| 0003ec10:·3a20·2723·205c·6726·6c74·3b31·2667·743b··:·'#·\g<1> | |||
| 0003ec20:·270a·2020·2020·7061·7468·3a20·277b·7b20··'.····path:·'{{· | |||
| 0003ec30:·6974·656d·2e70·6174·6820·7d7d·270a·2020··item.path·}}'.·· | |||
| 0003ec40:·2020·7661·6c69·6461·7465·3a20·2f75·7372····validate:·/usr | |||
| 0003ec50:·2f73·6269·6e2f·7669·7375·646f·202d·6366··/sbin/visudo·-cf | |||
| 0003ec60:·2025·730a·2020·7769·7468·5f69·7465·6d73···%s.··with_items | |||
| 0003ec70:·3a0a·2020·2d20·7061·7468·3a20·2f65·7463··:.··-·path:·/etc | |||
| 0003ec80:·2f73·7564·6f65·7273·0a20·202d·2027·7b7b··/sudoers.··-·'{{ | |||
| 0003ec90:·2073·7564·6f65·7273·2e66·696c·6573·207d···sudoers.files·} | |||
| Max diff block lines reached; 1166612/1185408 bytes (98.41%) of diff not shown. | |||
| Offset 229, 14 lines modified | Offset 229, 35 lines modified | ||
| 229 | ···························1.7,·SR·1.8,·SR·1.9 | 229 | ···························1.7,·SR·1.8,·SR·1.9 |
| 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 235 | ···························SRG-OS-000373-GPOS-00158 | 235 | ···························SRG-OS-000373-GPOS-00158 |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 241 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 242 | ··if·[·!·-e·"$f"·]·;·then | ||
| 243 | ····continue | ||
| 244 | ··fi | ||
| 245 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 246 | ··if·!·test·-z·"$matching_list";·then | ||
| 247 | ····while·IFS=·read·-r·entry;·do | ||
| 248 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 249 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 250 | ····done·<<<·"$matching_list" | ||
| 251 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 252 | visudo" | ||
| 253 | ··fi | ||
| 254 | done | ||
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 255 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 256 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 257 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 258 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 259 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 241 | -·name:·Find·/etc/sudoers.d/·files | 260 | -·name:·Find·/etc/sudoers.d/·files |
| 242 | ··ansible.builtin.find: | 261 | ··ansible.builtin.find: |
| Offset 267, 35 lines modified | Offset 288, 14 lines modified | ||
| 267 | ··-·NIST-800-53-IA-11 | 288 | ··-·NIST-800-53-IA-11 |
| 268 | ··-·low_complexity | 289 | ··-·low_complexity |
| 269 | ··-·low_disruption | 290 | ··-·low_disruption |
| 270 | ··-·medium_severity | 291 | ··-·medium_severity |
| 271 | ··-·no_reboot_needed | 292 | ··-·no_reboot_needed |
| 272 | ··-·restrict_strategy | 293 | ··-·restrict_strategy |
| 273 | ··-·sudo_remove_no_authenticate | 294 | ··-·sudo_remove_no_authenticate |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 279 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 280 | ··if·[·!·-e·"$f"·]·;·then | ||
| 281 | ····continue | ||
| 282 | ··fi | ||
| 283 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 284 | ··if·!·test·-z·"$matching_list";·then | ||
| 285 | ····while·IFS=·read·-r·entry;·do | ||
| 286 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 287 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 288 | ····done·<<<·"$matching_list" | ||
| 289 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 290 | visudo" | ||
| 291 | ··fi | ||
| 292 | done | ||
| 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 299 | ············Without·re-authentication,·users·may·access·resources·or·perform | 301 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 316, 14 lines modified | Offset 316, 35 lines modified | ||
| 316 | ···························1.7,·SR·1.8,·SR·1.9 | 316 | ···························1.7,·SR·1.8,·SR·1.9 |
| 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 322 | ···························SRG-OS-000373-GPOS-00158 | 322 | ···························SRG-OS-000373-GPOS-00158 |
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 328 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 329 | ··if·[·!·-e·"$f"·]·;·then | ||
| 330 | ····continue | ||
| 331 | ··fi | ||
| 332 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 333 | ··if·!·test·-z·"$matching_list";·then | ||
| 334 | ····while·IFS=·read·-r·entry;·do | ||
| 335 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 336 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 337 | ····done·<<<·"$matching_list" | ||
| 338 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 339 | visudo" | ||
| 340 | ··fi | ||
| 341 | done | ||
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 328 | -·name:·Find·/etc/sudoers.d/·files | 347 | -·name:·Find·/etc/sudoers.d/·files |
| 329 | ··ansible.builtin.find: | 348 | ··ansible.builtin.find: |
| Offset 354, 35 lines modified | Offset 375, 14 lines modified | ||
| 354 | ··-·NIST-800-53-IA-11 | 375 | ··-·NIST-800-53-IA-11 |
| 355 | ··-·low_complexity | 376 | ··-·low_complexity |
| 356 | ··-·low_disruption | 377 | ··-·low_disruption |
| 357 | ··-·medium_severity | 378 | ··-·medium_severity |
| 358 | ··-·no_reboot_needed | 379 | ··-·no_reboot_needed |
| 359 | ··-·restrict_strategy | 380 | ··-·restrict_strategy |
| 360 | ··-·sudo_remove_nopasswd | 381 | ··-·sudo_remove_nopasswd |
| 361 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 362 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 363 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 364 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 365 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 366 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 367 | ··if·[·!·-e·"$f"·]·;·then | ||
| 368 | ····continue | ||
| 369 | ··fi | ||
| 370 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 371 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 136993/142441 bytes (96.18%) of diff not shown. | |||
| Offset 16217, 783 lines modified | Offset 16217, 783 lines modified | ||
| 0003f580:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003f580:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003f590:·743d·2223·6964·6d34·3936·3922·2074·6162··t="#idm4969"·tab | 0003f590:·743d·2223·6964·6d34·3936·3922·2074·6162··t="#idm4969"·tab | ||
| 0003f5a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003f5a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003f5b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003f5b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003f5c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003f5c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003f5d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003f5d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | Diff chunk too large, falling back to line-by-line diff (769 lines added, 769 lines removed) | |
| 0003f5e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003f5e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003f5f0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003f5f0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | ||
| 0003f600:·6 | 0003f600:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | ||
| 0003f610:· | 0003f610:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003f620:· | 0003f620:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003f630:·6 | 0003f630:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003f640:·6 | 0003f640:·6964·6d34·3936·3922·3e3c·7072·653e·3c63··idm4969"><pre><c | ||
| 0003f650:·6 | 0003f650:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | ||
| 0003f660:· | 0003f660:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | ||
| 0003f670:·6 | 0003f670:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | ||
| 0003f680:· | 0003f680:·706c·6174·666f·726d·730a·6966·2064·706b··platforms.if·dpk | ||
| 0003f690:·72 | 0003f690:·672d·7175·6572·7920·2d2d·7368·6f77·202d··g-query·--show·- | ||
| 0003f6a0:· | 0003f6a0:·2d73·686f·7766·6f72·6d61·743d·2724·7b64··-showformat='${d | ||
| 0003f6b0:·6 | 0003f6b0:·623a·5374·6174·7573·2d53·7461·7475·737d··b:Status-Status} | ||
| 0003f6c0:· | 0003f6c0:·0a27·2027·6c69·6e75·782d·6261·7365·2720··.'·'linux-base'· | ||
| 0003f6d0:· | 0003f6d0:·3226·6774·3b2f·6465·762f·6e75·6c6c·207c··2>/dev/null·| | ||
| 0003f6e0:· | 0003f6e0:·2067·7265·7020·2d71·205e·696e·7374·616c···grep·-q·^instal | ||
| 0003f6f0:· | 0003f6f0:·6c65·6420·2661·6d70·3b26·616d·703b·2064··led·&&·d | ||
| 0003f700:· | 0003f700:·706b·672d·7175·6572·7920·2d2d·7368·6f77··pkg-query·--show | ||
| 0003f710:· | 0003f710:·202d·2d73·686f·7766·6f72·6d61·743d·2724···--showformat='$ | ||
| 0003f720:· | 0003f720:·7b64·623a·5374·6174·7573·2d53·7461·7475··{db:Status-Statu | ||
| 0003f730:· | 0003f730:·737d·5c6e·2720·2772·7379·736c·6f67·2720··s}\n'·'rsyslog'· | ||
| 0003f740:· | 0003f740:·3226·6774·3b2f·6465·762f·6e75·6c6c·207c··2>/dev/null·| | ||
| 0003f750:· | 0003f750:·2067·7265·7020·2d71·2027·5e69·6e73·7461···grep·-q·'^insta | ||
| 0003f760:·6 | 0003f760:·6c6c·6564·273b·2074·6865·6e0a·0a23·204c··lled';·then..#·L | ||
| 0003f770:·6 | 0003f770:·6973·7420·6f66·206c·6f67·2066·696c·6520··ist·of·log·file· | ||
| 0003f780:· | 0003f780:·7061·7468·7320·746f·2062·6520·696e·7370··paths·to·be·insp | ||
| 0003f790:· | 0003f790:·6563·7465·6420·666f·7220·636f·7272·6563··ected·for·correc | ||
| 0003f7a0:· | 0003f7a0:·7420·7065·726d·6973·7369·6f6e·730a·2320··t·permissions.#· | ||
| 0003f7b0:·2 | 0003f7b0:·2a20·5072·696d·6172·696c·7920·696e·7370··*·Primarily·insp | ||
| 0003f7c0:· | 0003f7c0:·6563·7420·6c6f·6720·6669·6c65·2070·6174··ect·log·file·pat | ||
| 0003f7d0:· | 0003f7d0:·6873·206c·6973·7465·6420·696e·202f·6574··hs·listed·in·/et | ||
| 0003f7e0:· | 0003f7e0:·632f·7273·7973·6c6f·672e·636f·6e66·0a52··c/rsyslog.conf.R | ||
| 0003f7f0:·35 | 0003f7f0:·5359·534c·4f47·5f45·5443·5f43·4f4e·4649··SYSLOG_ETC_CONFI | ||
| 0003f800:· | 0003f800:·473d·222f·6574·632f·7273·7973·6c6f·672e··G="/etc/rsyslog. | ||
| 0003f810:· | 0003f810:·636f·6e66·220a·2320·2a20·416e·6420·616c··conf".#·*·And·al | ||
| 0003f820:· | 0003f820:·736f·2074·6865·206c·6f67·2066·696c·6520··so·the·log·file· | ||
| 0003f830:· | 0003f830:·7061·7468·7320·6c69·7374·6564·2061·6674··paths·listed·aft | ||
| 0003f840:·657 | 0003f840:·6572·2072·7379·736c·6f67·2773·2024·496e··er·rsyslog's·$In | ||
| 0003f850:· | 0003f850:·636c·7564·6543·6f6e·6669·6720·6469·7265··cludeConfig·dire | ||
| 0003f860:·6 | 0003f860:·6374·6976·650a·2320·2020·2873·746f·7265··ctive.#···(store | ||
| 0003f870:·20 | 0003f870:·2074·6865·2072·6573·756c·7420·696e·746f···the·result·into | ||
| 0003f880:· | 0003f880:·2061·7272·6179·2066·6f72·2074·6865·2063···array·for·the·c | ||
| 0003f890:· | 0003f890:·6173·6520·7468·6572·6527·7320·7368·656c··ase·there's·shel | ||
| 0003f8a0:· | 0003f8a0:·6c20·676c·6f62·2075·7365·6420·6173·2076··l·glob·used·as·v | ||
| 0003f8b0:·6 | 0003f8b0:·616c·7565·206f·6620·496e·636c·7564·6543··alue·of·IncludeC | ||
| 0003f8c0:· | 0003f8c0:·6f6e·6669·6729·0a72·6561·6461·7272·6179··onfig).readarray | ||
| 0003f8d0:· | 0003f8d0:·202d·7420·4f4c·445f·494e·4320·266c·743b···-t·OLD_INC·< | ||
| 0003f8e0:·20 | 0003f8e0:·2026·6c74·3b28·6772·6570·202d·6520·225c···<(grep·-e·"\ | ||
| 0003f8f0:· | 0003f8f0:·2449·6e63·6c75·6465·436f·6e66·6967·5b5b··$IncludeConfig[[ | ||
| 0003f900:· | 0003f900:·3a73·7061·6365·3a5d·5d5c·2b5b·5e5b·3a73··:space:]]\+[^[:s | ||
| 0003f910:· | 0003f910:·7061·6365·3a5d·3b5d·5c2b·2220·2f65·7463··pace:];]\+"·/etc | ||
| 0003f920:· | 0003f920:·2f72·7379·736c·6f67·2e63·6f6e·6620·7c20··/rsyslog.conf·|· | ||
| 0003f930:· | 0003f930:·6375·7420·2d64·2027·2027·202d·6620·3229··cut·-d·'·'·-f·2) | ||
| 0003f940:· | 0003f940:·0a72·6561·6461·7272·6179·202d·7420·5253··.readarray·-t·RS | ||
| 0003f950:· | 0003f950:·5953·4c4f·475f·494e·434c·5544·455f·434f··YSLOG_INCLUDE_CO | ||
| 0003f960:· | 0003f960:·4e46·4947·2026·6c74·3b20·266c·743b·2866··NFIG·<·<(f | ||
| 0003f970:·6 | 0003f970:·6f72·2049·4e43·5041·5448·2069·6e20·2224··or·INCPATH·in·"$ | ||
| 0003f980:· | 0003f980:·7b4f·4c44·5f49·4e43·5b40·5d7d·223b·2064··{OLD_INC[@]}";·d | ||
| 0003f990:· | 0003f990:·6f20·6576·616c·2070·7269·6e74·6620·2725··o·eval·printf·'% | ||
| 0003f9a0:· | 0003f9a0:·735c·5c6e·2720·2224·7b49·4e43·5041·5448··s\\n'·"${INCPATH | ||
| 0003f9b0:· | 0003f9b0:·7d22·3b20·646f·6e65·290a·7265·6164·6172··}";·done).readar | ||
| 0003f9c0:· | 0003f9c0:·7261·7920·2d74·204e·4557·5f49·4e43·2026··ray·-t·NEW_INC·& | ||
| 0003f9d0:· | 0003f9d0:·6c74·3b20·266c·743b·2873·6564·202d·6e20··lt;·<(sed·-n· | ||
| 0003f9e0:· | 0003f9e0:·272f·5e5c·732a·696e·636c·7564·6528·2f2c··'/^\s*include(/, | ||
| 0003f9f0:· | 0003f9f0:·2f29·2f49·7027·202f·6574·632f·7273·7973··/)/Ip'·/etc/rsys | ||
| 0003fa00:· | 0003fa00:·6c6f·672e·636f·6e66·207c·2073·6564·202d··log.conf·|·sed·- | ||
| 0003fa10:· | 0003fa10:·6e20·2773·402e·2a66·696c·655c·732a·3d5c··n·'s@.*file\s*=\ | ||
| 0003fa20:· | 0003fa20:·732a·225c·285b·2f5b·3a61·6c6e·756d·3a5d··s*"\([/[:alnum:] | ||
| 0003fa30:· | 0003fa30:·5b3a·7075·6e63·743a·5d5d·2a5c·2922·2e2a··[:punct:]]*\)".* | ||
| 0003fa40:· | 0003fa40:·405c·3140·4970·2729·0a72·6561·6461·7272··@\1@Ip').readarr | ||
| 0003fa50:· | 0003fa50:·6179·202d·7420·5253·5953·4c4f·475f·494e··ay·-t·RSYSLOG_IN | ||
| 0003fa60:· | 0003fa60:·434c·5544·4520·266c·743b·2026·6c74·3b28··CLUDE·<·<( | ||
| 0003fa70:·6 | 0003fa70:·666f·7220·494e·4350·4154·4820·696e·2022··for·INCPATH·in·" | ||
| 0003fa80:·2 | 0003fa80:·247b·4e45·575f·494e·435b·405d·7d22·3b20··${NEW_INC[@]}";· | ||
| 0003fa90:·6 | 0003fa90:·646f·2065·7661·6c20·7072·696e·7466·2027··do·eval·printf·' | ||
| 0003faa0:· | 0003faa0:·2573·5c5c·6e27·2022·247b·494e·4350·4154··%s\\n'·"${INCPAT | ||
| 0003fab0:· | 0003fab0:·487d·223b·2064·6f6e·6529·0a0a·2320·4465··H}";·done)..#·De | ||
| 0003fac0:·6 | 0003fac0:·636c·6172·6520·616e·2061·7272·6179·2074··clare·an·array·t | ||
| 0003fad0:·6 | 0003fad0:·6f20·686f·6c64·2074·6865·2066·696e·616c··o·hold·the·final | ||
| 0003fae0:·6c6 | 0003fae0:·206c·6973·7420·6f66·2064·6966·6665·7265···list·of·differe | ||
| 0003faf0:· | 0003faf0:·6e74·206c·6f67·2066·696c·6520·7061·7468··nt·log·file·path | ||
| 0003fb00:·7 | 0003fb00:·730a·6465·636c·6172·6520·2d61·204c·4f47··s.declare·-a·LOG | ||
| 0003fb10:· | 0003fb10:·5f46·494c·455f·5041·5448·530a·0a23·2041··_FILE_PATHS..#·A | ||
| 0003fb20:· | 0003fb20:·7272·6179·2074·6f20·686f·6c64·2061·6c6c··rray·to·hold·all | ||
| 0003fb30:· | 0003fb30:·2072·7379·736c·6f67·2063·6f6e·6669·6720···rsyslog·config· | ||
| 0003fb40:· | 0003fb40:·656e·7472·6965·730a·5253·5953·4c4f·475f··entries.RSYSLOG_ | ||
| 0003fb50:· | 0003fb50:·434f·4e46·4947·533d·2829·0a52·5359·534c··CONFIGS=().RSYSL | ||
| 0003fb60:· | 0003fb60:·4f47·5f43·4f4e·4649·4753·3d28·2224·7b52··OG_CONFIGS=("${R | ||
| 0003fb70:· | 0003fb70:·5359·534c·4f47·5f45·5443·5f43·4f4e·4649··SYSLOG_ETC_CONFI | ||
| 0003fb80:· | 0003fb80:·477d·2220·2224·7b52·5359·534c·4f47·5f49··G}"·"${RSYSLOG_I | ||
| 0003fb90:· | 0003fb90:·4e43·4c55·4445·5f43·4f4e·4649·475b·405d··NCLUDE_CONFIG[@] | ||
| 0003fba0:· | 0003fba0:·7d22·2022·247b·5253·5953·4c4f·475f·494e··}"·"${RSYSLOG_IN | ||
| 0003fbb0:· | 0003fbb0:·434c·5544·455b·405d·7d22·290a·0a23·2047··CLUDE[@]}")..#·G | ||
| 0003fbc0:·6 | 0003fbc0:·6574·2066·756c·6c20·6c69·7374·206f·6620··et·full·list·of· | ||
| 0003fbd0:·6 | 0003fbd0:·6669·6c65·7320·746f·2062·6520·6368·6563··files·to·be·chec | ||
| 0003fbe0:·6 | 0003fbe0:·6b65·640a·2320·5253·5953·4c4f·475f·434f··ked.#·RSYSLOG_CO | ||
| 0003fbf0:· | 0003fbf0:·4e46·4947·5320·6d61·7920·636f·6e74·6169··NFIGS·may·contai | ||
| 0003fc00:·6 | 0003fc00:·6e20·676c·6f62·7320·7375·6368·2061·730a··n·globs·such·as. | ||
| 0003fc10:· | 0003fc10:·2320·2f65·7463·2f72·7379·736c·6f67·2e64··#·/etc/rsyslog.d | ||
| 0003fc20:· | 0003fc20:·2f2a·2e63·6f6e·6620·2f65·7463·2f72·7379··/*.conf·/etc/rsy | ||
| 0003fc30:· | 0003fc30:·736c·6f67·2e64·2f2a·2e66·7275·6c65·0a23··slog.d/*.frule.# | ||
| 0003fc40:· | 0003fc40:·2053·6f2c·206c·6f6f·7020·6f76·6572·2074···So,·loop·over·t | ||
| 0003fc50:· | 0003fc50:·6865·2065·6e74·7269·6573·2069·6e20·5253··he·entries·in·RS | ||
| 0003fc60:· | 0003fc60:·5953·4c4f·475f·434f·4e46·4947·5320·616e··YSLOG_CONFIGS·an | ||
| 0003fc70:· | 0003fc70:·6420·7573·6520·6669·6e64·2074·6f20·6765··d·use·find·to·ge | ||
| 0003fc80:· | 0003fc80:·7420·7468·6520·6c69·7374·206f·6620·696e··t·the·list·of·in | ||
| 0003fc90:· | 0003fc90:·636c·7564·6564·2066·696c·6573·2e0a·5253··cluded·files..RS | ||
| 0003fca0:·5 | 0003fca0:·5953·4c4f·475f·434f·4e46·4947·5f46·494c··YSLOG_CONFIG_FIL | ||
| 0003fcb0:·4 | 0003fcb0:·4553·3d28·290a·666f·7220·454e·5452·5920··ES=().for·ENTRY· | ||
| 0003fcc0:· | 0003fcc0:·696e·2022·247b·5253·5953·4c4f·475f·434f··in·"${RSYSLOG_CO | ||
| 0003fcd0:· | 0003fcd0:·4e46·4947·535b·405d·7d22·0a64·6f0a·0923··NFIGS[@]}".do..# | ||
| 0003fce0:·6 | 0003fce0:·2049·6620·6469·7265·6374·6f72·792c·2072···If·directory,·r | ||
| 0003fcf0:· | 0003fcf0:·7379·736c·6f67·2077·696c·6c20·7365·6172··syslog·will·sear | ||
| 0003fd00:· | 0003fd00:·6368·2066·6f72·2063·6f6e·6669·6720·6669··ch·for·config·fi | ||
| 0003fd10:· | 0003fd10:·6c65·7320·696e·2072·6563·7572·7369·7665··les·in·recursive | ||
| 0003fd20:· | 0003fd20:·6c79·2e0a·0923·2048·6f77·6576·6572·2c20··ly...#·However,· | ||
| 0003fd30:·6 | 0003fd30:·6669·6c65·7320·696e·2068·6964·6465·6e20··files·in·hidden· | ||
| 0003fd40:·7 | 0003fd40:·7375·622d·6469·7265·6374·6f72·6965·7320··sub-directories· | ||
| 0003fd50:· | 0003fd50:·6f72·2068·6964·6465·6e20·6669·6c65·7320··or·hidden·files· | ||
| Max diff block lines reached; 1119858/1226560 bytes (91.30%) of diff not shown. | |||
| Offset 259, 14 lines modified | Offset 259, 142 lines modified | ||
| 259 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 259 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 260 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 260 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 261 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 261 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 262 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 262 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 263 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 263 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 264 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 264 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 265 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 | 265 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 |
| 266 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 267 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 268 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 269 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed·&&·dpkg-query·--show·-- | ||
| 270 | showformat='${db:Status-Status}\n'·'rsyslog'·2>/dev/null·|·grep·- | ||
| 271 | q·'^installed';·then | ||
| 272 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 273 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 274 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 275 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 276 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 277 | of·IncludeConfig) | ||
| 278 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 279 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 280 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 281 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 282 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 283 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 284 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 285 | '%s\\n'·"${INCPATH}";·done) | ||
| 286 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 287 | declare·-a·LOG_FILE_PATHS | ||
| 288 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 289 | RSYSLOG_CONFIGS=() | ||
| 290 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 291 | {RSYSLOG_INCLUDE[@]}") | ||
| 292 | #·Get·full·list·of·files·to·be·checked | ||
| 293 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 294 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 295 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 296 | included·files. | ||
| 297 | RSYSLOG_CONFIG_FILES=() | ||
| 298 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 299 | do | ||
| 300 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 301 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 302 | » if·[·-d·"${ENTRY}"·] | ||
| 303 | » then | ||
| 304 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 305 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 306 | » elif·[·-f·"${ENTRY}"·] | ||
| 307 | » then | ||
| 308 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 309 | » else | ||
| 310 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 311 | » fi | ||
| 312 | done | ||
| 313 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 314 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 315 | configuration) | ||
| 316 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 317 | do | ||
| 318 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 319 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 320 | ('$')·characters, | ||
| 321 | » #·*·Ignore·empty·lines, | ||
| 322 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 323 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 324 | not·log·files | ||
| 325 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 326 | path | ||
| 327 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 328 | all·of·the | ||
| 329 | » #·following·are·met: | ||
| 330 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 331 | » #·*·it·is·preceded·by·space | ||
| 332 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 333 | characters | ||
| 334 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 335 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 336 | » then | ||
| 337 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 338 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 339 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 340 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 341 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 342 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 343 | {FILTERED_PATHS}") | ||
| 344 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 345 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 346 | newline),·split | ||
| 347 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 348 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 349 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 350 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 351 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 352 | » » #·Delete·the·temporary·array | ||
| 353 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 354 | » fi | ||
| 355 | done | ||
| 356 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 357 | grep·regex·is·a·bit | ||
| 358 | #·curly: | ||
| 359 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 360 | #·extract·File="logfile"·expression | ||
| 361 | #·match·only·"logfile"·expression | ||
| 362 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 363 | do | ||
| 364 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 365 | "${LOG_FILE}") | ||
| 366 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 367 | alnum:][:punct:]]*)\"\s*\)") | ||
| 368 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| 369 | ]]*)\""|tr·-d·"\"")") | ||
| 370 | done | ||
| 371 | #·Ensure·the·correct·attribute·if·file·exists | ||
| 372 | FILE_CMD="chgrp" | ||
| 373 | for·LOG_FILE_PATH·in·"${LOG_FILE_PATHS[@]}" | ||
| 374 | do | ||
| 375 | » #·Sanity·check·-·if·particular·$LOG_FILE_PATH·is·empty·string,·skip·it·from | ||
| 376 | further·processing | ||
| 377 | » if·[·-z·"$LOG_FILE_PATH"·] | ||
| 378 | » then | ||
| Max diff block lines reached; 141457/147108 bytes (96.16%) of diff not shown. | |||
| Offset 16031, 146 lines modified | Offset 16031, 146 lines modified | ||
| 0003e9e0:·7461·7267·6574·3d22·2369·646d·3139·3930··target="#idm1990 | 0003e9e0:·7461·7267·6574·3d22·2369·646d·3139·3930··target="#idm1990 | ||
| 0003e9f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003e9f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ea00:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ea00:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ea10:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ea10:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ea20:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ea20:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ea30:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ea30:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ea40:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ea40:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003ea50:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003ea60:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ea70:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003ea80:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003ea90:·2069·643d·2269·646d·3139·3930·223e·3c74···id="idm1990"><t | |||
| 0003eaa0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003eab0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003eac0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ead0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003eae0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003eaf0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003eb00:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003eb10:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003eb20:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003eb30:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003eb40:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003eb50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003eb60:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003eb70:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003eb80:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003eb90:·653e·3c63·6f64·653e·0a66·6f72·2066·2069··e><code>.for·f·i | |||
| 0003eba0:·6e20·2f65·7463·2f73·7564·6f65·7273·202f··n·/etc/sudoers·/ | |||
| 0003ebb0:·6574·632f·7375·646f·6572·732e·642f·2a20··etc/sudoers.d/*· | |||
| 0003ebc0:·3b20·646f·0a20·2069·6620·5b20·2120·2d65··;·do.··if·[·!·-e | |||
| 0003ebd0:·2022·2466·2220·5d20·3b20·7468·656e·0a20···"$f"·]·;·then.· | |||
| 0003ebe0:·2020·2063·6f6e·7469·6e75·650a·2020·6669·····continue.··fi | |||
| 0003ebf0:·0a20·206d·6174·6368·696e·675f·6c69·7374··.··matching_list | |||
| 0003ec00:·3d24·2867·7265·7020·2d50·2027·5e28·3f21··=$(grep·-P·'^(?! | |||
| 0003ec10:·2329·2e2a·5b5c·735d·2b5c·2161·7574·6865··#).*[\s]+\!authe | |||
| 0003ec20:·6e74·6963·6174·652e·2a24·2720·2466·207c··nticate.*$'·$f·| | |||
| 0003ec30:·2075·6e69·7120·290a·2020·6966·2021·2074···uniq·).··if·!·t | |||
| 0003ec40:·6573·7420·2d7a·2022·246d·6174·6368·696e··est·-z·"$matchin | |||
| 0003ec50:·675f·6c69·7374·223b·2074·6865·6e0a·2020··g_list";·then.·· | |||
| 0003ec60:·2020·7768·696c·6520·4946·533d·2072·6561····while·IFS=·rea | |||
| 0003ec70:·6420·2d72·2065·6e74·7279·3b20·646f·0a20··d·-r·entry;·do.· | |||
| 0003ec80:·2020·2020·2023·2063·6f6d·6d65·6e74·206f·······#·comment·o | |||
| 0003ec90:·7574·2022·2161·7574·6865·6e74·6963·6174··ut·"!authenticat | |||
| 0003eca0:·6522·206d·6174·6368·6573·2074·6f20·7072··e"·matches·to·pr | |||
| 0003ecb0:·6573·6572·7665·2075·7365·7220·6461·7461··eserve·user·data | |||
| 0003ecc0:·0a20·2020·2020·2073·6564·202d·6920·2273··.······sed·-i·"s | |||
| 0003ecd0:·2f5e·247b·656e·7472·797d·242f·2320·2661··/^${entry}$/#·&a | |||
| 0003ece0:·6d70·3b2f·6722·2024·660a·2020·2020·646f··mp;/g"·$f.····do | |||
| 0003ecf0:·6e65·2026·6c74·3b26·6c74·3b26·6c74·3b20··ne·<<<· | |||
| 0003ed00:·2224·6d61·7463·6869·6e67·5f6c·6973·7422··"$matching_list" | |||
| 0003ed10:·0a0a·2020·2020·2f75·7372·2f73·6269·6e2f··..····/usr/sbin/ | |||
| 0003ed20:·7669·7375·646f·202d·6366·2024·6620·2661··visudo·-cf·$f·&a | |||
| 0003ed30:·6d70·3b26·6774·3b20·2f64·6576·2f6e·756c··mp;>·/dev/nul | |||
| 0003ed40:·6c20·7c7c·2065·6368·6f20·2246·6169·6c20··l·||·echo·"Fail· | |||
| 0003ed50:·746f·2076·616c·6964·6174·6520·2466·2077··to·validate·$f·w | |||
| 0003ed60:·6974·6820·7669·7375·646f·220a·2020·6669··ith·visudo".··fi | |||
| 0003ed70:·0a64·6f6e·650a·3c2f·636f·6465·3e3c·2f70··.done.</code></p | |||
| 0003ed80:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003ed90:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003eda0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003edb0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003edc0:·7461·7267·6574·3d22·2369·646d·3139·3931··target="#idm1991 | |||
| 0003edd0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003ede0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003edf0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003ee00:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003ee10:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003ee20:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003e | 0003ee30:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003e | 0003ee40:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003e | 0003ee50:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003e | 0003ee60:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003e | 0003ee70:·7365·2220·6964·3d22·6964·6d31·3939·3122··se"·id="idm1991" | ||
| 0003e | 0003ee80:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003e | 0003ee90:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003e | 0003eea0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003ead0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003eae0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003eaf0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003eb00:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003eb10:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003eb20:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003eb30:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003eb40:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003eb50:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003eb60:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003eb70:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 0003eb80:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003eb90:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003eba0:·653a·2046·696e·6420·2f65·7463·2f73·7564··e:·Find·/etc/sud | |||
| 0003ebb0:·6f65·7273·2e64·2f20·6669·6c65·730a·2020··oers.d/·files.·· | |||
| 0003ebc0:·616e·7369·626c·652e·6275·696c·7469·6e2e··ansible.builtin. | |||
| 0003ebd0:·6669·6e64·3a0a·2020·2020·7061·7468·733a··find:.····paths: | |||
| 0003ebe0:·0a20·2020·202d·202f·6574·632f·7375·646f··.····-·/etc/sudo | |||
| 0003ebf0:·6572·732e·642f·0a20·2072·6567·6973·7465··ers.d/.··registe | |||
| 0003ec00:·723a·2073·7564·6f65·7273·0a20·2074·6167··r:·sudoers.··tag | |||
| 0003ec10:·733a·0a20·202d·204e·4953·542d·3830·302d··s:.··-·NIST-800- | |||
| 0003ec20:·3533·2d43·4d2d·3628·6129·0a20·202d·204e··53-CM-6(a).··-·N | |||
| 0003ec30:·4953·542d·3830·302d·3533·2d49·412d·3131··IST-800-53-IA-11 | |||
| 0003ec40:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003ec50:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003ec60:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003ec70:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003ec80:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003ec90:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | |||
| 0003eca0:·6174·6567·790a·2020·2d20·7375·646f·5f72··ategy.··-·sudo_r | |||
| 0003ecb0:·656d·6f76·655f·6e6f·5f61·7574·6865·6e74··emove_no_authent | |||
| 0003ecc0:·6963·6174·650a·0a2d·206e·616d·653a·2052··icate..-·name:·R | |||
| 0003ecd0:·656d·6f76·6520·6c69·6e65·7320·636f·6e74··emove·lines·cont | |||
| 0003ece0:·6169·6e69·6e67·2021·6175·7468·656e·7469··aining·!authenti | |||
| 0003ecf0:·6361·7465·2066·726f·6d20·7375·646f·6572··cate·from·sudoer | |||
| 0003ed00:·7320·6669·6c65·730a·2020·616e·7369·626c··s·files.··ansibl | |||
| 0003ed10:·652e·6275·696c·7469·6e2e·7265·706c·6163··e.builtin.replac | |||
| 0003ed20:·653a·0a20·2020·2072·6567·6578·703a·2028··e:.····regexp:·( | |||
| 0003ed30:·5e28·3f21·2329·2e2a·5b5c·735d·2b5c·2161··^(?!#).*[\s]+\!a | |||
| 0003ed40:·7574·6865·6e74·6963·6174·652e·2a24·290a··uthenticate.*$). | |||
| 0003ed50:·2020·2020·7265·706c·6163·653a·2027·2320······replace:·'#· | |||
| 0003ed60:·5c67·266c·743b·3126·6774·3b27·0a20·2020··\g<1>'.··· | |||
| 0003ed70:·2070·6174·683a·2027·7b7b·2069·7465·6d2e···path:·'{{·item. | |||
| 0003ed80:·7061·7468·207d·7d27·0a20·2020·2076·616c··path·}}'.····val | |||
| 0003ed90:·6964·6174·653a·202f·7573·722f·7362·696e··idate:·/usr/sbin | |||
| 0003eda0:·2f76·6973·7564·6f20·2d63·6620·2573·0a20··/visudo·-cf·%s.· | |||
| 0003edb0:·2077·6974·685f·6974·656d·733a·0a20·202d···with_items:.··- | |||
| 0003edc0:·2070·6174·683a·202f·6574·632f·7375·646f···path:·/etc/sudo | |||
| 0003edd0:·6572·730a·2020·2d20·277b·7b20·7375·646f··ers.··-·'{{·sudo | |||
| 0003ede0:·6572·732e·6669·6c65·7320·7d7d·270a·2020··ers.files·}}'.·· | |||
| Max diff block lines reached; 1017432/1036228 bytes (98.19%) of diff not shown. | |||
| Offset 232, 14 lines modified | Offset 232, 35 lines modified | ||
| 232 | ···························1.7,·SR·1.8,·SR·1.9 | 232 | ···························1.7,·SR·1.8,·SR·1.9 |
| 233 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 233 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 234 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 234 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 235 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 235 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 236 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 236 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 238 | ···························SRG-OS-000373-GPOS-00158 | 238 | ···························SRG-OS-000373-GPOS-00158 |
| 239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 240 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 241 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 242 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 243 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 244 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 245 | ··if·[·!·-e·"$f"·]·;·then | ||
| 246 | ····continue | ||
| 247 | ··fi | ||
| 248 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 249 | ··if·!·test·-z·"$matching_list";·then | ||
| 250 | ····while·IFS=·read·-r·entry;·do | ||
| 251 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 252 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 253 | ····done·<<<·"$matching_list" | ||
| 254 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 255 | visudo" | ||
| 256 | ··fi | ||
| 257 | done | ||
| 239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 258 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 240 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 259 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 241 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 260 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 242 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 261 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 243 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 262 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 244 | -·name:·Find·/etc/sudoers.d/·files | 263 | -·name:·Find·/etc/sudoers.d/·files |
| 245 | ··ansible.builtin.find: | 264 | ··ansible.builtin.find: |
| Offset 270, 35 lines modified | Offset 291, 14 lines modified | ||
| 270 | ··-·NIST-800-53-IA-11 | 291 | ··-·NIST-800-53-IA-11 |
| 271 | ··-·low_complexity | 292 | ··-·low_complexity |
| 272 | ··-·low_disruption | 293 | ··-·low_disruption |
| 273 | ··-·medium_severity | 294 | ··-·medium_severity |
| 274 | ··-·no_reboot_needed | 295 | ··-·no_reboot_needed |
| 275 | ··-·restrict_strategy | 296 | ··-·restrict_strategy |
| 276 | ··-·sudo_remove_no_authenticate | 297 | ··-·sudo_remove_no_authenticate |
| 277 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 278 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 279 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 280 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 281 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 282 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 283 | ··if·[·!·-e·"$f"·]·;·then | ||
| 284 | ····continue | ||
| 285 | ··fi | ||
| 286 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 287 | ··if·!·test·-z·"$matching_list";·then | ||
| 288 | ····while·IFS=·read·-r·entry;·do | ||
| 289 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 290 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 291 | ····done·<<<·"$matching_list" | ||
| 292 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 293 | visudo" | ||
| 294 | ··fi | ||
| 295 | done | ||
| 296 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 298 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 297 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 299 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 298 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 300 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 299 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 301 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 300 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 302 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 301 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 303 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 302 | ············Without·re-authentication,·users·may·access·resources·or·perform | 304 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 319, 14 lines modified | Offset 319, 35 lines modified | ||
| 319 | ···························1.7,·SR·1.8,·SR·1.9 | 319 | ···························1.7,·SR·1.8,·SR·1.9 |
| 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 321 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 321 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 322 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 322 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 324 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 324 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 325 | ···························SRG-OS-000373-GPOS-00158 | 325 | ···························SRG-OS-000373-GPOS-00158 |
| 326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 327 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 328 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 329 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 330 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 331 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 332 | ··if·[·!·-e·"$f"·]·;·then | ||
| 333 | ····continue | ||
| 334 | ··fi | ||
| 335 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 336 | ··if·!·test·-z·"$matching_list";·then | ||
| 337 | ····while·IFS=·read·-r·entry;·do | ||
| 338 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 339 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 340 | ····done·<<<·"$matching_list" | ||
| 341 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 342 | visudo" | ||
| 343 | ··fi | ||
| 344 | done | ||
| 326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 345 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 327 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 346 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 328 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 347 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 329 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 348 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 330 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 349 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 331 | -·name:·Find·/etc/sudoers.d/·files | 350 | -·name:·Find·/etc/sudoers.d/·files |
| 332 | ··ansible.builtin.find: | 351 | ··ansible.builtin.find: |
| Offset 357, 35 lines modified | Offset 378, 14 lines modified | ||
| 357 | ··-·NIST-800-53-IA-11 | 378 | ··-·NIST-800-53-IA-11 |
| 358 | ··-·low_complexity | 379 | ··-·low_complexity |
| 359 | ··-·low_disruption | 380 | ··-·low_disruption |
| 360 | ··-·medium_severity | 381 | ··-·medium_severity |
| 361 | ··-·no_reboot_needed | 382 | ··-·no_reboot_needed |
| 362 | ··-·restrict_strategy | 383 | ··-·restrict_strategy |
| 363 | ··-·sudo_remove_nopasswd | 384 | ··-·sudo_remove_nopasswd |
| 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 369 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 370 | ··if·[·!·-e·"$f"·]·;·then | ||
| 371 | ····continue | ||
| 372 | ··fi | ||
| 373 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 374 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 118477/123925 bytes (95.60%) of diff not shown. | |||
| Offset 16051, 146 lines modified | Offset 16051, 146 lines modified | ||
| 0003eb20:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003eb20:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003eb30:·3139·3930·2220·7461·6269·6e64·6578·3d22··1990"·tabindex=" | 0003eb30:·3139·3930·2220·7461·6269·6e64·6578·3d22··1990"·tabindex=" | ||
| 0003eb40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003eb40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003eb50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003eb50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003eb60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003eb60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003eb70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003eb70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003eb80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003eb80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003eb90:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003eba0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003ebb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ebc0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ebd0:·7073·6522·2069·643d·2269·646d·3139·3930··pse"·id="idm1990 | |||
| 0003ebe0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003ebf0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003ec00:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003ec10:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003ec20:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003ec30:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003ec40:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ec50:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003ec60:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ec70:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003ec80:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003ec90:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003eca0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003ecb0:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | |||
| 0003ecc0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003ecd0:·3e3c·7072·653e·3c63·6f64·653e·0a66·6f72··><pre><code>.for | |||
| 0003ece0:·2066·2069·6e20·2f65·7463·2f73·7564·6f65···f·in·/etc/sudoe | |||
| 0003ecf0:·7273·202f·6574·632f·7375·646f·6572·732e··rs·/etc/sudoers. | |||
| 0003ed00:·642f·2a20·3b20·646f·0a20·2069·6620·5b20··d/*·;·do.··if·[· | |||
| 0003ed10:·2120·2d65·2022·2466·2220·5d20·3b20·7468··!·-e·"$f"·]·;·th | |||
| 0003ed20:·656e·0a20·2020·2063·6f6e·7469·6e75·650a··en.····continue. | |||
| 0003ed30:·2020·6669·0a20·206d·6174·6368·696e·675f····fi.··matching_ | |||
| 0003ed40:·6c69·7374·3d24·2867·7265·7020·2d50·2027··list=$(grep·-P·' | |||
| 0003ed50:·5e28·3f21·2329·2e2a·5b5c·735d·2b5c·2161··^(?!#).*[\s]+\!a | |||
| 0003ed60:·7574·6865·6e74·6963·6174·652e·2a24·2720··uthenticate.*$'· | |||
| 0003ed70:·2466·207c·2075·6e69·7120·290a·2020·6966··$f·|·uniq·).··if | |||
| 0003ed80:·2021·2074·6573·7420·2d7a·2022·246d·6174···!·test·-z·"$mat | |||
| 0003ed90:·6368·696e·675f·6c69·7374·223b·2074·6865··ching_list";·the | |||
| 0003eda0:·6e0a·2020·2020·7768·696c·6520·4946·533d··n.····while·IFS= | |||
| 0003edb0:·2072·6561·6420·2d72·2065·6e74·7279·3b20···read·-r·entry;· | |||
| 0003edc0:·646f·0a20·2020·2020·2023·2063·6f6d·6d65··do.······#·comme | |||
| 0003edd0:·6e74·206f·7574·2022·2161·7574·6865·6e74··nt·out·"!authent | |||
| 0003ede0:·6963·6174·6522·206d·6174·6368·6573·2074··icate"·matches·t | |||
| 0003edf0:·6f20·7072·6573·6572·7665·2075·7365·7220··o·preserve·user· | |||
| 0003ee00:·6461·7461·0a20·2020·2020·2073·6564·202d··data.······sed·- | |||
| 0003ee10:·6920·2273·2f5e·247b·656e·7472·797d·242f··i·"s/^${entry}$/ | |||
| 0003ee20:·2320·2661·6d70·3b2f·6722·2024·660a·2020··#·&/g"·$f.·· | |||
| 0003ee30:·2020·646f·6e65·2026·6c74·3b26·6c74·3b26····done·<<& | |||
| 0003ee40:·6c74·3b20·2224·6d61·7463·6869·6e67·5f6c··lt;·"$matching_l | |||
| 0003ee50:·6973·7422·0a0a·2020·2020·2f75·7372·2f73··ist"..····/usr/s | |||
| 0003ee60:·6269·6e2f·7669·7375·646f·202d·6366·2024··bin/visudo·-cf·$ | |||
| 0003ee70:·6620·2661·6d70·3b26·6774·3b20·2f64·6576··f·&>·/dev | |||
| 0003ee80:·2f6e·756c·6c20·7c7c·2065·6368·6f20·2246··/null·||·echo·"F | |||
| 0003ee90:·6169·6c20·746f·2076·616c·6964·6174·6520··ail·to·validate· | |||
| 0003eea0:·2466·2077·6974·6820·7669·7375·646f·220a··$f·with·visudo". | |||
| 0003eeb0:·2020·6669·0a64·6f6e·650a·3c2f·636f·6465····fi.done.</code | |||
| 0003eec0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003eed0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003eee0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003eef0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003ef00:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003ef10:·3139·3931·2220·7461·6269·6e64·6578·3d22··1991"·tabindex=" | |||
| 0003ef20:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003ef30:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003ef40:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003ef50:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003ef60:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003e | 0003ef70:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003e | 0003ef80:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003e | 0003ef90:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003e | 0003efa0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003e | 0003efb0:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | ||
| 0003e | 0003efc0:·3939·3122·3e3c·7461·626c·6520·636c·6173··991"><table·clas | ||
| 0003e | 0003efd0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003e | 0003efe0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003e | 0003eff0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003ec20:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003ec30:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003ec40:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ec50:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003ec60:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003ec70:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ec80:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003ec90:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003eca0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003ecb0:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | |||
| 0003ecc0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | |||
| 0003ecd0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003ece0:·206e·616d·653a·2046·696e·6420·2f65·7463···name:·Find·/etc | |||
| 0003ecf0:·2f73·7564·6f65·7273·2e64·2f20·6669·6c65··/sudoers.d/·file | |||
| 0003ed00:·730a·2020·616e·7369·626c·652e·6275·696c··s.··ansible.buil | |||
| 0003ed10:·7469·6e2e·6669·6e64·3a0a·2020·2020·7061··tin.find:.····pa | |||
| 0003ed20:·7468·733a·0a20·2020·202d·202f·6574·632f··ths:.····-·/etc/ | |||
| 0003ed30:·7375·646f·6572·732e·642f·0a20·2072·6567··sudoers.d/.··reg | |||
| 0003ed40:·6973·7465·723a·2073·7564·6f65·7273·0a20··ister:·sudoers.· | |||
| 0003ed50:·2074·6167·733a·0a20·202d·204e·4953·542d···tags:.··-·NIST- | |||
| 0003ed60:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003ed70:·202d·204e·4953·542d·3830·302d·3533·2d49···-·NIST-800-53-I | |||
| 0003ed80:·412d·3131·0a20·202d·206c·6f77·5f63·6f6d··A-11.··-·low_com | |||
| 0003ed90:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003eda0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003edb0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003edc0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003edd0:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | |||
| 0003ede0:·5f73·7472·6174·6567·790a·2020·2d20·7375··_strategy.··-·su | |||
| 0003edf0:·646f·5f72·656d·6f76·655f·6e6f·5f61·7574··do_remove_no_aut | |||
| 0003ee00:·6865·6e74·6963·6174·650a·0a2d·206e·616d··henticate..-·nam | |||
| 0003ee10:·653a·2052·656d·6f76·6520·6c69·6e65·7320··e:·Remove·lines· | |||
| 0003ee20:·636f·6e74·6169·6e69·6e67·2021·6175·7468··containing·!auth | |||
| 0003ee30:·656e·7469·6361·7465·2066·726f·6d20·7375··enticate·from·su | |||
| 0003ee40:·646f·6572·7320·6669·6c65·730a·2020·616e··doers·files.··an | |||
| 0003ee50:·7369·626c·652e·6275·696c·7469·6e2e·7265··sible.builtin.re | |||
| 0003ee60:·706c·6163·653a·0a20·2020·2072·6567·6578··place:.····regex | |||
| 0003ee70:·703a·2028·5e28·3f21·2329·2e2a·5b5c·735d··p:·(^(?!#).*[\s] | |||
| 0003ee80:·2b5c·2161·7574·6865·6e74·6963·6174·652e··+\!authenticate. | |||
| 0003ee90:·2a24·290a·2020·2020·7265·706c·6163·653a··*$).····replace: | |||
| 0003eea0:·2027·2320·5c67·266c·743b·3126·6774·3b27···'#·\g<1>' | |||
| 0003eeb0:·0a20·2020·2070·6174·683a·2027·7b7b·2069··.····path:·'{{·i | |||
| 0003eec0:·7465·6d2e·7061·7468·207d·7d27·0a20·2020··tem.path·}}'.··· | |||
| 0003eed0:·2076·616c·6964·6174·653a·202f·7573·722f···validate:·/usr/ | |||
| 0003eee0:·7362·696e·2f76·6973·7564·6f20·2d63·6620··sbin/visudo·-cf· | |||
| 0003eef0:·2573·0a20·2077·6974·685f·6974·656d·733a··%s.··with_items: | |||
| 0003ef00:·0a20·202d·2070·6174·683a·202f·6574·632f··.··-·path:·/etc/ | |||
| 0003ef10:·7375·646f·6572·730a·2020·2d20·277b·7b20··sudoers.··-·'{{· | |||
| 0003ef20:·7375·646f·6572·732e·6669·6c65·7320·7d7d··sudoers.files·}} | |||
| Max diff block lines reached; 1167026/1185822 bytes (98.41%) of diff not shown. | |||
| Offset 236, 14 lines modified | Offset 236, 35 lines modified | ||
| 236 | ···························1.7,·SR·1.8,·SR·1.9 | 236 | ···························1.7,·SR·1.8,·SR·1.9 |
| 237 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 237 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 238 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 238 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 239 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 239 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 240 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 240 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 241 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 241 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 242 | ···························SRG-OS-000373-GPOS-00158 | 242 | ···························SRG-OS-000373-GPOS-00158 |
| 243 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 244 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 245 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 246 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 247 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 248 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 249 | ··if·[·!·-e·"$f"·]·;·then | ||
| 250 | ····continue | ||
| 251 | ··fi | ||
| 252 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 253 | ··if·!·test·-z·"$matching_list";·then | ||
| 254 | ····while·IFS=·read·-r·entry;·do | ||
| 255 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 256 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 257 | ····done·<<<·"$matching_list" | ||
| 258 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 259 | visudo" | ||
| 260 | ··fi | ||
| 261 | done | ||
| 243 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 262 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 244 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 263 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 245 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 264 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 246 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 265 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 247 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 266 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 248 | -·name:·Find·/etc/sudoers.d/·files | 267 | -·name:·Find·/etc/sudoers.d/·files |
| 249 | ··ansible.builtin.find: | 268 | ··ansible.builtin.find: |
| Offset 274, 35 lines modified | Offset 295, 14 lines modified | ||
| 274 | ··-·NIST-800-53-IA-11 | 295 | ··-·NIST-800-53-IA-11 |
| 275 | ··-·low_complexity | 296 | ··-·low_complexity |
| 276 | ··-·low_disruption | 297 | ··-·low_disruption |
| 277 | ··-·medium_severity | 298 | ··-·medium_severity |
| 278 | ··-·no_reboot_needed | 299 | ··-·no_reboot_needed |
| 279 | ··-·restrict_strategy | 300 | ··-·restrict_strategy |
| 280 | ··-·sudo_remove_no_authenticate | 301 | ··-·sudo_remove_no_authenticate |
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 284 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 285 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 286 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 287 | ··if·[·!·-e·"$f"·]·;·then | ||
| 288 | ····continue | ||
| 289 | ··fi | ||
| 290 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 291 | ··if·!·test·-z·"$matching_list";·then | ||
| 292 | ····while·IFS=·read·-r·entry;·do | ||
| 293 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 294 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 295 | ····done·<<<·"$matching_list" | ||
| 296 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 297 | visudo" | ||
| 298 | ··fi | ||
| 299 | done | ||
| 300 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 302 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 301 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 303 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 302 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 304 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 303 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 305 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 304 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 306 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 305 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 307 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 306 | ············Without·re-authentication,·users·may·access·resources·or·perform | 308 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 323, 14 lines modified | Offset 323, 35 lines modified | ||
| 323 | ···························1.7,·SR·1.8,·SR·1.9 | 323 | ···························1.7,·SR·1.8,·SR·1.9 |
| 324 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 324 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 325 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 325 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 326 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 326 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 327 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 327 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 328 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 328 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 329 | ···························SRG-OS-000373-GPOS-00158 | 329 | ···························SRG-OS-000373-GPOS-00158 |
| 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 331 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 332 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 333 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 334 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 335 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 336 | ··if·[·!·-e·"$f"·]·;·then | ||
| 337 | ····continue | ||
| 338 | ··fi | ||
| 339 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 340 | ··if·!·test·-z·"$matching_list";·then | ||
| 341 | ····while·IFS=·read·-r·entry;·do | ||
| 342 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 343 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 344 | ····done·<<<·"$matching_list" | ||
| 345 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 346 | visudo" | ||
| 347 | ··fi | ||
| 348 | done | ||
| 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 349 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 331 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 350 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 332 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 351 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 333 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 352 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 334 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 353 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 335 | -·name:·Find·/etc/sudoers.d/·files | 354 | -·name:·Find·/etc/sudoers.d/·files |
| 336 | ··ansible.builtin.find: | 355 | ··ansible.builtin.find: |
| Offset 361, 35 lines modified | Offset 382, 14 lines modified | ||
| 361 | ··-·NIST-800-53-IA-11 | 382 | ··-·NIST-800-53-IA-11 |
| 362 | ··-·low_complexity | 383 | ··-·low_complexity |
| 363 | ··-·low_disruption | 384 | ··-·low_disruption |
| 364 | ··-·medium_severity | 385 | ··-·medium_severity |
| 365 | ··-·no_reboot_needed | 386 | ··-·no_reboot_needed |
| 366 | ··-·restrict_strategy | 387 | ··-·restrict_strategy |
| 367 | ··-·sudo_remove_nopasswd | 388 | ··-·sudo_remove_nopasswd |
| 368 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 369 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 370 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 371 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 372 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 373 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 374 | ··if·[·!·-e·"$f"·]·;·then | ||
| 375 | ····continue | ||
| 376 | ··fi | ||
| 377 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 378 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 137046/142494 bytes (96.18%) of diff not shown. | |||
| Offset 14774, 147 lines modified | Offset 14774, 147 lines modified | ||
| 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00039b60:·743d·2223·6964·6d31·3939·3022·2074·6162··t="#idm1990"·tab | 00039b60:·743d·2223·6964·6d31·3939·3022·2074·6162··t="#idm1990"·tab | ||
| 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 00039bc0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 00039bd0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 00039be0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00039bf0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00039c00:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00039c10:·6964·6d31·3939·3022·3e3c·7461·626c·6520··idm1990"><table· | |||
| 00039c20:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00039c30:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00039c40:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00039c50:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00039c60:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00039c70:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00039c80:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00039c90:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00039ca0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039cb0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00039cc0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00039cd0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00039ce0:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 00039cf0:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 00039d00:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00039d10:·6465·3e0a·666f·7220·6620·696e·202f·6574··de>.for·f·in·/et | |||
| 00039d20:·632f·7375·646f·6572·7320·2f65·7463·2f73··c/sudoers·/etc/s | |||
| 00039d30:·7564·6f65·7273·2e64·2f2a·203b·2064·6f0a··udoers.d/*·;·do. | |||
| 00039d40:·2020·6966·205b·2021·202d·6520·2224·6622····if·[·!·-e·"$f" | |||
| 00039d50:·205d·203b·2074·6865·6e0a·2020·2020·636f···]·;·then.····co | |||
| 00039d60:·6e74·696e·7565·0a20·2066·690a·2020·6d61··ntinue.··fi.··ma | |||
| 00039d70:·7463·6869·6e67·5f6c·6973·743d·2428·6772··tching_list=$(gr | |||
| 00039d80:·6570·202d·5020·275e·283f·2123·292e·2a5b··ep·-P·'^(?!#).*[ | |||
| 00039d90:·5c73·5d2b·5c21·6175·7468·656e·7469·6361··\s]+\!authentica | |||
| 00039da0:·7465·2e2a·2427·2024·6620·7c20·756e·6971··te.*$'·$f·|·uniq | |||
| 00039db0:·2029·0a20·2069·6620·2120·7465·7374·202d···).··if·!·test·- | |||
| 00039dc0:·7a20·2224·6d61·7463·6869·6e67·5f6c·6973··z·"$matching_lis | |||
| 00039dd0:·7422·3b20·7468·656e·0a20·2020·2077·6869··t";·then.····whi | |||
| 00039de0:·6c65·2049·4653·3d20·7265·6164·202d·7220··le·IFS=·read·-r· | |||
| 00039df0:·656e·7472·793b·2064·6f0a·2020·2020·2020··entry;·do.······ | |||
| 00039e00:·2320·636f·6d6d·656e·7420·6f75·7420·2221··#·comment·out·"! | |||
| 00039e10:·6175·7468·656e·7469·6361·7465·2220·6d61··authenticate"·ma | |||
| 00039e20:·7463·6865·7320·746f·2070·7265·7365·7276··tches·to·preserv | |||
| 00039e30:·6520·7573·6572·2064·6174·610a·2020·2020··e·user·data.···· | |||
| 00039e40:·2020·7365·6420·2d69·2022·732f·5e24·7b65····sed·-i·"s/^${e | |||
| 00039e50:·6e74·7279·7d24·2f23·2026·616d·703b·2f67··ntry}$/#·&/g | |||
| 00039e60:·2220·2466·0a20·2020·2064·6f6e·6520·266c··"·$f.····done·&l | |||
| 00039e70:·743b·266c·743b·266c·743b·2022·246d·6174··t;<<·"$mat | |||
| 00039e80:·6368·696e·675f·6c69·7374·220a·0a20·2020··ching_list"..··· | |||
| 00039e90:·202f·7573·722f·7362·696e·2f76·6973·7564···/usr/sbin/visud | |||
| 00039ea0:·6f20·2d63·6620·2466·2026·616d·703b·2667··o·-cf·$f·&&g | |||
| 00039eb0:·743b·202f·6465·762f·6e75·6c6c·207c·7c20··t;·/dev/null·||· | |||
| 00039ec0:·6563·686f·2022·4661·696c·2074·6f20·7661··echo·"Fail·to·va | |||
| 00039ed0:·6c69·6461·7465·2024·6620·7769·7468·2076··lidate·$f·with·v | |||
| 00039ee0:·6973·7564·6f22·0a20·2066·690a·646f·6e65··isudo".··fi.done | |||
| 00039ef0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00039f00:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00039f10:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00039f20:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00039f30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00039f40:·743d·2223·6964·6d31·3939·3122·2074·6162··t="#idm1991"·tab | |||
| 00039f50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00039f60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00039f70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00039f80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00039f90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00039 | 00039fa0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 00039 | 00039fb0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 00039 | 00039fc0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 00039 | 00039fd0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 00039 | 00039fe0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 00039c10:·643d·2269·646d·3139·3930·223e·3c74·6162··d="idm1990"><tab | |||
| 00039c20:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00039c30:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00039c40:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00039c50:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00039c60:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00039c70:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00039c80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00039c90:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00039ca0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039cb0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00039cc0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00039cd0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00039ce0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00039cf0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 00039d00:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00039d10:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4669··<code>-·name:·Fi | |||
| 00039d20:·6e64·202f·6574·632f·7375·646f·6572·732e··nd·/etc/sudoers. | |||
| 00039d30:·642f·2066·696c·6573·0a20·2061·6e73·6962··d/·files.··ansib | |||
| 00039d40:·6c65·2e62·7569·6c74·696e·2e66·696e·643a··le.builtin.find: | |||
| 00039d50:·0a20·2020·2070·6174·6873·3a0a·2020·2020··.····paths:.···· | |||
| 00039d60:·2d20·2f65·7463·2f73·7564·6f65·7273·2e64··-·/etc/sudoers.d | |||
| 00039d70:·2f0a·2020·7265·6769·7374·6572·3a20·7375··/.··register:·su | |||
| 00039d80:·646f·6572·730a·2020·7461·6773·3a0a·2020··doers.··tags:.·· | |||
| 00039d90:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 00039da0:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | |||
| 00039db0:·3030·2d35·332d·4941·2d31·310a·2020·2d20··00-53-IA-11.··-· | |||
| 00039dc0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 00039dd0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 00039de0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 00039df0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 00039e00:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | |||
| 00039e10:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | |||
| 00039e20:·0a20·202d·2073·7564·6f5f·7265·6d6f·7665··.··-·sudo_remove | |||
| 00039e30:·5f6e·6f5f·6175·7468·656e·7469·6361·7465··_no_authenticate | |||
| 00039e40:·0a0a·2d20·6e61·6d65·3a20·5265·6d6f·7665··..-·name:·Remove | |||
| 00039e50:·206c·696e·6573·2063·6f6e·7461·696e·696e···lines·containin | |||
| 00039e60:·6720·2161·7574·6865·6e74·6963·6174·6520··g·!authenticate· | |||
| 00039e70:·6672·6f6d·2073·7564·6f65·7273·2066·696c··from·sudoers·fil | |||
| 00039e80:·6573·0a20·2061·6e73·6962·6c65·2e62·7569··es.··ansible.bui | |||
| 00039e90:·6c74·696e·2e72·6570·6c61·6365·3a0a·2020··ltin.replace:.·· | |||
| 00039ea0:·2020·7265·6765·7870·3a20·285e·283f·2123····regexp:·(^(?!# | |||
| 00039eb0:·292e·2a5b·5c73·5d2b·5c21·6175·7468·656e··).*[\s]+\!authen | |||
| 00039ec0:·7469·6361·7465·2e2a·2429·0a20·2020·2072··ticate.*$).····r | |||
| 00039ed0:·6570·6c61·6365·3a20·2723·205c·6726·6c74··eplace:·'#·\g< | |||
| 00039ee0:·3b31·2667·743b·270a·2020·2020·7061·7468··;1>'.····path | |||
| 00039ef0:·3a20·277b·7b20·6974·656d·2e70·6174·6820··:·'{{·item.path· | |||
| 00039f00:·7d7d·270a·2020·2020·7661·6c69·6461·7465··}}'.····validate | |||
| 00039f10:·3a20·2f75·7372·2f73·6269·6e2f·7669·7375··:·/usr/sbin/visu | |||
| 00039f20:·646f·202d·6366·2025·730a·2020·7769·7468··do·-cf·%s.··with | |||
| 00039f30:·5f69·7465·6d73·3a0a·2020·2d20·7061·7468··_items:.··-·path | |||
| 00039f40:·3a20·2f65·7463·2f73·7564·6f65·7273·0a20··:·/etc/sudoers.· | |||
| 00039f50:·202d·2027·7b7b·2073·7564·6f65·7273·2e66···-·'{{·sudoers.f | |||
| Max diff block lines reached; 274268/293202 bytes (93.54%) of diff not shown. | |||
| Offset 90, 14 lines modified | Offset 90, 35 lines modified | ||
| 90 | ···························1.7,·SR·1.8,·SR·1.9 | 90 | ···························1.7,·SR·1.8,·SR·1.9 |
| 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 96 | ···························SRG-OS-000373-GPOS-00158 | 96 | ···························SRG-OS-000373-GPOS-00158 |
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 102 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 103 | ··if·[·!·-e·"$f"·]·;·then | ||
| 104 | ····continue | ||
| 105 | ··fi | ||
| 106 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 107 | ··if·!·test·-z·"$matching_list";·then | ||
| 108 | ····while·IFS=·read·-r·entry;·do | ||
| 109 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 110 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 111 | ····done·<<<·"$matching_list" | ||
| 112 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 113 | visudo" | ||
| 114 | ··fi | ||
| 115 | done | ||
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 102 | -·name:·Find·/etc/sudoers.d/·files | 121 | -·name:·Find·/etc/sudoers.d/·files |
| 103 | ··ansible.builtin.find: | 122 | ··ansible.builtin.find: |
| Offset 128, 35 lines modified | Offset 149, 14 lines modified | ||
| 128 | ··-·NIST-800-53-IA-11 | 149 | ··-·NIST-800-53-IA-11 |
| 129 | ··-·low_complexity | 150 | ··-·low_complexity |
| 130 | ··-·low_disruption | 151 | ··-·low_disruption |
| 131 | ··-·medium_severity | 152 | ··-·medium_severity |
| 132 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 133 | ··-·restrict_strategy | 154 | ··-·restrict_strategy |
| 134 | ··-·sudo_remove_no_authenticate | 155 | ··-·sudo_remove_no_authenticate |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 140 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 141 | ··if·[·!·-e·"$f"·]·;·then | ||
| 142 | ····continue | ||
| 143 | ··fi | ||
| 144 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 145 | ··if·!·test·-z·"$matching_list";·then | ||
| 146 | ····while·IFS=·read·-r·entry;·do | ||
| 147 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 148 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 149 | ····done·<<<·"$matching_list" | ||
| 150 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 151 | visudo" | ||
| 152 | ··fi | ||
| 153 | done | ||
| 154 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 155 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 157 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 156 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 158 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 157 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 159 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 158 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 160 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 159 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 161 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 160 | ············Without·re-authentication,·users·may·access·resources·or·perform | 162 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 177, 14 lines modified | Offset 177, 35 lines modified | ||
| 177 | ···························1.7,·SR·1.8,·SR·1.9 | 177 | ···························1.7,·SR·1.8,·SR·1.9 |
| 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 183 | ···························SRG-OS-000373-GPOS-00158 | 183 | ···························SRG-OS-000373-GPOS-00158 |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 189 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 190 | ··if·[·!·-e·"$f"·]·;·then | ||
| 191 | ····continue | ||
| 192 | ··fi | ||
| 193 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 194 | ··if·!·test·-z·"$matching_list";·then | ||
| 195 | ····while·IFS=·read·-r·entry;·do | ||
| 196 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 197 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 198 | ····done·<<<·"$matching_list" | ||
| 199 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 200 | visudo" | ||
| 201 | ··fi | ||
| 202 | done | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 189 | -·name:·Find·/etc/sudoers.d/·files | 208 | -·name:·Find·/etc/sudoers.d/·files |
| 190 | ··ansible.builtin.find: | 209 | ··ansible.builtin.find: |
| Offset 215, 35 lines modified | Offset 236, 14 lines modified | ||
| 215 | ··-·NIST-800-53-IA-11 | 236 | ··-·NIST-800-53-IA-11 |
| 216 | ··-·low_complexity | 237 | ··-·low_complexity |
| 217 | ··-·low_disruption | 238 | ··-·low_disruption |
| 218 | ··-·medium_severity | 239 | ··-·medium_severity |
| 219 | ··-·no_reboot_needed | 240 | ··-·no_reboot_needed |
| 220 | ··-·restrict_strategy | 241 | ··-·restrict_strategy |
| 221 | ··-·sudo_remove_nopasswd | 242 | ··-·sudo_remove_nopasswd |
| 222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 227 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 228 | ··if·[·!·-e·"$f"·]·;·then | ||
| 229 | ····continue | ||
| 230 | ··fi | ||
| 231 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 232 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 34594/40051 bytes (86.37%) of diff not shown. | |||
| Offset 16042, 146 lines modified | Offset 16042, 146 lines modified | ||
| 0003ea90:·6574·3d22·2369·646d·3139·3930·2220·7461··et="#idm1990"·ta | 0003ea90:·6574·3d22·2369·646d·3139·3930·2220·7461··et="#idm1990"·ta | ||
| 0003eaa0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003eaa0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003eab0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003eab0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003eac0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003eac0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003ead0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003ead0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003eae0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003eae0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003eaf0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003eaf0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003eb00:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003eb10:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003eb20:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003eb30:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003eb40:·2269·646d·3139·3930·223e·3c74·6162·6c65··"idm1990"><table | |||
| 0003eb50:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003eb60:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003eb70:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003eb80:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003eb90:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003eba0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ebb0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003ebc0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003ebd0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003ebe0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003ebf0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003ec00:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003ec10:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003ec20:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003ec30:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003ec40:·6f64·653e·0a66·6f72·2066·2069·6e20·2f65··ode>.for·f·in·/e | |||
| 0003ec50:·7463·2f73·7564·6f65·7273·202f·6574·632f··tc/sudoers·/etc/ | |||
| 0003ec60:·7375·646f·6572·732e·642f·2a20·3b20·646f··sudoers.d/*·;·do | |||
| 0003ec70:·0a20·2069·6620·5b20·2120·2d65·2022·2466··.··if·[·!·-e·"$f | |||
| 0003ec80:·2220·5d20·3b20·7468·656e·0a20·2020·2063··"·]·;·then.····c | |||
| 0003ec90:·6f6e·7469·6e75·650a·2020·6669·0a20·206d··ontinue.··fi.··m | |||
| 0003eca0:·6174·6368·696e·675f·6c69·7374·3d24·2867··atching_list=$(g | |||
| 0003ecb0:·7265·7020·2d50·2027·5e28·3f21·2329·2e2a··rep·-P·'^(?!#).* | |||
| 0003ecc0:·5b5c·735d·2b5c·2161·7574·6865·6e74·6963··[\s]+\!authentic | |||
| 0003ecd0:·6174·652e·2a24·2720·2466·207c·2075·6e69··ate.*$'·$f·|·uni | |||
| 0003ece0:·7120·290a·2020·6966·2021·2074·6573·7420··q·).··if·!·test· | |||
| 0003ecf0:·2d7a·2022·246d·6174·6368·696e·675f·6c69··-z·"$matching_li | |||
| 0003ed00:·7374·223b·2074·6865·6e0a·2020·2020·7768··st";·then.····wh | |||
| 0003ed10:·696c·6520·4946·533d·2072·6561·6420·2d72··ile·IFS=·read·-r | |||
| 0003ed20:·2065·6e74·7279·3b20·646f·0a20·2020·2020···entry;·do.····· | |||
| 0003ed30:·2023·2063·6f6d·6d65·6e74·206f·7574·2022···#·comment·out·" | |||
| 0003ed40:·2161·7574·6865·6e74·6963·6174·6522·206d··!authenticate"·m | |||
| 0003ed50:·6174·6368·6573·2074·6f20·7072·6573·6572··atches·to·preser | |||
| 0003ed60:·7665·2075·7365·7220·6461·7461·0a20·2020··ve·user·data.··· | |||
| 0003ed70:·2020·2073·6564·202d·6920·2273·2f5e·247b·····sed·-i·"s/^${ | |||
| 0003ed80:·656e·7472·797d·242f·2320·2661·6d70·3b2f··entry}$/#·&/ | |||
| 0003ed90:·6722·2024·660a·2020·2020·646f·6e65·2026··g"·$f.····done·& | |||
| 0003eda0:·6c74·3b26·6c74·3b26·6c74·3b20·2224·6d61··lt;<<·"$ma | |||
| 0003edb0:·7463·6869·6e67·5f6c·6973·7422·0a0a·2020··tching_list"..·· | |||
| 0003edc0:·2020·2f75·7372·2f73·6269·6e2f·7669·7375····/usr/sbin/visu | |||
| 0003edd0:·646f·202d·6366·2024·6620·2661·6d70·3b26··do·-cf·$f·&& | |||
| 0003ede0:·6774·3b20·2f64·6576·2f6e·756c·6c20·7c7c··gt;·/dev/null·|| | |||
| 0003edf0:·2065·6368·6f20·2246·6169·6c20·746f·2076···echo·"Fail·to·v | |||
| 0003ee00:·616c·6964·6174·6520·2466·2077·6974·6820··alidate·$f·with· | |||
| 0003ee10:·7669·7375·646f·220a·2020·6669·0a64·6f6e··visudo".··fi.don | |||
| 0003ee20:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 0003ee30:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003ee40:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003ee50:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003ee60:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003ee70:·6574·3d22·2369·646d·3139·3931·2220·7461··et="#idm1991"·ta | |||
| 0003ee80:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003ee90:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003eea0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003eeb0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003eec0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003eed0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003e | 0003eee0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 0003e | 0003eef0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003eb20:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003eb30:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003eb40:·6964·3d22·6964·6d31·3939·3022·3e3c·7461··id="idm1990"><ta | |||
| 0003eb50:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003eb60:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003eb70:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003eb80:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003eb90:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003eba0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003ebb0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ebc0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003ebd0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ebe0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003ebf0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003ec00:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ec10:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003ec20:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | |||
| 0003ec30:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003ec40:·3e3c·636f·6465·3e2d·206e·616d·653a·2046··><code>-·name:·F | |||
| 0003ec50:·696e·6420·2f65·7463·2f73·7564·6f65·7273··ind·/etc/sudoers | |||
| 0003ec60:·2e64·2f20·6669·6c65·730a·2020·616e·7369··.d/·files.··ansi | |||
| 0003ec70:·626c·652e·6275·696c·7469·6e2e·6669·6e64··ble.builtin.find | |||
| 0003ec80:·3a0a·2020·2020·7061·7468·733a·0a20·2020··:.····paths:.··· | |||
| 0003ec90:·202d·202f·6574·632f·7375·646f·6572·732e···-·/etc/sudoers. | |||
| 0003eca0:·642f·0a20·2072·6567·6973·7465·723a·2073··d/.··register:·s | |||
| 0003ecb0:·7564·6f65·7273·0a20·2074·6167·733a·0a20··udoers.··tags:.· | |||
| 0003ecc0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003ecd0:·4d2d·3628·6129·0a20·202d·204e·4953·542d··M-6(a).··-·NIST- | |||
| 0003ece0:·3830·302d·3533·2d49·412d·3131·0a20·202d··800-53-IA-11.··- | |||
| 0003ecf0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003ed00:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003ed10:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003ed20:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003ed30:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003ed40:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | |||
| 0003ed50:·790a·2020·2d20·7375·646f·5f72·656d·6f76··y.··-·sudo_remov | |||
| 0003ed60:·655f·6e6f·5f61·7574·6865·6e74·6963·6174··e_no_authenticat | |||
| 0003ed70:·650a·0a2d·206e·616d·653a·2052·656d·6f76··e..-·name:·Remov | |||
| 0003ed80:·6520·6c69·6e65·7320·636f·6e74·6169·6e69··e·lines·containi | |||
| 0003ed90:·6e67·2021·6175·7468·656e·7469·6361·7465··ng·!authenticate | |||
| 0003eda0:·2066·726f·6d20·7375·646f·6572·7320·6669···from·sudoers·fi | |||
| 0003edb0:·6c65·730a·2020·616e·7369·626c·652e·6275··les.··ansible.bu | |||
| 0003edc0:·696c·7469·6e2e·7265·706c·6163·653a·0a20··iltin.replace:.· | |||
| 0003edd0:·2020·2072·6567·6578·703a·2028·5e28·3f21·····regexp:·(^(?! | |||
| 0003ede0:·2329·2e2a·5b5c·735d·2b5c·2161·7574·6865··#).*[\s]+\!authe | |||
| 0003edf0:·6e74·6963·6174·652e·2a24·290a·2020·2020··nticate.*$).···· | |||
| 0003ee00:·7265·706c·6163·653a·2027·2320·5c67·266c··replace:·'#·\g&l | |||
| 0003ee10:·743b·3126·6774·3b27·0a20·2020·2070·6174··t;1>'.····pat | |||
| 0003ee20:·683a·2027·7b7b·2069·7465·6d2e·7061·7468··h:·'{{·item.path | |||
| 0003ee30:·207d·7d27·0a20·2020·2076·616c·6964·6174···}}'.····validat | |||
| 0003ee40:·653a·202f·7573·722f·7362·696e·2f76·6973··e:·/usr/sbin/vis | |||
| 0003ee50:·7564·6f20·2d63·6620·2573·0a20·2077·6974··udo·-cf·%s.··wit | |||
| 0003ee60:·685f·6974·656d·733a·0a20·202d·2070·6174··h_items:.··-·pat | |||
| 0003ee70:·683a·202f·6574·632f·7375·646f·6572·730a··h:·/etc/sudoers. | |||
| 0003ee80:·2020·2d20·277b·7b20·7375·646f·6572·732e····-·'{{·sudoers. | |||
| 0003ee90:·6669·6c65·7320·7d7d·270a·2020·7461·6773··files·}}'.··tags | |||
| Max diff block lines reached; 1167440/1186236 bytes (98.42%) of diff not shown. | |||
| Offset 234, 14 lines modified | Offset 234, 35 lines modified | ||
| 234 | ···························1.7,·SR·1.8,·SR·1.9 | 234 | ···························1.7,·SR·1.8,·SR·1.9 |
| 235 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 235 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 236 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 236 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 237 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 237 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 238 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 238 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 239 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 239 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 240 | ···························SRG-OS-000373-GPOS-00158 | 240 | ···························SRG-OS-000373-GPOS-00158 |
| 241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 246 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 247 | ··if·[·!·-e·"$f"·]·;·then | ||
| 248 | ····continue | ||
| 249 | ··fi | ||
| 250 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 251 | ··if·!·test·-z·"$matching_list";·then | ||
| 252 | ····while·IFS=·read·-r·entry;·do | ||
| 253 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 254 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 255 | ····done·<<<·"$matching_list" | ||
| 256 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 257 | visudo" | ||
| 258 | ··fi | ||
| 259 | done | ||
| 241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 261 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 262 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 263 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 264 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 246 | -·name:·Find·/etc/sudoers.d/·files | 265 | -·name:·Find·/etc/sudoers.d/·files |
| 247 | ··ansible.builtin.find: | 266 | ··ansible.builtin.find: |
| Offset 272, 35 lines modified | Offset 293, 14 lines modified | ||
| 272 | ··-·NIST-800-53-IA-11 | 293 | ··-·NIST-800-53-IA-11 |
| 273 | ··-·low_complexity | 294 | ··-·low_complexity |
| 274 | ··-·low_disruption | 295 | ··-·low_disruption |
| 275 | ··-·medium_severity | 296 | ··-·medium_severity |
| 276 | ··-·no_reboot_needed | 297 | ··-·no_reboot_needed |
| 277 | ··-·restrict_strategy | 298 | ··-·restrict_strategy |
| 278 | ··-·sudo_remove_no_authenticate | 299 | ··-·sudo_remove_no_authenticate |
| 279 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 280 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 281 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 282 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 283 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 284 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 285 | ··if·[·!·-e·"$f"·]·;·then | ||
| 286 | ····continue | ||
| 287 | ··fi | ||
| 288 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 289 | ··if·!·test·-z·"$matching_list";·then | ||
| 290 | ····while·IFS=·read·-r·entry;·do | ||
| 291 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 292 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 293 | ····done·<<<·"$matching_list" | ||
| 294 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 295 | visudo" | ||
| 296 | ··fi | ||
| 297 | done | ||
| 298 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 300 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 299 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 301 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 300 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 302 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 301 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 303 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 302 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 304 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 303 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 305 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 304 | ············Without·re-authentication,·users·may·access·resources·or·perform | 306 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 321, 14 lines modified | Offset 321, 35 lines modified | ||
| 321 | ···························1.7,·SR·1.8,·SR·1.9 | 321 | ···························1.7,·SR·1.8,·SR·1.9 |
| 322 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 322 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 323 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 323 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 324 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 324 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 327 | ···························SRG-OS-000373-GPOS-00158 | 327 | ···························SRG-OS-000373-GPOS-00158 |
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 333 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 334 | ··if·[·!·-e·"$f"·]·;·then | ||
| 335 | ····continue | ||
| 336 | ··fi | ||
| 337 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 338 | ··if·!·test·-z·"$matching_list";·then | ||
| 339 | ····while·IFS=·read·-r·entry;·do | ||
| 340 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 341 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 342 | ····done·<<<·"$matching_list" | ||
| 343 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 344 | visudo" | ||
| 345 | ··fi | ||
| 346 | done | ||
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 348 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 349 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 350 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 351 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 333 | -·name:·Find·/etc/sudoers.d/·files | 352 | -·name:·Find·/etc/sudoers.d/·files |
| 334 | ··ansible.builtin.find: | 353 | ··ansible.builtin.find: |
| Offset 359, 35 lines modified | Offset 380, 14 lines modified | ||
| 359 | ··-·NIST-800-53-IA-11 | 380 | ··-·NIST-800-53-IA-11 |
| 360 | ··-·low_complexity | 381 | ··-·low_complexity |
| 361 | ··-·low_disruption | 382 | ··-·low_disruption |
| 362 | ··-·medium_severity | 383 | ··-·medium_severity |
| 363 | ··-·no_reboot_needed | 384 | ··-·no_reboot_needed |
| 364 | ··-·restrict_strategy | 385 | ··-·restrict_strategy |
| 365 | ··-·sudo_remove_nopasswd | 386 | ··-·sudo_remove_nopasswd |
| 366 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 367 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 368 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 369 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 370 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 371 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 372 | ··if·[·!·-e·"$f"·]·;·then | ||
| 373 | ····continue | ||
| 374 | ··fi | ||
| 375 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 376 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 136992/142440 bytes (96.18%) of diff not shown. | |||
| Offset 16680, 181 lines modified | Offset 16680, 181 lines modified | ||
| 00041270:·6574·3d22·2369·646d·3638·3836·2220·7461··et="#idm6886"·ta | 00041270:·6574·3d22·2369·646d·3638·3836·2220·7461··et="#idm6886"·ta | ||
| 00041280:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 00041280:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 00041290:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 00041290:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 000412a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 000412a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 000412b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 000412b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 000412c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 000412c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 000412d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 000412d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 000412e0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 000412f0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00041300:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00041310:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00041320:·2269·646d·3638·3836·223e·3c74·6162·6c65··"idm6886"><table | |||
| 00041330:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 00041340:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00041350:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00041360:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00041370:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00041380:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00041390:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 000413a0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 000413b0:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | |||
| 000413c0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 000413d0:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 000413e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 000413f0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00041400:·3e64·6973·6162·6c65·3c2f·7464·3e3c·2f74··>disable</td></t | |||
| 00041410:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 00041420:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | |||
| 00041430:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 00041440:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 00041450:·2070·6c61·7466·6f72·6d73·0a69·6620·6470···platforms.if·dp | |||
| 00041460:·6b67·2d71·7565·7279·202d·2d73·686f·7720··kg-query·--show· | |||
| 00041470:·2d2d·7368·6f77·666f·726d·6174·3d27·247b··--showformat='${ | |||
| 00041480:·6462·3a53·7461·7475·732d·5374·6174·7573··db:Status-Status | |||
| 000412e0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 000412f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00041300:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00041310:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00041320:·6964·3d22·6964·6d36·3838·3622·3e3c·7461··id="idm6886"><ta | |||
| 00041330:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00041340:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00041350:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00041360:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00041370:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00041380:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00041390:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 000413a0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 000413b0:·3c74·643e·6d65·6469·756d·3c2f·7464·3e3c··<td>medium</td>< | |||
| 000413c0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 000413d0:·6f74·3a3c·2f74·683e·3c74·643e·7472·7565··ot:</th><td>true | |||
| 000413e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 000413f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 00041400:·3c74·643e·6469·7361·626c·653c·2f74·643e··<td>disable</td> | |||
| 00041410:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 00041420:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 00041430:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 00041440:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 00041450:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 00041460:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 00041470:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | |||
| 00041480:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 00041490:·4e49·5354·2d38·3030·2d35·332d·434d·2d37··NIST-800-53-CM-7 | |||
| 000414a0:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | |||
| 000414b0:·2d35·332d·434d·2d37·2862·290a·2020·2d20··-53-CM-7(b).··-· | |||
| 000414c0:·6469·7361·626c·655f·7374·7261·7465·6779··disable_strategy | |||
| 000414d0:·0a20·202d·206b·6572·6e65·6c5f·6d6f·6475··.··-·kernel_modu | |||
| 000414e0:·6c65·5f72·6473·5f64·6973·6162·6c65·640a··le_rds_disabled. | |||
| 000414f0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 00041500:·7479·0a20·202d·206c·6f77·5f73·6576·6572··ty.··-·low_sever | |||
| 00041510:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | |||
| 00041520:·6973·7275·7074·696f·6e0a·2020·2d20·7265··isruption.··-·re | |||
| 00041530:·626f·6f74·5f72·6571·7569·7265·640a·0a2d··boot_required..- | |||
| 00041540:·206e·616d·653a·2045·6e73·7572·6520·6b65···name:·Ensure·ke | |||
| 00041550:·726e·656c·206d·6f64·756c·6520·2772·6473··rnel·module·'rds | |||
| 00041560:·2720·6973·2064·6973·6162·6c65·640a·2020··'·is·disabled.·· | |||
| 00041570:·6c69·6e65·696e·6669·6c65·3a0a·2020·2020··lineinfile:.···· | |||
| 00041580:·6372·6561·7465·3a20·7472·7565·0a20·2020··create:·true.··· | |||
| 00041590:·2064·6573·743a·202f·6574·632f·6d6f·6470···dest:·/etc/modp | |||
| 000415a0:·726f·6265·2e64·2f72·6473·2e63·6f6e·660a··robe.d/rds.conf. | |||
| 000415b0:·2020·2020·7265·6765·7870·3a20·696e·7374······regexp:·inst | |||
| 000415c0:·616c·6c5c·732b·7264·730a·2020·2020·6c69··all\s+rds.····li | |||
| 000415d0:·6e65·3a20·696e·7374·616c·6c20·7264·7320··ne:·install·rds· | |||
| 000415e0:·2f62·696e·2f66·616c·7365·0a20·2077·6865··/bin/false.··whe | |||
| 00041 | 00041490:·7d0a·2720·276c·696e·7578·2d62·6173·6527··}.'·'linux-base' | ||
| 000414a0:·2032·2667·743b·2f64·6576·2f6e·756c·6c20···2>/dev/null· | |||
| 000414b0:·7c20·6772·6570·202d·7120·5e69·6e73·7461··|·grep·-q·^insta | |||
| 000414c0:·6c6c·6564·3b20·7468·656e·0a0a·6966·204c··lled;·then..if·L | |||
| 000414d0:·435f·414c·4c3d·4320·6772·6570·202d·7120··C_ALL=C·grep·-q· | |||
| 000414e0:·2d6d·2031·2022·5e69·6e73·7461·6c6c·2072··-m·1·"^install·r | |||
| 000414f0:·6473·2220·2f65·7463·2f6d·6f64·7072·6f62··ds"·/etc/modprob | |||
| 00041500:·652e·642f·7264·732e·636f·6e66·203b·2074··e.d/rds.conf·;·t | |||
| 00041510:·6865·6e0a·090a·0973·6564·202d·6920·2773··hen....sed·-i·'s | |||
| 00041520:·235e·696e·7374·616c·6c20·7264·732e·2a23··#^install·rds.*# | |||
| 00041530:·696e·7374·616c·6c20·7264·7320·2f62·696e··install·rds·/bin | |||
| 00041540:·2f66·616c·7365·2367·2720·2f65·7463·2f6d··/false#g'·/etc/m | |||
| 00041600:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 00041610:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 00041620:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | |||
| 00041630:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 00041640:·4e49·5354·2d38·3030·2d35·332d·434d·2d37··NIST-800-53-CM-7 | |||
| 00041650:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | |||
| 00041660:·2d35·332d·434d·2d37·2862·290a·2020·2d20··-53-CM-7(b).··-· | |||
| 00041670:·6469·7361·626c·655f·7374·7261·7465·6779··disable_strategy | |||
| 00041680:·0a20·202d·206b·6572·6e65·6c5f·6d6f·6475··.··-·kernel_modu | |||
| 00041690:·6c65·5f72·6473·5f64·6973·6162·6c65·640a··le_rds_disabled. | |||
| 000416a0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 000416b0:·7479·0a20·202d·206c·6f77·5f73·6576·6572··ty.··-·low_sever | |||
| 000416c0:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | |||
| 000416d0:·6973·7275·7074·696f·6e0a·2020·2d20·7265··isruption.··-·re | |||
| 000416e0:·626f·6f74·5f72·6571·7569·7265·640a·0a2d··boot_required..- | |||
| 000416f0:·206e·616d·653a·2045·6e73·7572·6520·6b65···name:·Ensure·ke | |||
| 00041700:·726e·656c·206d·6f64·756c·6520·2772·6473··rnel·module·'rds | |||
| 00041710:·2720·6973·2062·6c61·636b·6c69·7374·6564··'·is·blacklisted | |||
| 00041720:·0a20·206c·696e·6569·6e66·696c·653a·0a20··.··lineinfile:.· | |||
| 00041730:·2020·2063·7265·6174·653a·2074·7275·650a·····create:·true. | |||
| 00041740:·2020·2020·6465·7374·3a20·2f65·7463·2f6d······dest:·/etc/m | |||
| 00041 | 00041550:·6f64·7072·6f62·652e·642f·7264·732e·636f··odprobe.d/rds.co | ||
| 00041560:·6e66·0a65·6c73·650a·0965·6368·6f20·2d65··nf.else..echo·-e | |||
| 00041570:·2022·5c6e·2320·4469·7361·626c·6520·7065···"\n#·Disable·pe | |||
| 00041580:·7220·7365·6375·7269·7479·2072·6571·7569··r·security·requi | |||
| 00041590:·7265·6d65·6e74·7322·2026·6774·3b26·6774··rements"·>> | |||
| 000415a0:·3b20·2f65·7463·2f6d·6f64·7072·6f62·652e··;·/etc/modprobe. | |||
| 000415b0:·642f·7264·732e·636f·6e66·0a09·6563·686f··d/rds.conf..echo | |||
| 000415c0:·2022·696e·7374·616c·6c20·7264·7320·2f62···"install·rds·/b | |||
| 000415d0:·696e·2f66·616c·7365·2220·2667·743b·2667··in/false"·>&g | |||
| 000415e0:·743b·202f·6574·632f·6d6f·6470·726f·6265··t;·/etc/modprobe | |||
| 000415f0:·2e64·2f72·6473·2e63·6f6e·660a·6669·0a0a··.d/rds.conf.fi.. | |||
| Max diff block lines reached; 1771131/1794757 bytes (98.68%) of diff not shown. | |||
| Offset 304, 14 lines modified | Offset 304, 38 lines modified | ||
| 304 | ···························SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR | 304 | ···························SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR |
| 305 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR | 305 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR |
| 306 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 | 306 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 |
| 307 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 307 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 308 | ···························A.9.1.2 | 308 | ···························A.9.1.2 |
| 309 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 309 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 310 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 310 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 311 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 312 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 313 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 314 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 315 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 316 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 317 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 318 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 319 | if·LC_ALL=C·grep·-q·-m·1·"^install·rds"·/etc/modprobe.d/rds.conf·;·then | ||
| 320 | » | ||
| 321 | » sed·-i·'s#^install·rds.*#install·rds·/bin/false#g'·/etc/modprobe.d/rds.conf | ||
| 322 | else | ||
| 323 | » echo·-e·"\n#·Disable·per·security·requirements"·>>·/etc/modprobe.d/rds.conf | ||
| 324 | » echo·"install·rds·/bin/false"·>>·/etc/modprobe.d/rds.conf | ||
| 325 | fi | ||
| 326 | if·!·LC_ALL=C·grep·-q·-m·1·"^blacklist·rds$"·/etc/modprobe.d/rds.conf·;·then | ||
| 327 | » echo·"blacklist·rds"·>>·/etc/modprobe.d/rds.conf | ||
| 328 | fi | ||
| 329 | else | ||
| 330 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 331 | fi | ||
| 311 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 312 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 333 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 313 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 334 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 314 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 335 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 315 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 336 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 316 | -·name:·Gather·the·package·facts | 337 | -·name:·Gather·the·package·facts |
| 317 | ··package_facts: | 338 | ··package_facts: |
| Offset 358, 38 lines modified | Offset 382, 14 lines modified | ||
| 358 | ··-·NIST-800-53-CM-7(b) | 382 | ··-·NIST-800-53-CM-7(b) |
| 359 | ··-·disable_strategy | 383 | ··-·disable_strategy |
| 360 | ··-·kernel_module_rds_disabled | 384 | ··-·kernel_module_rds_disabled |
| 361 | ··-·low_complexity | 385 | ··-·low_complexity |
| 362 | ··-·low_severity | 386 | ··-·low_severity |
| 363 | ··-·medium_disruption | 387 | ··-·medium_disruption |
| 364 | ··-·reboot_required | 388 | ··-·reboot_required |
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 370 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 371 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 372 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 373 | if·LC_ALL=C·grep·-q·-m·1·"^install·rds"·/etc/modprobe.d/rds.conf·;·then | ||
| 374 | » | ||
| 375 | » sed·-i·'s#^install·rds.*#install·rds·/bin/false#g'·/etc/modprobe.d/rds.conf | ||
| 376 | else | ||
| 377 | » echo·-e·"\n#·Disable·per·security·requirements"·>>·/etc/modprobe.d/rds.conf | ||
| 378 | » echo·"install·rds·/bin/false"·>>·/etc/modprobe.d/rds.conf | ||
| 379 | fi | ||
| 380 | if·!·LC_ALL=C·grep·-q·-m·1·"^blacklist·rds$"·/etc/modprobe.d/rds.conf·;·then | ||
| 381 | » echo·"blacklist·rds"·>>·/etc/modprobe.d/rds.conf | ||
| 382 | fi | ||
| 383 | else | ||
| 384 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 385 | fi | ||
| 386 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·T\x8TI\x8IP\x8PC\x8C·S\x8Su\x8up\x8pp\x8po\x8or\x8rt\x8t·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 389 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·T\x8TI\x8IP\x8PC\x8C·S\x8Su\x8up\x8pp\x8po\x8or\x8rt\x8t·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 387 | The·Transparent·Inter-Process·Communication·(TIPC)·protocol·is·designed·to·provide | 390 | The·Transparent·Inter-Process·Communication·(TIPC)·protocol·is·designed·to·provide |
| 388 | communications·between·nodes·in·a·cluster.·To·configure·the·system·to·prevent·the·tipc | 391 | communications·between·nodes·in·a·cluster.·To·configure·the·system·to·prevent·the·tipc |
| 389 | kernel·module·from·being·loaded,·add·the·following·line·to·the·file·/etc/modprobe.d/ | 392 | kernel·module·from·being·loaded,·add·the·following·line·to·the·file·/etc/modprobe.d/ |
| 390 | tipc.conf: | 393 | tipc.conf: |
| 391 | install·tipc·/bin/false | 394 | install·tipc·/bin/false |
| 392 | Warning: ·This·configuration·baseline·was·created·to·deploy·the·base·operating·system·for | 395 | Warning: ·This·configuration·baseline·was·created·to·deploy·the·base·operating·system·for |
| Offset 414, 14 lines modified | Offset 414, 38 lines modified | ||
| 414 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 | 414 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 |
| 415 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 415 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 416 | ···························A.9.1.2 | 416 | ···························A.9.1.2 |
| 417 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 417 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 418 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 418 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 419 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 | 419 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 |
| 420 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000095-GPOS-00049 | 420 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000095-GPOS-00049 |
| 421 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 422 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 423 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 424 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 425 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 426 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 427 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 428 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 429 | if·LC_ALL=C·grep·-q·-m·1·"^install·tipc"·/etc/modprobe.d/tipc.conf·;·then | ||
| 430 | » | ||
| 431 | » sed·-i·'s#^install·tipc.*#install·tipc·/bin/false#g'·/etc/modprobe.d/tipc.conf | ||
| 432 | else | ||
| 433 | » echo·-e·"\n#·Disable·per·security·requirements"·>>·/etc/modprobe.d/tipc.conf | ||
| 434 | » echo·"install·tipc·/bin/false"·>>·/etc/modprobe.d/tipc.conf | ||
| 435 | fi | ||
| 436 | if·!·LC_ALL=C·grep·-q·-m·1·"^blacklist·tipc$"·/etc/modprobe.d/tipc.conf·;·then | ||
| 437 | » echo·"blacklist·tipc"·>>·/etc/modprobe.d/tipc.conf | ||
| 438 | fi | ||
| 439 | else | ||
| 440 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 441 | fi | ||
| 421 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 442 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 422 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 443 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 423 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 444 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 424 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 445 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 425 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 446 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 426 | -·name:·Gather·the·package·facts | 447 | -·name:·Gather·the·package·facts |
| 427 | ··package_facts: | 448 | ··package_facts: |
| Offset 468, 38 lines modified | Offset 492, 14 lines modified | ||
| 468 | ··-·NIST-800-53-CM-7(b) | 492 | ··-·NIST-800-53-CM-7(b) |
| 469 | ··-·disable_strategy | 493 | ··-·disable_strategy |
| 470 | ··-·kernel_module_tipc_disabled | 494 | ··-·kernel_module_tipc_disabled |
| 471 | ··-·low_complexity | 495 | ··-·low_complexity |
| 472 | ··-·low_severity | 496 | ··-·low_severity |
| 473 | ··-·medium_disruption | 497 | ··-·medium_disruption |
| 474 | ··-·reboot_required | 498 | ··-·reboot_required |
| 475 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 476 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 477 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 216273/222552 bytes (97.18%) of diff not shown. | |||
| Offset 16249, 783 lines modified | Offset 16249, 783 lines modified | ||
| 0003f780:·612d·7461·7267·6574·3d22·2369·646d·3531··a-target="#idm51 | 0003f780:·612d·7461·7267·6574·3d22·2369·646d·3531··a-target="#idm51 | ||
| 0003f790:·3932·2220·7461·6269·6e64·6578·3d22·3022··92"·tabindex="0" | 0003f790:·3932·2220·7461·6269·6e64·6578·3d22·3022··92"·tabindex="0" | ||
| 0003f7a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003f7a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003f7b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003f7b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003f7c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003f7c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003f7d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003f7d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | Diff chunk too large, falling back to line-by-line diff (769 lines added, 769 lines removed) | |
| 0003f7e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003f7e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003f7f0:·6174·696f·6e20· | 0003f7f0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | ||
| 0003f800:· | 0003f800:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 0003f810:· | 0003f810:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003f820:·6 | 0003f820:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003f830:·6 | 0003f830:·6522·2069·643d·2269·646d·3531·3932·223e··e"·id="idm5192"> | ||
| 0003f840:·32 | 0003f840:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 0003f850:· | 0003f850:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 0003f860:·69 | 0003f860:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | ||
| 0003f870:· | 0003f870:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | ||
| 0003f880:· | 0003f880:·0a69·6620·6470·6b67·2d71·7565·7279·202d··.if·dpkg-query·- | ||
| 0003f890:· | 0003f890:·2d73·686f·7720·2d2d·7368·6f77·666f·726d··-show·--showform | ||
| 0003f8a0:· | 0003f8a0:·6174·3d27·247b·6462·3a53·7461·7475·732d··at='${db:Status- | ||
| 0003f8b0:· | 0003f8b0:·5374·6174·7573·7d0a·2720·276c·696e·7578··Status}.'·'linux | ||
| 0003f8c0:· | 0003f8c0:·2d62·6173·6527·2032·2667·743b·2f64·6576··-base'·2>/dev | ||
| 0003f8d0:· | 0003f8d0:·2f6e·756c·6c20·7c20·6772·6570·202d·7120··/null·|·grep·-q· | ||
| 0003f8e0:· | 0003f8e0:·5e69·6e73·7461·6c6c·6564·2026·616d·703b··^installed·& | ||
| 0003f8f0:· | 0003f8f0:·2661·6d70·3b20·6470·6b67·2d71·7565·7279··&·dpkg-query | ||
| 0003f900:· | 0003f900:·202d·2d73·686f·7720·2d2d·7368·6f77·666f···--show·--showfo | ||
| 0003f910:·7 | 0003f910:·726d·6174·3d27·247b·6462·3a53·7461·7475··rmat='${db:Statu | ||
| 0003f920:· | 0003f920:·732d·5374·6174·7573·7d5c·6e27·2027·7273··s-Status}\n'·'rs | ||
| 0003f930:·7 | 0003f930:·7973·6c6f·6727·2032·2667·743b·2f64·6576··yslog'·2>/dev | ||
| 0003f940:· | 0003f940:·2f6e·756c·6c20·7c20·6772·6570·202d·7120··/null·|·grep·-q· | ||
| 0003f950:· | 0003f950:·275e·696e·7374·616c·6c65·6427·3b20·7468··'^installed';·th | ||
| 0003f960:· | 0003f960:·656e·0a0a·2320·4c69·7374·206f·6620·6c6f··en..#·List·of·lo | ||
| 0003f970:· | 0003f970:·6720·6669·6c65·2070·6174·6873·2074·6f20··g·file·paths·to· | ||
| 0003f980:·6 | 0003f980:·6265·2069·6e73·7065·6374·6564·2066·6f72··be·inspected·for | ||
| 0003f990:·20 | 0003f990:·2063·6f72·7265·6374·2070·6572·6d69·7373···correct·permiss | ||
| 0003f9a0:· | 0003f9a0:·696f·6e73·0a23·202a·2050·7269·6d61·7269··ions.#·*·Primari | ||
| 0003f9b0:· | 0003f9b0:·6c79·2069·6e73·7065·6374·206c·6f67·2066··ly·inspect·log·f | ||
| 0003f9c0:· | 0003f9c0:·696c·6520·7061·7468·7320·6c69·7374·6564··ile·paths·listed | ||
| 0003f9d0:· | 0003f9d0:·2069·6e20·2f65·7463·2f72·7379·736c·6f67···in·/etc/rsyslog | ||
| 0003f9e0:· | 0003f9e0:·2e63·6f6e·660a·5253·5953·4c4f·475f·4554··.conf.RSYSLOG_ET | ||
| 0003f9f0:·43 | 0003f9f0:·435f·434f·4e46·4947·3d22·2f65·7463·2f72··C_CONFIG="/etc/r | ||
| 0003fa00:· | 0003fa00:·7379·736c·6f67·2e63·6f6e·6622·0a23·202a··syslog.conf".#·* | ||
| 0003fa10:·2 | 0003fa10:·2041·6e64·2061·6c73·6f20·7468·6520·6c6f···And·also·the·lo | ||
| 0003fa20:· | 0003fa20:·6720·6669·6c65·2070·6174·6873·206c·6973··g·file·paths·lis | ||
| 0003fa30:·7 | 0003fa30:·7465·6420·6166·7465·7220·7273·7973·6c6f··ted·after·rsyslo | ||
| 0003fa40:· | 0003fa40:·6727·7320·2449·6e63·6c75·6465·436f·6e66··g's·$IncludeConf | ||
| 0003fa50:·6 | 0003fa50:·6967·2064·6972·6563·7469·7665·0a23·2020··ig·directive.#·· | ||
| 0003fa60:· | 0003fa60:·2028·7374·6f72·6520·7468·6520·7265·7375···(store·the·resu | ||
| 0003fa70:·6 | 0003fa70:·6c74·2069·6e74·6f20·6172·7261·7920·666f··lt·into·array·fo | ||
| 0003fa80:·72 | 0003fa80:·7220·7468·6520·6361·7365·2074·6865·7265··r·the·case·there | ||
| 0003fa90:· | 0003fa90:·2773·2073·6865·6c6c·2067·6c6f·6220·7573··'s·shell·glob·us | ||
| 0003faa0:·6 | 0003faa0:·6564·2061·7320·7661·6c75·6520·6f66·2049··ed·as·value·of·I | ||
| 0003fab0:· | 0003fab0:·6e63·6c75·6465·436f·6e66·6967·290a·7265··ncludeConfig).re | ||
| 0003fac0:· | 0003fac0:·6164·6172·7261·7920·2d74·204f·4c44·5f49··adarray·-t·OLD_I | ||
| 0003fad0:·4 | 0003fad0:·4e43·2026·6c74·3b20·266c·743b·2867·7265··NC·<·<(gre | ||
| 0003fae0:· | 0003fae0:·7020·2d65·2022·5c24·496e·636c·7564·6543··p·-e·"\$IncludeC | ||
| 0003faf0:·6 | 0003faf0:·6f6e·6669·675b·5b3a·7370·6163·653a·5d5d··onfig[[:space:]] | ||
| 0003fb00:· | 0003fb00:·5c2b·5b5e·5b3a·7370·6163·653a·5d3b·5d5c··\+[^[:space:];]\ | ||
| 0003fb10:· | 0003fb10:·2b22·202f·6574·632f·7273·7973·6c6f·672e··+"·/etc/rsyslog. | ||
| 0003fb20:· | 0003fb20:·636f·6e66·207c·2063·7574·202d·6420·2720··conf·|·cut·-d·'· | ||
| 0003fb30:· | 0003fb30:·2720·2d66·2032·290a·7265·6164·6172·7261··'·-f·2).readarra | ||
| 0003fb40:·7 | 0003fb40:·7920·2d74·2052·5359·534c·4f47·5f49·4e43··y·-t·RSYSLOG_INC | ||
| 0003fb50:· | 0003fb50:·4c55·4445·5f43·4f4e·4649·4720·266c·743b··LUDE_CONFIG·< | ||
| 0003fb60:· | 0003fb60:·2026·6c74·3b28·666f·7220·494e·4350·4154···<(for·INCPAT | ||
| 0003fb70:· | 0003fb70:·4820·696e·2022·247b·4f4c·445f·494e·435b··H·in·"${OLD_INC[ | ||
| 0003fb80:· | 0003fb80:·405d·7d22·3b20·646f·2065·7661·6c20·7072··@]}";·do·eval·pr | ||
| 0003fb90:· | 0003fb90:·696e·7466·2027·2573·5c5c·6e27·2022·247b··intf·'%s\\n'·"${ | ||
| 0003fba0:· | 0003fba0:·494e·4350·4154·487d·223b·2064·6f6e·6529··INCPATH}";·done) | ||
| 0003fbb0:·0a | 0003fbb0:·0a72·6561·6461·7272·6179·202d·7420·4e45··.readarray·-t·NE | ||
| 0003fbc0:· | 0003fbc0:·575f·494e·4320·266c·743b·2026·6c74·3b28··W_INC·<·<( | ||
| 0003fbd0:· | 0003fbd0:·7365·6420·2d6e·2027·2f5e·5c73·2a69·6e63··sed·-n·'/^\s*inc | ||
| 0003fbe0:· | 0003fbe0:·6c75·6465·282f·2c2f·292f·4970·2720·2f65··lude(/,/)/Ip'·/e | ||
| 0003fbf0:· | 0003fbf0:·7463·2f72·7379·736c·6f67·2e63·6f6e·6620··tc/rsyslog.conf· | ||
| 0003fc00:· | 0003fc00:·7c20·7365·6420·2d6e·2027·7340·2e2a·6669··|·sed·-n·'s@.*fi | ||
| 0003fc10:· | 0003fc10:·6c65·5c73·2a3d·5c73·2a22·5c28·5b2f·5b3a··le\s*=\s*"\([/[: | ||
| 0003fc20:· | 0003fc20:·616c·6e75·6d3a·5d5b·3a70·756e·6374·3a5d··alnum:][:punct:] | ||
| 0003fc30:· | 0003fc30:·5d2a·5c29·222e·2a40·5c31·4049·7027·290a··]*\)".*@\1@Ip'). | ||
| 0003fc40:· | 0003fc40:·7265·6164·6172·7261·7920·2d74·2052·5359··readarray·-t·RSY | ||
| 0003fc50:· | 0003fc50:·534c·4f47·5f49·4e43·4c55·4445·2026·6c74··SLOG_INCLUDE·< | ||
| 0003fc60:· | 0003fc60:·3b20·266c·743b·2866·6f72·2049·4e43·5041··;·<(for·INCPA | ||
| 0003fc70:· | 0003fc70:·5448·2069·6e20·2224·7b4e·4557·5f49·4e43··TH·in·"${NEW_INC | ||
| 0003fc80:· | 0003fc80:·5b40·5d7d·223b·2064·6f20·6576·616c·2070··[@]}";·do·eval·p | ||
| 0003fc90:· | 0003fc90:·7269·6e74·6620·2725·735c·5c6e·2720·2224··rintf·'%s\\n'·"$ | ||
| 0003fca0:· | 0003fca0:·7b49·4e43·5041·5448·7d22·3b20·646f·6e65··{INCPATH}";·done | ||
| 0003fcb0:· | 0003fcb0:·290a·0a23·2044·6563·6c61·7265·2061·6e20··)..#·Declare·an· | ||
| 0003fcc0:· | 0003fcc0:·6172·7261·7920·746f·2068·6f6c·6420·7468··array·to·hold·th | ||
| 0003fcd0:·20 | 0003fcd0:·6520·6669·6e61·6c20·6c69·7374·206f·6620··e·final·list·of· | ||
| 0003fce0:· | 0003fce0:·6469·6666·6572·656e·7420·6c6f·6720·6669··different·log·fi | ||
| 0003fcf0:·6 | 0003fcf0:·6c65·2070·6174·6873·0a64·6563·6c61·7265··le·paths.declare | ||
| 0003fd00:· | 0003fd00:·202d·6120·4c4f·475f·4649·4c45·5f50·4154···-a·LOG_FILE_PAT | ||
| 0003fd10:· | 0003fd10:·4853·0a0a·2320·4172·7261·7920·746f·2068··HS..#·Array·to·h | ||
| 0003fd20:·6 | 0003fd20:·6f6c·6420·616c·6c20·7273·7973·6c6f·6720··old·all·rsyslog· | ||
| 0003fd30:· | 0003fd30:·636f·6e66·6967·2065·6e74·7269·6573·0a52··config·entries.R | ||
| 0003fd40:· | 0003fd40:·5359·534c·4f47·5f43·4f4e·4649·4753·3d28··SYSLOG_CONFIGS=( | ||
| 0003fd50:·2 | 0003fd50:·290a·5253·5953·4c4f·475f·434f·4e46·4947··).RSYSLOG_CONFIG | ||
| 0003fd60:· | 0003fd60:·533d·2822·247b·5253·5953·4c4f·475f·4554··S=("${RSYSLOG_ET | ||
| 0003fd70:· | 0003fd70:·435f·434f·4e46·4947·7d22·2022·247b·5253··C_CONFIG}"·"${RS | ||
| 0003fd80:· | 0003fd80:·5953·4c4f·475f·494e·434c·5544·455f·434f··YSLOG_INCLUDE_CO | ||
| 0003fd90:· | 0003fd90:·4e46·4947·5b40·5d7d·2220·2224·7b52·5359··NFIG[@]}"·"${RSY | ||
| 0003fda0:· | 0003fda0:·534c·4f47·5f49·4e43·4c55·4445·5b40·5d7d··SLOG_INCLUDE[@]} | ||
| 0003fdb0:· | 0003fdb0:·2229·0a0a·2320·4765·7420·6675·6c6c·206c··")..#·Get·full·l | ||
| 0003fdc0:·6 | 0003fdc0:·6973·7420·6f66·2066·696c·6573·2074·6f20··ist·of·files·to· | ||
| 0003fdd0:· | 0003fdd0:·6265·2063·6865·636b·6564·0a23·2052·5359··be·checked.#·RSY | ||
| 0003fde0:· | 0003fde0:·534c·4f47·5f43·4f4e·4649·4753·206d·6179··SLOG_CONFIGS·may | ||
| 0003fdf0:· | 0003fdf0:·2063·6f6e·7461·696e·2067·6c6f·6273·2073···contain·globs·s | ||
| 0003fe00:· | 0003fe00:·7563·6820·6173·0a23·202f·6574·632f·7273··uch·as.#·/etc/rs | ||
| 0003fe10:· | 0003fe10:·7973·6c6f·672e·642f·2a2e·636f·6e66·202f··yslog.d/*.conf·/ | ||
| 0003fe20:·6 | 0003fe20:·6574·632f·7273·7973·6c6f·672e·642f·2a2e··etc/rsyslog.d/*. | ||
| 0003fe30:· | 0003fe30:·6672·756c·650a·2320·536f·2c20·6c6f·6f70··frule.#·So,·loop | ||
| 0003fe40:· | 0003fe40:·206f·7665·7220·7468·6520·656e·7472·6965···over·the·entrie | ||
| 0003fe50:· | 0003fe50:·7320·696e·2052·5359·534c·4f47·5f43·4f4e··s·in·RSYSLOG_CON | ||
| 0003fe60:· | 0003fe60:·4649·4753·2061·6e64·2075·7365·2066·696e··FIGS·and·use·fin | ||
| 0003fe70:· | 0003fe70:·6420·746f·2067·6574·2074·6865·206c·6973··d·to·get·the·lis | ||
| 0003fe80:· | 0003fe80:·7420·6f66·2069·6e63·6c75·6465·6420·6669··t·of·included·fi | ||
| 0003fe90:· | 0003fe90:·6c65·732e·0a52·5359·534c·4f47·5f43·4f4e··les..RSYSLOG_CON | ||
| 0003fea0:· | 0003fea0:·4649·475f·4649·4c45·533d·2829·0a66·6f72··FIG_FILES=().for | ||
| 0003feb0:· | 0003feb0:·2045·4e54·5259·2069·6e20·2224·7b52·5359···ENTRY·in·"${RSY | ||
| 0003fec0:· | 0003fec0:·534c·4f47·5f43·4f4e·4649·4753·5b40·5d7d··SLOG_CONFIGS[@]} | ||
| 0003fed0:·2 | 0003fed0:·220a·646f·0a09·2320·4966·2064·6972·6563··".do..#·If·direc | ||
| 0003fee0:· | 0003fee0:·746f·7279·2c20·7273·7973·6c6f·6720·7769··tory,·rsyslog·wi | ||
| 0003fef0:· | 0003fef0:·6c6c·2073·6561·7263·6820·666f·7220·636f··ll·search·for·co | ||
| 0003ff00:· | 0003ff00:·6e66·6967·2066·696c·6573·2069·6e20·7265··nfig·files·in·re | ||
| 0003ff10:·5 | 0003ff10:·6375·7273·6976·656c·792e·0a09·2320·486f··cursively...#·Ho | ||
| 0003ff20:· | 0003ff20:·7765·7665·722c·2066·696c·6573·2069·6e20··wever,·files·in· | ||
| 0003ff30:· | 0003ff30:·6869·6464·656e·2073·7562·2d64·6972·6563··hidden·sub-direc | ||
| 0003ff40:· | 0003ff40:·746f·7269·6573·206f·7220·6869·6464·656e··tories·or·hidden | ||
| 0003ff50:· | 0003ff50:·2066·696c·6573·2077·696c·6c20·6265·2069···files·will·be·i | ||
| Max diff block lines reached; 1120962/1227664 bytes (91.31%) of diff not shown. | |||
| Offset 264, 14 lines modified | Offset 264, 142 lines modified | ||
| 264 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 264 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 265 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 265 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 266 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 266 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 267 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 267 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 268 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 268 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 269 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 269 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 270 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 | 270 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 |
| 271 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 272 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 273 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 274 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed·&&·dpkg-query·--show·-- | ||
| 275 | showformat='${db:Status-Status}\n'·'rsyslog'·2>/dev/null·|·grep·- | ||
| 276 | q·'^installed';·then | ||
| 277 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 278 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 279 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 280 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 281 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 282 | of·IncludeConfig) | ||
| 283 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 284 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 285 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 286 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 287 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 288 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 289 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 290 | '%s\\n'·"${INCPATH}";·done) | ||
| 291 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 292 | declare·-a·LOG_FILE_PATHS | ||
| 293 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 294 | RSYSLOG_CONFIGS=() | ||
| 295 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 296 | {RSYSLOG_INCLUDE[@]}") | ||
| 297 | #·Get·full·list·of·files·to·be·checked | ||
| 298 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 299 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 300 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 301 | included·files. | ||
| 302 | RSYSLOG_CONFIG_FILES=() | ||
| 303 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 304 | do | ||
| 305 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 306 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 307 | » if·[·-d·"${ENTRY}"·] | ||
| 308 | » then | ||
| 309 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 310 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 311 | » elif·[·-f·"${ENTRY}"·] | ||
| 312 | » then | ||
| 313 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 314 | » else | ||
| 315 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 316 | » fi | ||
| 317 | done | ||
| 318 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 319 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 320 | configuration) | ||
| 321 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 322 | do | ||
| 323 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 324 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 325 | ('$')·characters, | ||
| 326 | » #·*·Ignore·empty·lines, | ||
| 327 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 328 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 329 | not·log·files | ||
| 330 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 331 | path | ||
| 332 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 333 | all·of·the | ||
| 334 | » #·following·are·met: | ||
| 335 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 336 | » #·*·it·is·preceded·by·space | ||
| 337 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 338 | characters | ||
| 339 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 340 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 341 | » then | ||
| 342 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 343 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 344 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 345 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 346 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 347 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 348 | {FILTERED_PATHS}") | ||
| 349 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 350 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 351 | newline),·split | ||
| 352 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 353 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 354 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 355 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 356 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 357 | » » #·Delete·the·temporary·array | ||
| 358 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 359 | » fi | ||
| 360 | done | ||
| 361 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 362 | grep·regex·is·a·bit | ||
| 363 | #·curly: | ||
| 364 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 365 | #·extract·File="logfile"·expression | ||
| 366 | #·match·only·"logfile"·expression | ||
| 367 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 368 | do | ||
| 369 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 370 | "${LOG_FILE}") | ||
| 371 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 372 | alnum:][:punct:]]*)\"\s*\)") | ||
| 373 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| 374 | ]]*)\""|tr·-d·"\"")") | ||
| 375 | done | ||
| 376 | #·Ensure·the·correct·attribute·if·file·exists | ||
| 377 | FILE_CMD="chgrp" | ||
| 378 | for·LOG_FILE_PATH·in·"${LOG_FILE_PATHS[@]}" | ||
| 379 | do | ||
| 380 | » #·Sanity·check·-·if·particular·$LOG_FILE_PATH·is·empty·string,·skip·it·from | ||
| 381 | further·processing | ||
| 382 | » if·[·-z·"$LOG_FILE_PATH"·] | ||
| 383 | » then | ||
| Max diff block lines reached; 141456/147107 bytes (96.16%) of diff not shown. | |||
| Offset 15095, 188 lines modified | Offset 15095, 188 lines modified | ||
| 0003af60:·6765·743d·2223·6964·6d32·3736·3322·2074··get="#idm2763"·t | 0003af60:·6765·743d·2223·6964·6d32·3736·3322·2074··get="#idm2763"·t | ||
| 0003af70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003af70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003af80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003af80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003af90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003af90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003afa0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003afa0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003afb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003afb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003afc0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003afc0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003afd0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003afe0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003aff0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b000:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003afd0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003afe0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003aff0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b000:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b010:·6964·3d22·6964·6d32·3736·3322·3e3c·7461··id="idm2763"><ta | |||
| 0003b020:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b030:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b040:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b050:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b060:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b070:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b080:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b090:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b0a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b0b0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b0c0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b0d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b0e0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b0f0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b100:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b110:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b120:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b130:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b140:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b150:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b160:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b170:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003b180:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b190:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b1a0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b | 0003b010:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b020:·646d·3237·3633·223e·3c70·7265·3e3c·636f··dm2763"><pre><co | |||
| 0003b030:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b040:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b050:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b1c0:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | |||
| 0003b1d0:·3634·2220·7461·6269·6e64·6578·3d22·3022··64"·tabindex="0" | |||
| 0003b1e0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b1f0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b200:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b210:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b220:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b230:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b240:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b250:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b260:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b270:·6170·7365·2220·6964·3d22·6964·6d32·3736··apse"·id="idm276 | |||
| 0003b280:·3422·3e3c·7461·626c·6520·636c·6173·733d··4"><table·class= | |||
| 0003b290:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b2a0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b2b0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b2c0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b2d0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b2e0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b2f0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b300:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b310:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b320:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b330:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b340:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b350:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b360:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b370:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b380:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b390:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b3a0:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b3b0:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b3c0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b3d0:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b3e0:·412d·5354·4947·2d55·4254·552d·3230·2d30··A-STIG-UBTU-20-0 | |||
| 0003b3f0:·3130·3435·300a·2020·2d20·4e49·5354·2d38··10450.··-·NIST-8 | |||
| 0003b400:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b410:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b420:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b430:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b440:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b450:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b460:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b470:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b480:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b490:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b4a0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b4b0:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003b4c0:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b4d0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b4e0:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b4f0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b500:·7365·6e74·0a20·2077·6865·6e3a·2027·226c··sent.··when:·'"l | |||
| 0003b510:·696e·7578·2d62·6173·6522·2069·6e20·616e··inux-base"·in·an | |||
| 0003b520:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003b530:·6167·6573·270a·2020·7461·6773·3a0a·2020··ages'.··tags:.·· | |||
| 0003b540:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b550:·2020·2d20·4449·5341·2d53·5449·472d·5542····-·DISA-STIG-UB | |||
| 0003b560:·5455·2d32·302d·3031·3034·3530·0a20·202d··TU-20-010450.··- | |||
| 0003b570:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b580:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b590:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b5a0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b5b0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b5c0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b5d0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b5e0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b5f0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b600:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b610:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b620:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b | 0003b060:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0003b | 0003b070:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003b | 0003b080:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003b | 0003b090:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0003b | 0003b0a0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b | 0003b0b0:·6964·6d32·3736·3422·2074·6162·696e·6465··idm2764"·tabinde | ||
| 0003b | 0003b0c0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b | 0003b0d0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b | 0003b0e0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b | 0003b0f0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| Max diff block lines reached; 6645609/6670201 bytes (99.63%) of diff not shown. | |||
| Offset 121, 26 lines modified | Offset 121, 33 lines modified | ||
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 123 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 124 | ············_\x8c_\x8i_\x8s············1.4.1 | 124 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | incl | 137 | #·Remediation·is·applicable·only·in·certain·platforms |
| 138 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 139 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 134 | class·install_aide·{ | ||
| 135 | ··package·{·'aide': | ||
| 136 | ····ensure·=>·'installed', | ||
| 137 | ··} | ||
| 138 | 140 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | |
| 141 | else | ||
| 142 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 143 | fi | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | -·name:·Gather·the·package·facts | 149 | -·name:·Gather·the·package·facts |
| 145 | ··package_facts: | 150 | ··package_facts: |
| Offset 171, 33 lines modified | Offset 178, 26 lines modified | ||
| 171 | ··-·PCI-DSSv4-11.5.2 | 178 | ··-·PCI-DSSv4-11.5.2 |
| 172 | ··-·enable_strategy | 179 | ··-·enable_strategy |
| 173 | ··-·low_complexity | 180 | ··-·low_complexity |
| 174 | ··-·low_disruption | 181 | ··-·low_disruption |
| 175 | ··-·medium_severity | 182 | ··-·medium_severity |
| 176 | ··-·no_reboot_needed | 183 | ··-·no_reboot_needed |
| 177 | ··-·package_aide_installed | 184 | ··-·package_aide_installed |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 179 | [[packages]] | ||
| 180 | name·=·"aide" | ||
| 181 | version·=·"*" | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 190 | include·install_aide | ||
| 187 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 188 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 189 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 190 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 191 | else | ||
| 192 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 193 | 191 | class·install_aide·{ | |
| 192 | ··package·{·'aide': | ||
| 193 | ····ensure·=>·'installed', | ||
| 194 | ··} | ||
| 195 | } | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | Run·the·following·command·to·generate·a·new·database: | 197 | Run·the·following·command·to·generate·a·new·database: |
| 196 | $·sudo·aideinit | 198 | $·sudo·aideinit |
| 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 199 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 198 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of | 200 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of |
| 199 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 201 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 200 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 202 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 224, 14 lines modified | Offset 224, 41 lines modified | ||
| 224 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 224 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 225 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 225 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 226 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 226 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 227 | ············_\x8c_\x8i_\x8s············1.4.1 | 227 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 228 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 228 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 229 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 229 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 230 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 230 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 231 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 232 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 233 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 234 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 235 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 236 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 237 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 238 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 239 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 240 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 241 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 242 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 243 | fi | ||
| 244 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 245 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 246 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 247 | fi | ||
| 248 | /usr/sbin/aideinit·-y·-f | ||
| 249 | else | ||
| 250 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 251 | fi | ||
| 231 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 252 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 232 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 253 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 233 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 254 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 234 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 255 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 235 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 256 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 236 | -·name:·Gather·the·package·facts | 257 | -·name:·Gather·the·package·facts |
| 237 | ··package_facts: | 258 | ··package_facts: |
| Offset 410, 41 lines modified | Offset 437, 14 lines modified | ||
| 410 | ··-·PCI-DSSv4-11.5.2 | 437 | ··-·PCI-DSSv4-11.5.2 |
| 411 | ··-·aide_build_database | 438 | ··-·aide_build_database |
| 412 | ··-·low_complexity | 439 | ··-·low_complexity |
| 413 | ··-·low_disruption | 440 | ··-·low_disruption |
| 414 | ··-·medium_severity | 441 | ··-·medium_severity |
| 415 | ··-·no_reboot_needed | 442 | ··-·no_reboot_needed |
| 416 | ··-·restrict_strategy | 443 | ··-·restrict_strategy |
| 417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 886333/892637 bytes (99.29%) of diff not shown. | |||
| Offset 15090, 189 lines modified | Offset 15090, 189 lines modified | ||
| 0003af10:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003af10:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003af20:·3d22·2369·646d·3237·3633·2220·7461·6269··="#idm2763"·tabi | 0003af20:·3d22·2369·646d·3237·3633·2220·7461·6269··="#idm2763"·tabi | ||
| 0003af30:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003af30:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003af40:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003af40:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003af50:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003af50:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003af60:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003af60:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003af70:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003af70:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003af80:·223e·5265·6d65·6469·6174·696f·6e20· | 0003af80:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003af90:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003afa0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003af | 0003af90:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003afa0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003afb0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003afc0:· | 0003afc0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003afd0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003afe0:·3736·3322·3e3c·7072·653e·3c63·6f64·653e··763"><pre><code> | |||
| 0003aff0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b000:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b010:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003afd0:·2269·646d·3237·3633·223e·3c74·6162·6c65··"idm2763"><table | |||
| 0003afe0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003aff0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b000:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b010:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b020:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b030:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b040:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b050:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b060:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b070:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b080:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b090:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b0a0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b0b0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b0c0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b0d0:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003b0e0:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003b0f0:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003b100:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b110:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003b120:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003b130:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003b140:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b150:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b160:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b170:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b180:·6172·6765·743d·2223·6964·6d32·3736·3422··arget="#idm2764" | |||
| 0003b190:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b1a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b1b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b1c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b1d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b1e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b1f0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b200:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b210:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b220:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b230:·6522·2069·643d·2269·646d·3237·3634·223e··e"·id="idm2764"> | |||
| 0003b240:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b250:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b260:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b270:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b280:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b290:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b2a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b2b0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b2c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b2d0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b2e0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b2f0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b300:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b310:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b320:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b330:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b340:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b350:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b360:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b370:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b380:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b390:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b3a0:·5449·472d·5542·5455·2d32·302d·3031·3034··TIG-UBTU-20-0104 | |||
| 0003b3b0:·3530·0a20·202d·204e·4953·542d·3830·302d··50.··-·NIST-800- | |||
| 0003b3c0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b3d0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b3e0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b3f0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b400:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b410:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b420:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b430:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b440:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b450:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b460:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b470:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b480:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b490:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b4a0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b4b0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b4c0:·740a·2020·7768·656e·3a20·2722·6c69·6e75··t.··when:·'"linu | |||
| 0003b4d0:·782d·6261·7365·2220·696e·2061·6e73·6962··x-base"·in·ansib | |||
| 0003b4e0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003b4f0:·7327·0a20·2074·6167·733a·0a20·202d·2043··s'.··tags:.··-·C | |||
| 0003b500:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b510:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b520:·3230·2d30·3130·3435·300a·2020·2d20·4e49··20-010450.··-·NI | |||
| 0003b530:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b540:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b550:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b560:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b570:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b580:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b590:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b5a0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b5b0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b5c0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b5d0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b5e0:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003b | 0003b020:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003b | 0003b030:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003b | 0003b040:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003b | 0003b050:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003b | 0003b060:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b | 0003b070:·3237·3634·2220·7461·6269·6e64·6578·3d22··2764"·tabindex=" | ||
| 0003b | 0003b080:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b | 0003b090:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b | 0003b0a0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b | 0003b0b0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| Max diff block lines reached; 6480693/6505423 bytes (99.62%) of diff not shown. | |||
| Offset 120, 26 lines modified | Offset 120, 33 lines modified | ||
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 123 | ············_\x8c_\x8i_\x8s············1.4.1 | 123 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | incl | 136 | #·Remediation·is·applicable·only·in·certain·platforms |
| 137 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 138 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 133 | class·install_aide·{ | ||
| 134 | ··package·{·'aide': | ||
| 135 | ····ensure·=>·'installed', | ||
| 136 | ··} | ||
| 137 | 139 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | |
| 140 | else | ||
| 141 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 142 | fi | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 143 | -·name:·Gather·the·package·facts | 148 | -·name:·Gather·the·package·facts |
| 144 | ··package_facts: | 149 | ··package_facts: |
| Offset 170, 33 lines modified | Offset 177, 26 lines modified | ||
| 170 | ··-·PCI-DSSv4-11.5.2 | 177 | ··-·PCI-DSSv4-11.5.2 |
| 171 | ··-·enable_strategy | 178 | ··-·enable_strategy |
| 172 | ··-·low_complexity | 179 | ··-·low_complexity |
| 173 | ··-·low_disruption | 180 | ··-·low_disruption |
| 174 | ··-·medium_severity | 181 | ··-·medium_severity |
| 175 | ··-·no_reboot_needed | 182 | ··-·no_reboot_needed |
| 176 | ··-·package_aide_installed | 183 | ··-·package_aide_installed |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | [[packages]] | ||
| 179 | name·=·"aide" | ||
| 180 | version·=·"*" | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 189 | include·install_aide | ||
| 186 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 187 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 188 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 189 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 190 | else | ||
| 191 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 192 | 190 | class·install_aide·{ | |
| 191 | ··package·{·'aide': | ||
| 192 | ····ensure·=>·'installed', | ||
| 193 | ··} | ||
| 194 | } | ||
| 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 194 | Run·the·following·command·to·generate·a·new·database: | 196 | Run·the·following·command·to·generate·a·new·database: |
| 195 | $·sudo·aideinit | 197 | $·sudo·aideinit |
| 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 197 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of | 199 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of |
| 198 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 200 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 199 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 201 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 223, 14 lines modified | Offset 223, 41 lines modified | ||
| 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 224 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 224 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 225 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 225 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 226 | ············_\x8c_\x8i_\x8s············1.4.1 | 226 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 227 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 227 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 228 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 228 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 229 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 229 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 231 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 232 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 233 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 234 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 235 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 236 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 237 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 238 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 239 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 240 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 241 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 242 | fi | ||
| 243 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 244 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 245 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 246 | fi | ||
| 247 | /usr/sbin/aideinit·-y·-f | ||
| 248 | else | ||
| 249 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 250 | fi | ||
| 230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 251 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 231 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 252 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 232 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 253 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 233 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 254 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 234 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 255 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 235 | -·name:·Gather·the·package·facts | 256 | -·name:·Gather·the·package·facts |
| 236 | ··package_facts: | 257 | ··package_facts: |
| Offset 409, 41 lines modified | Offset 436, 14 lines modified | ||
| 409 | ··-·PCI-DSSv4-11.5.2 | 436 | ··-·PCI-DSSv4-11.5.2 |
| 410 | ··-·aide_build_database | 437 | ··-·aide_build_database |
| 411 | ··-·low_complexity | 438 | ··-·low_complexity |
| 412 | ··-·low_disruption | 439 | ··-·low_disruption |
| 413 | ··-·medium_severity | 440 | ··-·medium_severity |
| 414 | ··-·no_reboot_needed | 441 | ··-·no_reboot_needed |
| 415 | ··-·restrict_strategy | 442 | ··-·restrict_strategy |
| 416 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 868118/874422 bytes (99.28%) of diff not shown. | |||
| Offset 15117, 188 lines modified | Offset 15117, 188 lines modified | ||
| 0003b0c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b0c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b0d0:·646d·3237·3633·2220·7461·6269·6e64·6578··dm2763"·tabindex | 0003b0d0:·646d·3237·3633·2220·7461·6269·6e64·6578··dm2763"·tabindex | ||
| 0003b0e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b0e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b0f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b0f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b100:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b100:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b110:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b110:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b120:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b120:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b130:·6d65·6469·6174·696f·6e20· | 0003b130:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b140:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b150:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b160:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b170:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b180:·7365·2220·6964·3d22·6964·6d32·3736·3322··se"·id="idm2763" | |||
| 0003b140:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b150:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b160:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b170:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b180:·3237·3633·223e·3c74·6162·6c65·2063·6c61··2763"><table·cla | |||
| 0003b190:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b1a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b1b0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b1c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b1d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b1e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b1f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b200:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b210:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b220:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b230:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b240:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b250:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b260:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b | 0003b190:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 0003b1a0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b1b0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b1c0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b280:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b290:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b2a0:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b2b0:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b2c0:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b2d0:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b2e0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b2f0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b300:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b310:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b320:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b330:·743d·2223·6964·6d32·3736·3422·2074·6162··t="#idm2764"·tab | |||
| 0003b340:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b350:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b360:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b370:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b380:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b390:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b3a0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b3b0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b3c0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b3d0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b3e0:·643d·2269·646d·3237·3634·223e·3c74·6162··d="idm2764"><tab | |||
| 0003b3f0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b400:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b410:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b420:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b430:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b440:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b450:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b460:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b470:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b480:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b490:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b4a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b4b0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b4c0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b4d0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b4e0:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003b4f0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003b500:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003b510:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003b520:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003b530:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b540:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b550:·5542·5455·2d32·302d·3031·3034·3530·0a20··UBTU-20-010450.· | |||
| 0003b560:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b570:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b580:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b590:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b5a0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b5b0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b5c0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b5d0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b5e0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b5f0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b600:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b610:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003b620:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b630:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b640:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b650:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b660:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b670:·7768·656e·3a20·2722·6c69·6e75·782d·6261··when:·'"linux-ba | |||
| 0003b680:·7365·2220·696e·2061·6e73·6962·6c65·5f66··se"·in·ansible_f | |||
| 0003b690:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003b6a0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b6b0:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b6c0:·412d·5354·4947·2d55·4254·552d·3230·2d30··A-STIG-UBTU-20-0 | |||
| 0003b6d0:·3130·3435·300a·2020·2d20·4e49·5354·2d38··10450.··-·NIST-8 | |||
| 0003b6e0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b6f0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b700:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b710:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b720:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b730:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b740:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b750:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b760:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b770:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b780:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b790:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b | 0003b1d0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 0003b | 0003b1e0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 0003b | 0003b1f0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0003b | 0003b200:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0003b | 0003b210:·7461·7267·6574·3d22·2369·646d·3237·3634··target="#idm2764 | ||
| 0003b | 0003b220:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b | 0003b230:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b | 0003b240:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b | 0003b250:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| Max diff block lines reached; 19757559/19782151 bytes (99.88%) of diff not shown. | |||
| Offset 15113, 188 lines modified | Offset 15113, 188 lines modified | ||
| 0003b080:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | 0003b080:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | ||
| 0003b090:·3633·2220·7461·6269·6e64·6578·3d22·3022··63"·tabindex="0" | 0003b090:·3633·2220·7461·6269·6e64·6578·3d22·3022··63"·tabindex="0" | ||
| 0003b0a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b0a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b0b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b0b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b0c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b0c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b0d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b0d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b0e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b0e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b0f0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b100:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b110:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b120:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b130:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b140:·6964·3d22·6964·6d32·3736·3322·3e3c·7072··id="idm2763"><pr | |||
| 0003b150:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b160:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b170:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b0f0:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b100:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b110:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b120:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b130:·7073·6522·2069·643d·2269·646d·3237·3633··pse"·id="idm2763 | |||
| 0003b140:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b150:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b160:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b170:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b180:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b190:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b1a0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b1b0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b1c0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b1d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b1e0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b1f0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b200:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b210:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b220:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b230:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003b240:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003b250:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b260:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b270:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b280:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b290:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003b2a0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b2b0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b2c0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b2d0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b2e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b2f0:·6964·6d32·3736·3422·2074·6162·696e·6465··idm2764"·tabinde | |||
| 0003b300:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b310:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b320:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b330:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b340:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b350:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b360:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b370:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b380:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b390:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b3a0:·646d·3237·3634·223e·3c74·6162·6c65·2063··dm2764"><table·c | |||
| 0003b3b0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b3c0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b3d0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b3e0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b3f0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b400:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b410:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b420:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b430:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b440:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b450:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b460:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b470:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b480:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b490:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b4a0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b4b0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b4c0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b4d0:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b4e0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003b4f0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b500:·2d20·4449·5341·2d53·5449·472d·5542·5455··-·DISA-STIG-UBTU | |||
| 0003b510:·2d32·302d·3031·3034·3530·0a20·202d·204e··-20-010450.··-·N | |||
| 0003b520:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b530:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b540:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b550:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b560:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b570:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b580:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b590:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b5a0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b5b0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b5c0:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b5d0:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003b5e0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b5f0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b600:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b610:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b620:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b630:·3a20·2722·6c69·6e75·782d·6261·7365·2220··:·'"linux-base"· | |||
| 0003b640:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0003b650:·2e70·6163·6b61·6765·7327·0a20·2074·6167··.packages'.··tag | |||
| 0003b660:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b670:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b680:·4947·2d55·4254·552d·3230·2d30·3130·3435··IG-UBTU-20-01045 | |||
| 0003b690:·300a·2020·2d20·4e49·5354·2d38·3030·2d35··0.··-·NIST-800-5 | |||
| 0003b6a0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b6b0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b6c0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b6d0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b6e0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b6f0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b700:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b710:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b720:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b730:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b740:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b | 0003b180:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | ||
| 0003b | 0003b190:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003b | 0003b1a0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003b | 0003b1b0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003b | 0003b1c0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003b | 0003b1d0:·6574·3d22·2369·646d·3237·3634·2220·7461··et="#idm2764"·ta | ||
| 0003b | 0003b1e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b | 0003b1f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b | 0003b200:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| Max diff block lines reached; 19714175/19738767 bytes (99.88%) of diff not shown. | |||
| Offset 16554, 783 lines modified | Offset 16554, 783 lines modified | ||
| 00040a90:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00040a90:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00040aa0:·3130·3237·2220·7461·6269·6e64·6578·3d22··1027"·tabindex=" | 00040aa0:·3130·3237·2220·7461·6269·6e64·6578·3d22··1027"·tabindex=" | ||
| 00040ab0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00040ab0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00040ac0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00040ac0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00040ad0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00040ad0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00040ae0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00040ae0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | Diff chunk too large, falling back to line-by-line diff (769 lines added, 769 lines removed) | |
| 00040af0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00040af0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00040b00:·6469·6174·696f·6e20· | 00040b00:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | ||
| 00040b10:·7 | 00040b10:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 00040b20:· | 00040b20:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 00040b30:·6 | 00040b30:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 00040b40:· | 00040b40:·7073·6522·2069·643d·2269·646d·3131·3032··pse"·id="idm1102 | ||
| 00040b50:·3 | 00040b50:·3722·3e3c·7072·653e·3c63·6f64·653e·2320··7"><pre><code>#· | ||
| 00040b60:· | 00040b60:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 00040b70:·7 | 00040b70:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 00040b80:· | 00040b80:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 00040b90:· | 00040b90:·726d·730a·6966·2064·706b·672d·7175·6572··rms.if·dpkg-quer | ||
| 00040ba0:· | 00040ba0:·7920·2d2d·7368·6f77·202d·2d73·686f·7766··y·--show·--showf | ||
| 00040bb0:· | 00040bb0:·6f72·6d61·743d·2724·7b64·623a·5374·6174··ormat='${db:Stat | ||
| 00040bc0:· | 00040bc0:·7573·2d53·7461·7475·737d·0a27·2027·6c69··us-Status}.'·'li | ||
| 00040bd0:·6 | 00040bd0:·6e75·782d·6261·7365·2720·3226·6774·3b2f··nux-base'·2>/ | ||
| 00040be0:·6 | 00040be0:·6465·762f·6e75·6c6c·207c·2067·7265·7020··dev/null·|·grep· | ||
| 00040bf0:· | 00040bf0:·2d71·205e·696e·7374·616c·6c65·6420·2661··-q·^installed·&a | ||
| 00040c00:· | 00040c00:·6d70·3b26·616d·703b·2064·706b·672d·7175··mp;&·dpkg-qu | ||
| 00040c10:· | 00040c10:·6572·7920·2d2d·7368·6f77·202d·2d73·686f··ery·--show·--sho | ||
| 00040c20:·7 | 00040c20:·7766·6f72·6d61·743d·2724·7b64·623a·5374··wformat='${db:St | ||
| 00040c30:·6 | 00040c30:·6174·7573·2d53·7461·7475·737d·5c6e·2720··atus-Status}\n'· | ||
| 00040c40:· | 00040c40:·2772·7379·736c·6f67·2720·3226·6774·3b2f··'rsyslog'·2>/ | ||
| 00040c50:·6 | 00040c50:·6465·762f·6e75·6c6c·207c·2067·7265·7020··dev/null·|·grep· | ||
| 00040c60:· | 00040c60:·2d71·2027·5e69·6e73·7461·6c6c·6564·273b··-q·'^installed'; | ||
| 00040c70:·6 | 00040c70:·2074·6865·6e0a·0a23·204c·6973·7420·6f66···then..#·List·of | ||
| 00040c80:· | 00040c80:·206c·6f67·2066·696c·6520·7061·7468·7320···log·file·paths· | ||
| 00040c90:·7 | 00040c90:·746f·2062·6520·696e·7370·6563·7465·6420··to·be·inspected· | ||
| 00040ca0:· | 00040ca0:·666f·7220·636f·7272·6563·7420·7065·726d··for·correct·perm | ||
| 00040cb0:· | 00040cb0:·6973·7369·6f6e·730a·2320·2a20·5072·696d··issions.#·*·Prim | ||
| 00040cc0:· | 00040cc0:·6172·696c·7920·696e·7370·6563·7420·6c6f··arily·inspect·lo | ||
| 00040cd0:· | 00040cd0:·6720·6669·6c65·2070·6174·6873·206c·6973··g·file·paths·lis | ||
| 00040ce0:· | 00040ce0:·7465·6420·696e·202f·6574·632f·7273·7973··ted·in·/etc/rsys | ||
| 00040cf0:· | 00040cf0:·6c6f·672e·636f·6e66·0a52·5359·534c·4f47··log.conf.RSYSLOG | ||
| 00040d00:· | 00040d00:·5f45·5443·5f43·4f4e·4649·473d·222f·6574··_ETC_CONFIG="/et | ||
| 00040d10:· | 00040d10:·632f·7273·7973·6c6f·672e·636f·6e66·220a··c/rsyslog.conf". | ||
| 00040d20:· | 00040d20:·2320·2a20·416e·6420·616c·736f·2074·6865··#·*·And·also·the | ||
| 00040d30:· | 00040d30:·206c·6f67·2066·696c·6520·7061·7468·7320···log·file·paths· | ||
| 00040d40:· | 00040d40:·6c69·7374·6564·2061·6674·6572·2072·7379··listed·after·rsy | ||
| 00040d50:· | 00040d50:·736c·6f67·2773·2024·496e·636c·7564·6543··slog's·$IncludeC | ||
| 00040d60:· | 00040d60:·6f6e·6669·6720·6469·7265·6374·6976·650a··onfig·directive. | ||
| 00040d70:· | 00040d70:·2320·2020·2873·746f·7265·2074·6865·2072··#···(store·the·r | ||
| 00040d80:· | 00040d80:·6573·756c·7420·696e·746f·2061·7272·6179··esult·into·array | ||
| 00040d90:·20 | 00040d90:·2066·6f72·2074·6865·2063·6173·6520·7468···for·the·case·th | ||
| 00040da0:· | 00040da0:·6572·6527·7320·7368·656c·6c20·676c·6f62··ere's·shell·glob | ||
| 00040db0:· | 00040db0:·2075·7365·6420·6173·2076·616c·7565·206f···used·as·value·o | ||
| 00040dc0:· | 00040dc0:·6620·496e·636c·7564·6543·6f6e·6669·6729··f·IncludeConfig) | ||
| 00040dd0:· | 00040dd0:·0a72·6561·6461·7272·6179·202d·7420·4f4c··.readarray·-t·OL | ||
| 00040de0:· | 00040de0:·445f·494e·4320·266c·743b·2026·6c74·3b28··D_INC·<·<( | ||
| 00040df0:·7 | 00040df0:·6772·6570·202d·6520·225c·2449·6e63·6c75··grep·-e·"\$Inclu | ||
| 00040e00:·6 | 00040e00:·6465·436f·6e66·6967·5b5b·3a73·7061·6365··deConfig[[:space | ||
| 00040e10:· | 00040e10:·3a5d·5d5c·2b5b·5e5b·3a73·7061·6365·3a5d··:]]\+[^[:space:] | ||
| 00040e20:· | 00040e20:·3b5d·5c2b·2220·2f65·7463·2f72·7379·736c··;]\+"·/etc/rsysl | ||
| 00040e30:· | 00040e30:·6f67·2e63·6f6e·6620·7c20·6375·7420·2d64··og.conf·|·cut·-d | ||
| 00040e40:· | 00040e40:·2027·2027·202d·6620·3229·0a72·6561·6461···'·'·-f·2).reada | ||
| 00040e50:·727 | 00040e50:·7272·6179·202d·7420·5253·5953·4c4f·475f··rray·-t·RSYSLOG_ | ||
| 00040e60:· | 00040e60:·494e·434c·5544·455f·434f·4e46·4947·2026··INCLUDE_CONFIG·& | ||
| 00040e70:· | 00040e70:·6c74·3b20·266c·743b·2866·6f72·2049·4e43··lt;·<(for·INC | ||
| 00040e80:· | 00040e80:·5041·5448·2069·6e20·2224·7b4f·4c44·5f49··PATH·in·"${OLD_I | ||
| 00040e90:· | 00040e90:·4e43·5b40·5d7d·223b·2064·6f20·6576·616c··NC[@]}";·do·eval | ||
| 00040ea0:·20 | 00040ea0:·2070·7269·6e74·6620·2725·735c·5c6e·2720···printf·'%s\\n'· | ||
| 00040eb0:· | 00040eb0:·2224·7b49·4e43·5041·5448·7d22·3b20·646f··"${INCPATH}";·do | ||
| 00040ec0:·6 | 00040ec0:·6e65·290a·7265·6164·6172·7261·7920·2d74··ne).readarray·-t | ||
| 00040ed0:·2 | 00040ed0:·204e·4557·5f49·4e43·2026·6c74·3b20·266c···NEW_INC·<·&l | ||
| 00040ee0:· | 00040ee0:·743b·2873·6564·202d·6e20·272f·5e5c·732a··t;(sed·-n·'/^\s* | ||
| 00040ef0:· | 00040ef0:·696e·636c·7564·6528·2f2c·2f29·2f49·7027··include(/,/)/Ip' | ||
| 00040f00:· | 00040f00:·202f·6574·632f·7273·7973·6c6f·672e·636f···/etc/rsyslog.co | ||
| 00040f10:· | 00040f10:·6e66·207c·2073·6564·202d·6e20·2773·402e··nf·|·sed·-n·'s@. | ||
| 00040f20:· | 00040f20:·2a66·696c·655c·732a·3d5c·732a·225c·285b··*file\s*=\s*"\([ | ||
| 00040f30:· | 00040f30:·2f5b·3a61·6c6e·756d·3a5d·5b3a·7075·6e63··/[:alnum:][:punc | ||
| 00040f40:·7 | 00040f40:·743a·5d5d·2a5c·2922·2e2a·405c·3140·4970··t:]]*\)".*@\1@Ip | ||
| 00040f50:· | 00040f50:·2729·0a72·6561·6461·7272·6179·202d·7420··').readarray·-t· | ||
| 00040f60:· | 00040f60:·5253·5953·4c4f·475f·494e·434c·5544·4520··RSYSLOG_INCLUDE· | ||
| 00040f70:· | 00040f70:·266c·743b·2026·6c74·3b28·666f·7220·494e··<·<(for·IN | ||
| 00040f80:· | 00040f80:·4350·4154·4820·696e·2022·247b·4e45·575f··CPATH·in·"${NEW_ | ||
| 00040f90:· | 00040f90:·494e·435b·405d·7d22·3b20·646f·2065·7661··INC[@]}";·do·eva | ||
| 00040fa0:· | 00040fa0:·6c20·7072·696e·7466·2027·2573·5c5c·6e27··l·printf·'%s\\n' | ||
| 00040fb0:· | 00040fb0:·2022·247b·494e·4350·4154·487d·223b·2064···"${INCPATH}";·d | ||
| 00040fc0:·6 | 00040fc0:·6f6e·6529·0a0a·2320·4465·636c·6172·6520··one)..#·Declare· | ||
| 00040fd0:·6 | 00040fd0:·616e·2061·7272·6179·2074·6f20·686f·6c64··an·array·to·hold | ||
| 00040fe0:· | 00040fe0:·2074·6865·2066·696e·616c·206c·6973·7420···the·final·list· | ||
| 00040ff0:·6 | 00040ff0:·6f66·2064·6966·6665·7265·6e74·206c·6f67··of·different·log | ||
| 00041000:· | 00041000:·2066·696c·6520·7061·7468·730a·6465·636c···file·paths.decl | ||
| 00041010:·6 | 00041010:·6172·6520·2d61·204c·4f47·5f46·494c·455f··are·-a·LOG_FILE_ | ||
| 00041020:· | 00041020:·5041·5448·530a·0a23·2041·7272·6179·2074··PATHS..#·Array·t | ||
| 00041030:·6 | 00041030:·6f20·686f·6c64·2061·6c6c·2072·7379·736c··o·hold·all·rsysl | ||
| 00041040:·6 | 00041040:·6f67·2063·6f6e·6669·6720·656e·7472·6965··og·config·entrie | ||
| 00041050:· | 00041050:·730a·5253·5953·4c4f·475f·434f·4e46·4947··s.RSYSLOG_CONFIG | ||
| 00041060:· | 00041060:·533d·2829·0a52·5359·534c·4f47·5f43·4f4e··S=().RSYSLOG_CON | ||
| 00041070:· | 00041070:·4649·4753·3d28·2224·7b52·5359·534c·4f47··FIGS=("${RSYSLOG | ||
| 00041080:· | 00041080:·5f45·5443·5f43·4f4e·4649·477d·2220·2224··_ETC_CONFIG}"·"$ | ||
| 00041090:·7 | 00041090:·7b52·5359·534c·4f47·5f49·4e43·4c55·4445··{RSYSLOG_INCLUDE | ||
| 000410a0:· | 000410a0:·5f43·4f4e·4649·475b·405d·7d22·2022·247b··_CONFIG[@]}"·"${ | ||
| 000410b0:· | 000410b0:·5253·5953·4c4f·475f·494e·434c·5544·455b··RSYSLOG_INCLUDE[ | ||
| 000410c0:· | 000410c0:·405d·7d22·290a·0a23·2047·6574·2066·756c··@]}")..#·Get·ful | ||
| 000410d0:· | 000410d0:·6c20·6c69·7374·206f·6620·6669·6c65·7320··l·list·of·files· | ||
| 000410e0:· | 000410e0:·746f·2062·6520·6368·6563·6b65·640a·2320··to·be·checked.#· | ||
| 000410f0:· | 000410f0:·5253·5953·4c4f·475f·434f·4e46·4947·5320··RSYSLOG_CONFIGS· | ||
| 00041100:· | 00041100:·6d61·7920·636f·6e74·6169·6e20·676c·6f62··may·contain·glob | ||
| 00041110:· | 00041110:·7320·7375·6368·2061·730a·2320·2f65·7463··s·such·as.#·/etc | ||
| 00041120:· | 00041120:·2f72·7379·736c·6f67·2e64·2f2a·2e63·6f6e··/rsyslog.d/*.con | ||
| 00041130:· | 00041130:·6620·2f65·7463·2f72·7379·736c·6f67·2e64··f·/etc/rsyslog.d | ||
| 00041140:· | 00041140:·2f2a·2e66·7275·6c65·0a23·2053·6f2c·206c··/*.frule.#·So,·l | ||
| 00041150:· | 00041150:·6f6f·7020·6f76·6572·2074·6865·2065·6e74··oop·over·the·ent | ||
| 00041160:· | 00041160:·7269·6573·2069·6e20·5253·5953·4c4f·475f··ries·in·RSYSLOG_ | ||
| 00041170:· | 00041170:·434f·4e46·4947·5320·616e·6420·7573·6520··CONFIGS·and·use· | ||
| 00041180:·6 | 00041180:·6669·6e64·2074·6f20·6765·7420·7468·6520··find·to·get·the· | ||
| 00041190:· | 00041190:·6c69·7374·206f·6620·696e·636c·7564·6564··list·of·included | ||
| 000411a0:· | 000411a0:·2066·696c·6573·2e0a·5253·5953·4c4f·475f···files..RSYSLOG_ | ||
| 000411b0:· | 000411b0:·434f·4e46·4947·5f46·494c·4553·3d28·290a··CONFIG_FILES=(). | ||
| 000411c0:· | 000411c0:·666f·7220·454e·5452·5920·696e·2022·247b··for·ENTRY·in·"${ | ||
| 000411d0:· | 000411d0:·5253·5953·4c4f·475f·434f·4e46·4947·535b··RSYSLOG_CONFIGS[ | ||
| 000411e0:· | 000411e0:·405d·7d22·0a64·6f0a·0923·2049·6620·6469··@]}".do..#·If·di | ||
| 000411f0:·7 | 000411f0:·7265·6374·6f72·792c·2072·7379·736c·6f67··rectory,·rsyslog | ||
| 00041200:· | 00041200:·2077·696c·6c20·7365·6172·6368·2066·6f72···will·search·for | ||
| 00041210:· | 00041210:·2063·6f6e·6669·6720·6669·6c65·7320·696e···config·files·in | ||
| 00041220:·20 | 00041220:·2072·6563·7572·7369·7665·6c79·2e0a·0923···recursively...# | ||
| 00041230:· | 00041230:·2048·6f77·6576·6572·2c20·6669·6c65·7320···However,·files· | ||
| 00041240:·6 | 00041240:·696e·2068·6964·6465·6e20·7375·622d·6469··in·hidden·sub-di | ||
| 00041250:· | 00041250:·7265·6374·6f72·6965·7320·6f72·2068·6964··rectories·or·hid | ||
| 00041260:· | 00041260:·6465·6e20·6669·6c65·7320·7769·6c6c·2062··den·files·will·b | ||
| Max diff block lines reached; 1192142/1298844 bytes (91.78%) of diff not shown. | |||
| Offset 289, 14 lines modified | Offset 289, 140 lines modified | ||
| 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP-007- | 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP-007- |
| 290 | ···························3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 290 | ···························3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 | 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 |
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 297 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 298 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 299 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed·&&·dpkg-query·--show·-- | ||
| 300 | showformat='${db:Status-Status}\n'·'rsyslog'·2>/dev/null·|·grep·-q·'^installed'; | ||
| 301 | then | ||
| 302 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 303 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 304 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 305 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 306 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value·of | ||
| 307 | IncludeConfig) | ||
| 308 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+"·/ | ||
| 309 | etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 310 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 311 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 312 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed·- | ||
| 313 | n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 314 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 315 | '%s\\n'·"${INCPATH}";·done) | ||
| 316 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 317 | declare·-a·LOG_FILE_PATHS | ||
| 318 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 319 | RSYSLOG_CONFIGS=() | ||
| 320 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 321 | {RSYSLOG_INCLUDE[@]}") | ||
| 322 | #·Get·full·list·of·files·to·be·checked | ||
| 323 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 324 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 325 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 326 | included·files. | ||
| 327 | RSYSLOG_CONFIG_FILES=() | ||
| 328 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 329 | do | ||
| 330 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 331 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 332 | » if·[·-d·"${ENTRY}"·] | ||
| 333 | » then | ||
| 334 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 335 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 336 | » elif·[·-f·"${ENTRY}"·] | ||
| 337 | » then | ||
| 338 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 339 | » else | ||
| 340 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 341 | » fi | ||
| 342 | done | ||
| 343 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 344 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default·configuration) | ||
| 345 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 346 | do | ||
| 347 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 348 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 349 | ('$')·characters, | ||
| 350 | » #·*·Ignore·empty·lines, | ||
| 351 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 352 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 353 | not·log·files | ||
| 354 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 355 | path | ||
| 356 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if·all | ||
| 357 | of·the | ||
| 358 | » #·following·are·met: | ||
| 359 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 360 | » #·*·it·is·preceded·by·space | ||
| 361 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';')·characters | ||
| 362 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 363 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 364 | » then | ||
| 365 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 366 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 367 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 368 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 369 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 370 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 371 | {FILTERED_PATHS}") | ||
| 372 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 373 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 374 | newline),·split | ||
| 375 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 376 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 377 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 378 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 379 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 380 | » » #·Delete·the·temporary·array | ||
| 381 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 382 | » fi | ||
| 383 | done | ||
| 384 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so·grep | ||
| 385 | regex·is·a·bit | ||
| 386 | #·curly: | ||
| 387 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 388 | #·extract·File="logfile"·expression | ||
| 389 | #·match·only·"logfile"·expression | ||
| 390 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 391 | do | ||
| 392 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 393 | "${LOG_FILE}") | ||
| 394 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 395 | alnum:][:punct:]]*)\"\s*\)") | ||
| 396 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| 397 | ]]*)\""|tr·-d·"\"")") | ||
| 398 | done | ||
| 399 | #·Ensure·the·correct·attribute·if·file·exists | ||
| 400 | FILE_CMD="chgrp" | ||
| 401 | for·LOG_FILE_PATH·in·"${LOG_FILE_PATHS[@]}" | ||
| 402 | do | ||
| 403 | » #·Sanity·check·-·if·particular·$LOG_FILE_PATH·is·empty·string,·skip·it·from | ||
| 404 | further·processing | ||
| 405 | » if·[·-z·"$LOG_FILE_PATH"·] | ||
| 406 | » then | ||
| 407 | » » continue | ||
| 408 | » fi | ||
| Max diff block lines reached; 145492/151138 bytes (96.26%) of diff not shown. | |||
| Offset 15079, 188 lines modified | Offset 15079, 188 lines modified | ||
| 0003ae60:·7461·7267·6574·3d22·2369·646d·3237·3633··target="#idm2763 | 0003ae60:·7461·7267·6574·3d22·2369·646d·3237·3633··target="#idm2763 | ||
| 0003ae70:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003ae70:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ae80:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ae80:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ae90:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ae90:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003aea0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003aea0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003aeb0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003aeb0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003aec0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003aec0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003aed0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003aee0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003aef0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003af00:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003aed0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003aee0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003aef0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003af00:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003af10:·6522·2069·643d·2269·646d·3237·3633·223e··e"·id="idm2763"> | |||
| 0003af20:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003af30:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003af40:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003af50:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003af60:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003af70:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003af80:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003af90:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003afa0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003afb0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003afc0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003afd0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003afe0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003aff0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b000:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b010:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b020:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b030:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b040:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b050:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b060:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b070:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b080:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b090:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b0a0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003 | 0003af10:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003af20:·3d22·6964·6d32·3736·3322·3e3c·7072·653e··="idm2763"><pre> | |||
| 0003af30:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003af40:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003af50:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b0c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b0d0:·6d32·3736·3422·2074·6162·696e·6465·783d··m2764"·tabindex= | |||
| 0003b0e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b0f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b100:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b110:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b120:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b130:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b140:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b150:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b160:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b170:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b180:·3237·3634·223e·3c74·6162·6c65·2063·6c61··2764"><table·cla | |||
| 0003b190:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b1a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b1b0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b1c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b1d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b1e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b1f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b200:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b210:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b220:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b230:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b240:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b250:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b260:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b270:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b280:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003b290:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003b2a0:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003b2b0:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003b2c0:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | |||
| 0003b2d0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b2e0:·4449·5341·2d53·5449·472d·5542·5455·2d32··DISA-STIG-UBTU-2 | |||
| 0003b2f0:·302d·3031·3034·3530·0a20·202d·204e·4953··0-010450.··-·NIS | |||
| 0003b300:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b310:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b320:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b330:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b340:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b350:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b360:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b370:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b380:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b390:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b3a0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b3b0:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003b3c0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b3d0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b3e0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b3f0:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b400:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b410:·2722·6c69·6e75·782d·6261·7365·2220·696e··'"linux-base"·in | |||
| 0003b420:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003b430:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003b440:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b450:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b460:·2d55·4254·552d·3230·2d30·3130·3435·300a··-UBTU-20-010450. | |||
| 0003b470:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b480:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b490:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b4a0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b4b0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b4c0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b4d0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b4e0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b4f0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b500:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b510:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b520:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003 | 0003af60:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003 | 0003af70:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003 | 0003af80:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003 | 0003af90:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003 | 0003afa0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003 | 0003afb0:·3d22·2369·646d·3237·3634·2220·7461·6269··="#idm2764"·tabi | ||
| 0003 | 0003afc0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003 | 0003afd0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003 | 0003afe0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003 | 0003aff0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| Max diff block lines reached; 16627499/16652091 bytes (99.85%) of diff not shown. | |||
| Offset 115, 26 lines modified | Offset 115, 33 lines modified | ||
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 118 | ············_\x8c_\x8i_\x8s············1.4.1 | 118 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | incl | 131 | #·Remediation·is·applicable·only·in·certain·platforms |
| 132 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 133 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 128 | class·install_aide·{ | ||
| 129 | ··package·{·'aide': | ||
| 130 | ····ensure·=>·'installed', | ||
| 131 | ··} | ||
| 132 | 134 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | |
| 135 | else | ||
| 136 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 137 | fi | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | -·name:·Gather·the·package·facts | 143 | -·name:·Gather·the·package·facts |
| 139 | ··package_facts: | 144 | ··package_facts: |
| Offset 165, 33 lines modified | Offset 172, 26 lines modified | ||
| 165 | ··-·PCI-DSSv4-11.5.2 | 172 | ··-·PCI-DSSv4-11.5.2 |
| 166 | ··-·enable_strategy | 173 | ··-·enable_strategy |
| 167 | ··-·low_complexity | 174 | ··-·low_complexity |
| 168 | ··-·low_disruption | 175 | ··-·low_disruption |
| 169 | ··-·medium_severity | 176 | ··-·medium_severity |
| 170 | ··-·no_reboot_needed | 177 | ··-·no_reboot_needed |
| 171 | ··-·package_aide_installed | 178 | ··-·package_aide_installed |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 184 | include·install_aide | ||
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 182 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 183 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 184 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 185 | else | ||
| 186 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 187 | 185 | class·install_aide·{ | |
| 186 | ··package·{·'aide': | ||
| 187 | ····ensure·=>·'installed', | ||
| 188 | ··} | ||
| 189 | } | ||
| 188 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 189 | Run·the·following·command·to·generate·a·new·database: | 191 | Run·the·following·command·to·generate·a·new·database: |
| 190 | $·sudo·aideinit | 192 | $·sudo·aideinit |
| 191 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 192 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of·these·files),·in·a | 194 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of·these·files),·in·a |
| 193 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The | 195 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The |
| 194 | newly-generated·database·can·be·installed·as·follows: | 196 | newly-generated·database·can·be·installed·as·follows: |
| Offset 218, 14 lines modified | Offset 218, 41 lines modified | ||
| 218 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 218 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 219 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 219 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 220 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 220 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 221 | ············_\x8c_\x8i_\x8s············1.4.1 | 221 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 222 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 222 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 224 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 224 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 226 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 227 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 228 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 229 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 230 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 231 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 232 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 233 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 234 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 235 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 236 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 237 | fi | ||
| 238 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 239 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 240 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 241 | fi | ||
| 242 | /usr/sbin/aideinit·-y·-f | ||
| 243 | else | ||
| 244 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 245 | fi | ||
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 246 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 247 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 248 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 249 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 250 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 230 | -·name:·Gather·the·package·facts | 251 | -·name:·Gather·the·package·facts |
| 231 | ··package_facts: | 252 | ··package_facts: |
| Offset 404, 41 lines modified | Offset 431, 14 lines modified | ||
| 404 | ··-·PCI-DSSv4-11.5.2 | 431 | ··-·PCI-DSSv4-11.5.2 |
| 405 | ··-·aide_build_database | 432 | ··-·aide_build_database |
| 406 | ··-·low_complexity | 433 | ··-·low_complexity |
| 407 | ··-·low_disruption | 434 | ··-·low_disruption |
| 408 | ··-·medium_severity | 435 | ··-·medium_severity |
| 409 | ··-·no_reboot_needed | 436 | ··-·no_reboot_needed |
| 410 | ··-·restrict_strategy | 437 | ··-·restrict_strategy |
| 411 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1147257/1153569 bytes (99.45%) of diff not shown. | |||
| Offset 15122, 188 lines modified | Offset 15122, 188 lines modified | ||
| 0003b110:·6574·3d22·2369·646d·3239·3235·2220·7461··et="#idm2925"·ta | 0003b110:·6574·3d22·2369·646d·3239·3235·2220·7461··et="#idm2925"·ta | ||
| 0003b120:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b120:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b130:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b130:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b140:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b140:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b150:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b150:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b160:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b160:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b170:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b170:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b180:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b190:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b1 | 0003b180:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0003b190:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b1a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b1b0:· | 0003b1b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b1c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b1d0:·6d32·3932·3522·3e3c·7072·653e·3c63·6f64··m2925"><pre><cod | |||
| 0003b1e0:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b1f0:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b200:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b1c0:·643d·2269·646d·3239·3235·223e·3c74·6162··d="idm2925"><tab | |||
| 0003b1d0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b1e0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b1f0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b200:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b210:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b220:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b230:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b240:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b250:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b260:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b270:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b280:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b290:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b2a0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b2b0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b2c0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b2d0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b2e0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b2f0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b300:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b310:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b320:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003b330:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b340:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b350:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b360:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b370:·2d74·6172·6765·743d·2223·6964·6d32·3932··-target="#idm292 | |||
| 0003b380:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | |||
| 0003b390:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b3a0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b3b0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b3c0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b3d0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b3e0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b3f0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b400:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b410:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b420:·7073·6522·2069·643d·2269·646d·3239·3236··pse"·id="idm2926 | |||
| 0003b430:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b440:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b450:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b460:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b470:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b480:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b490:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b4a0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b4b0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b4c0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b4d0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b4e0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b4f0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b500:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b510:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b520:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b530:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003b540:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003b550:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003b560:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003b570:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b580:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003b590:·2d53·5449·472d·5542·5455·2d32·322d·3635··-STIG-UBTU-22-65 | |||
| 0003b5a0:·3130·3130·0a20·202d·204e·4953·542d·3830··1010.··-·NIST-80 | |||
| 0003b5b0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b5c0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b5d0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b5e0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b5f0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b600:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b610:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b620:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b630:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b640:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b650:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b660:·6c6c·6564·0a0a·2d20·6e61·6d65·3a20·456e··lled..-·name:·En | |||
| 0003b670:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b680:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b690:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b6a0:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b6b0:·656e·740a·2020·7768·656e·3a20·2722·6c69··ent.··when:·'"li | |||
| 0003b6c0:·6e75·782d·6261·7365·2220·696e·2061·6e73··nux-base"·in·ans | |||
| 0003b6d0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003b6e0:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | |||
| 0003b6f0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b700:·202d·2044·4953·412d·5354·4947·2d55·4254···-·DISA-STIG-UBT | |||
| 0003b710:·552d·3232·2d36·3531·3031·300a·2020·2d20··U-22-651010.··-· | |||
| 0003b720:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b730:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b740:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b750:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b760:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b770:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b780:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b790:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b7a0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b7b0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b7c0:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b7d0:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b | 0003b210:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0003b | 0003b220:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0003b | 0003b230:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0003b | 0003b240:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0003b | 0003b250:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b | 0003b260:·646d·3239·3236·2220·7461·6269·6e64·6578··dm2926"·tabindex | ||
| 0003b | 0003b270:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b | 0003b280:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b | 0003b290:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b | 0003b2a0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b | 0003b2b0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| Max diff block lines reached; 7376635/7401227 bytes (99.67%) of diff not shown. | |||
| Offset 125, 26 lines modified | Offset 125, 33 lines modified | ||
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 128 | ············_\x8c_\x8i_\x8s············1.3.1 | 128 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260582r958944_rule | 131 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260582r958944_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | incl | 141 | #·Remediation·is·applicable·only·in·certain·platforms |
| 142 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 143 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 138 | class·install_aide·{ | ||
| 139 | ··package·{·'aide': | ||
| 140 | ····ensure·=>·'installed', | ||
| 141 | ··} | ||
| 142 | 144 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | |
| 145 | else | ||
| 146 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 147 | fi | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 148 | -·name:·Gather·the·package·facts | 153 | -·name:·Gather·the·package·facts |
| 149 | ··package_facts: | 154 | ··package_facts: |
| Offset 175, 33 lines modified | Offset 182, 26 lines modified | ||
| 175 | ··-·PCI-DSSv4-11.5.2 | 182 | ··-·PCI-DSSv4-11.5.2 |
| 176 | ··-·enable_strategy | 183 | ··-·enable_strategy |
| 177 | ··-·low_complexity | 184 | ··-·low_complexity |
| 178 | ··-·low_disruption | 185 | ··-·low_disruption |
| 179 | ··-·medium_severity | 186 | ··-·medium_severity |
| 180 | ··-·no_reboot_needed | 187 | ··-·no_reboot_needed |
| 181 | ··-·package_aide_installed | 188 | ··-·package_aide_installed |
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 183 | [[packages]] | ||
| 184 | name·=·"aide" | ||
| 185 | version·=·"*" | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 194 | include·install_aide | ||
| 191 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 192 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 193 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 194 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 195 | else | ||
| 196 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 197 | 195 | class·install_aide·{ | |
| 196 | ··package·{·'aide': | ||
| 197 | ····ensure·=>·'installed', | ||
| 198 | ··} | ||
| 199 | } | ||
| 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 199 | Run·the·following·command·to·generate·a·new·database: | 201 | Run·the·following·command·to·generate·a·new·database: |
| 200 | $·sudo·aideinit | 202 | $·sudo·aideinit |
| 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 203 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 202 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 204 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 203 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 205 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 204 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 206 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 228, 14 lines modified | Offset 228, 41 lines modified | ||
| 228 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 228 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 229 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 229 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 230 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 | 230 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 |
| 231 | ············_\x8c_\x8i_\x8s············1.3.1 | 231 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 232 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 232 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 233 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 233 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260583r958944_rule | 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260583r958944_rule |
| 235 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 236 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 237 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 238 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 239 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 240 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 241 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 242 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 243 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 244 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 245 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 246 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 247 | fi | ||
| 248 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 249 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 250 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 251 | fi | ||
| 252 | /usr/sbin/aideinit·-y·-f | ||
| 253 | else | ||
| 254 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 255 | fi | ||
| 235 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 256 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 236 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 257 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 237 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 258 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 238 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 259 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 239 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 260 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 240 | -·name:·Gather·the·package·facts | 261 | -·name:·Gather·the·package·facts |
| 241 | ··package_facts: | 262 | ··package_facts: |
| Offset 414, 41 lines modified | Offset 441, 14 lines modified | ||
| 414 | ··-·PCI-DSSv4-11.5.2 | 441 | ··-·PCI-DSSv4-11.5.2 |
| 415 | ··-·aide_build_database | 442 | ··-·aide_build_database |
| 416 | ··-·low_complexity | 443 | ··-·low_complexity |
| 417 | ··-·low_disruption | 444 | ··-·low_disruption |
| 418 | ··-·medium_severity | 445 | ··-·medium_severity |
| 419 | ··-·no_reboot_needed | 446 | ··-·no_reboot_needed |
| 420 | ··-·restrict_strategy | 447 | ··-·restrict_strategy |
| 421 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 955696/962000 bytes (99.34%) of diff not shown. | |||
| Offset 15112, 188 lines modified | Offset 15112, 188 lines modified | ||
| 0003b070:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b070:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b080:·646d·3239·3235·2220·7461·6269·6e64·6578··dm2925"·tabindex | 0003b080:·646d·3239·3235·2220·7461·6269·6e64·6578··dm2925"·tabindex | ||
| 0003b090:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b090:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b0a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b0a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b0b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b0b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b0c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b0c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b0d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b0d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b0e0:·6d65·6469·6174·696f·6e20· | 0003b0e0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b0f0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b100:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b110:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b120:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b130:·7365·2220·6964·3d22·6964·6d32·3932·3522··se"·id="idm2925" | |||
| 0003b0f0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b100:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b110:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b120:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b130:·3239·3235·223e·3c74·6162·6c65·2063·6c61··2925"><table·cla | |||
| 0003b140:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b150:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b160:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b170:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b180:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b190:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b1a0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b1b0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b1c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b1d0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b1e0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b1f0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b200:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b210:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b | 0003b140:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 0003b150:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b160:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b230:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b240:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b250:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b260:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b270:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b280:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b290:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b2a0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b2b0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b2c0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b2d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b2e0:·743d·2223·6964·6d32·3932·3622·2074·6162··t="#idm2926"·tab | |||
| 0003b2f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b300:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b310:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b320:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b330:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b340:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b350:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b360:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b370:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b380:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b390:·643d·2269·646d·3239·3236·223e·3c74·6162··d="idm2926"><tab | |||
| 0003b3a0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b3b0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b3c0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b3d0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b3e0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b3f0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b400:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b410:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b420:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b430:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b440:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b450:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b460:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b470:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b480:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b490:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003b4a0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003b4b0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003b4c0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003b4d0:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003b4e0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b4f0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b500:·5542·5455·2d32·322d·3635·3130·3130·0a20··UBTU-22-651010.· | |||
| 0003b510:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b520:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b530:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b540:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b550:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b560:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b570:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b580:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b590:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b5a0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b5b0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b5c0:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003b5d0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b5e0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b5f0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b600:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b610:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b620:·7768·656e·3a20·2722·6c69·6e75·782d·6261··when:·'"linux-ba | |||
| 0003b630:·7365·2220·696e·2061·6e73·6962·6c65·5f66··se"·in·ansible_f | |||
| 0003b640:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003b650:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b660:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b670:·412d·5354·4947·2d55·4254·552d·3232·2d36··A-STIG-UBTU-22-6 | |||
| 0003b680:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b690:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b6a0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b6b0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b6c0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b6d0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b6e0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b6f0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b700:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b710:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b720:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b730:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b | 0003b170:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | ||
| 0003b | 0003b180:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 0003b | 0003b190:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 0003b | 0003b1a0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0003b | 0003b1b0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0003b | 0003b1c0:·7461·7267·6574·3d22·2369·646d·3239·3236··target="#idm2926 | ||
| 0003b | 0003b1d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b | 0003b1e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b | 0003b1f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b | 0003b200:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b | 0003b210:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| Max diff block lines reached; 7217095/7241687 bytes (99.66%) of diff not shown. | |||
| Offset 123, 26 lines modified | Offset 123, 33 lines modified | ||
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 126 | ············_\x8c_\x8i_\x8s············1.3.1 | 126 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260582r958944_rule | 129 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260582r958944_rule |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | incl | 139 | #·Remediation·is·applicable·only·in·certain·platforms |
| 140 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 141 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 136 | class·install_aide·{ | ||
| 137 | ··package·{·'aide': | ||
| 138 | ····ensure·=>·'installed', | ||
| 139 | ··} | ||
| 140 | 142 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | |
| 143 | else | ||
| 144 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 145 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 146 | -·name:·Gather·the·package·facts | 151 | -·name:·Gather·the·package·facts |
| 147 | ··package_facts: | 152 | ··package_facts: |
| Offset 173, 33 lines modified | Offset 180, 26 lines modified | ||
| 173 | ··-·PCI-DSSv4-11.5.2 | 180 | ··-·PCI-DSSv4-11.5.2 |
| 174 | ··-·enable_strategy | 181 | ··-·enable_strategy |
| 175 | ··-·low_complexity | 182 | ··-·low_complexity |
| 176 | ··-·low_disruption | 183 | ··-·low_disruption |
| 177 | ··-·medium_severity | 184 | ··-·medium_severity |
| 178 | ··-·no_reboot_needed | 185 | ··-·no_reboot_needed |
| 179 | ··-·package_aide_installed | 186 | ··-·package_aide_installed |
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 181 | [[packages]] | ||
| 182 | name·=·"aide" | ||
| 183 | version·=·"*" | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 192 | include·install_aide | ||
| 189 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 190 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 191 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 192 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 193 | else | ||
| 194 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 195 | 193 | class·install_aide·{ | |
| 194 | ··package·{·'aide': | ||
| 195 | ····ensure·=>·'installed', | ||
| 196 | ··} | ||
| 197 | } | ||
| 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 197 | Run·the·following·command·to·generate·a·new·database: | 199 | Run·the·following·command·to·generate·a·new·database: |
| 198 | $·sudo·aideinit | 200 | $·sudo·aideinit |
| 199 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 200 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 202 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 201 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 203 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 202 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 204 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 226, 14 lines modified | Offset 226, 41 lines modified | ||
| 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 228 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 | 228 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 |
| 229 | ············_\x8c_\x8i_\x8s············1.3.1 | 229 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 230 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 230 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 231 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 231 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 232 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260583r958944_rule | 232 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260583r958944_rule |
| 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 234 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 235 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 236 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 237 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 238 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 239 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 240 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 241 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 242 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 243 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 244 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 245 | fi | ||
| 246 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 247 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 248 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 249 | fi | ||
| 250 | /usr/sbin/aideinit·-y·-f | ||
| 251 | else | ||
| 252 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 253 | fi | ||
| 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 254 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 255 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 256 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 257 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 237 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 258 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 238 | -·name:·Gather·the·package·facts | 259 | -·name:·Gather·the·package·facts |
| 239 | ··package_facts: | 260 | ··package_facts: |
| Offset 412, 41 lines modified | Offset 439, 14 lines modified | ||
| 412 | ··-·PCI-DSSv4-11.5.2 | 439 | ··-·PCI-DSSv4-11.5.2 |
| 413 | ··-·aide_build_database | 440 | ··-·aide_build_database |
| 414 | ··-·low_complexity | 441 | ··-·low_complexity |
| 415 | ··-·low_disruption | 442 | ··-·low_disruption |
| 416 | ··-·medium_severity | 443 | ··-·medium_severity |
| 417 | ··-·no_reboot_needed | 444 | ··-·no_reboot_needed |
| 418 | ··-·restrict_strategy | 445 | ··-·restrict_strategy |
| 419 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 937638/943942 bytes (99.33%) of diff not shown. | |||
| Offset 15129, 188 lines modified | Offset 15129, 188 lines modified | ||
| 0003b180:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b180:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b190:·646d·3239·3235·2220·7461·6269·6e64·6578··dm2925"·tabindex | 0003b190:·646d·3239·3235·2220·7461·6269·6e64·6578··dm2925"·tabindex | ||
| 0003b1a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b1a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b1b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b1b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b1c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b1c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b1d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b1d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b1e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b1e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b1f0:·6d65·6469·6174·696f·6e20· | 0003b1f0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b200:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b210:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b220:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b230:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b240:·7365·2220·6964·3d22·6964·6d32·3932·3522··se"·id="idm2925" | |||
| 0003b200:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b210:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b220:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b230:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b240:·3239·3235·223e·3c74·6162·6c65·2063·6c61··2925"><table·cla | |||
| 0003b250:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b260:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b270:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b280:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b290:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b2a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b2b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b2c0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b2d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b2e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b2f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b300:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b310:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b320:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b | 0003b250:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 0003b260:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b270:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b340:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b350:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b360:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b370:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b380:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b390:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b3a0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b3b0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b3c0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b3d0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b3e0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b3f0:·743d·2223·6964·6d32·3932·3622·2074·6162··t="#idm2926"·tab | |||
| 0003b400:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b410:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b420:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b430:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b440:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b450:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b460:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b470:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b480:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b490:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b4a0:·643d·2269·646d·3239·3236·223e·3c74·6162··d="idm2926"><tab | |||
| 0003b4b0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b4c0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b4d0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b4e0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b4f0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b500:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b510:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b520:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b530:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b540:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b550:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b560:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b570:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b580:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b590:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b5a0:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003b5b0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003b5c0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003b5d0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003b5e0:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003b5f0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b600:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b610:·5542·5455·2d32·322d·3635·3130·3130·0a20··UBTU-22-651010.· | |||
| 0003b620:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b630:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b640:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b650:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b660:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b670:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b680:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b690:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b6a0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b6b0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b6c0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b6d0:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003b6e0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b6f0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b700:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b710:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b720:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b730:·7768·656e·3a20·2722·6c69·6e75·782d·6261··when:·'"linux-ba | |||
| 0003b740:·7365·2220·696e·2061·6e73·6962·6c65·5f66··se"·in·ansible_f | |||
| 0003b750:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003b760:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b770:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b780:·412d·5354·4947·2d55·4254·552d·3232·2d36··A-STIG-UBTU-22-6 | |||
| 0003b790:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b7a0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b7b0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b7c0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b7d0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b7e0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b7f0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b800:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b810:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b820:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b830:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b840:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b | 0003b280:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | ||
| 0003b | 0003b290:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 0003b | 0003b2a0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 0003b | 0003b2b0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0003b | 0003b2c0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0003b | 0003b2d0:·7461·7267·6574·3d22·2369·646d·3239·3236··target="#idm2926 | ||
| 0003b | 0003b2e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b | 0003b2f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b | 0003b300:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b | 0003b310:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b | 0003b320:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| Max diff block lines reached; 21487969/21512561 bytes (99.89%) of diff not shown. | |||
| Offset 15125, 188 lines modified | Offset 15125, 188 lines modified | ||
| 0003b140:·612d·7461·7267·6574·3d22·2369·646d·3239··a-target="#idm29 | 0003b140:·612d·7461·7267·6574·3d22·2369·646d·3239··a-target="#idm29 | ||
| 0003b150:·3235·2220·7461·6269·6e64·6578·3d22·3022··25"·tabindex="0" | 0003b150:·3235·2220·7461·6269·6e64·6578·3d22·3022··25"·tabindex="0" | ||
| 0003b160:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b160:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b170:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b170:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b180:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b180:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b190:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b190:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b1a0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b1a0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b1b0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b1c0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b1d0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b1e0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b1f0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b200:·6964·3d22·6964·6d32·3932·3522·3e3c·7072··id="idm2925"><pr | |||
| 0003b210:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b220:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b230:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b1b0:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b1c0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b1d0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b1e0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b1f0:·7073·6522·2069·643d·2269·646d·3239·3235··pse"·id="idm2925 | |||
| 0003b200:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b210:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b220:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b230:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b240:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b250:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b260:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b270:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b280:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b290:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b2a0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b2b0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b2c0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b2d0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b2e0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b2f0:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003b300:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003b310:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b320:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b330:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b340:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b350:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003b360:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b370:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b380:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b390:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b3a0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b3b0:·6964·6d32·3932·3622·2074·6162·696e·6465··idm2926"·tabinde | |||
| 0003b3c0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b3d0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b3e0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b3f0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b400:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b410:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b420:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b430:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b440:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b450:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b460:·646d·3239·3236·223e·3c74·6162·6c65·2063··dm2926"><table·c | |||
| 0003b470:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b480:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b490:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b4a0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b4b0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b4c0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b4d0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b4e0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b4f0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b500:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b510:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b520:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b530:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b540:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b550:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b560:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b570:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b580:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b590:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b5a0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003b5b0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b5c0:·2d20·4449·5341·2d53·5449·472d·5542·5455··-·DISA-STIG-UBTU | |||
| 0003b5d0:·2d32·322d·3635·3130·3130·0a20·202d·204e··-22-651010.··-·N | |||
| 0003b5e0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b5f0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b600:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b610:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b620:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b630:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b640:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b650:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b660:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b670:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b680:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b690:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003b6a0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b6b0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b6c0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b6d0:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b6e0:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b6f0:·3a20·2722·6c69·6e75·782d·6261·7365·2220··:·'"linux-base"· | |||
| 0003b700:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0003b710:·2e70·6163·6b61·6765·7327·0a20·2074·6167··.packages'.··tag | |||
| 0003b720:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b730:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b740:·4947·2d55·4254·552d·3232·2d36·3531·3031··IG-UBTU-22-65101 | |||
| 0003b750:·300a·2020·2d20·4e49·5354·2d38·3030·2d35··0.··-·NIST-800-5 | |||
| 0003b760:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b770:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b780:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b790:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b7a0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b7b0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b7c0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b7d0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b7e0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b7f0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b800:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b | 0003b240:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | ||
| 0003b | 0003b250:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003b | 0003b260:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003b | 0003b270:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003b | 0003b280:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003b | 0003b290:·6574·3d22·2369·646d·3239·3236·2220·7461··et="#idm2926"·ta | ||
| 0003b | 0003b2a0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b | 0003b2b0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b | 0003b2c0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| Max diff block lines reached; 21444031/21468623 bytes (99.89%) of diff not shown. | |||
| Offset 16531, 783 lines modified | Offset 16531, 783 lines modified | ||
| 00040920:·6574·3d22·2369·646d·3131·3631·3722·2074··et="#idm11617"·t | 00040920:·6574·3d22·2369·646d·3131·3631·3722·2074··et="#idm11617"·t | ||
| 00040930:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 00040930:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 00040940:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 00040940:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 00040950:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 00040950:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 00040960:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 00040960:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 00040970:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 00040970:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | Diff chunk too large, falling back to line-by-line diff (769 lines added, 769 lines removed) | |
| 00040980:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 00040980:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 00040990:·20 | 00040990:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | ||
| 000409a0:· | 000409a0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 000409b0:· | 000409b0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 000409c0:· | 000409c0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 000409d0:· | 000409d0:·3d22·6964·6d31·3136·3137·223e·3c70·7265··="idm11617"><pre | ||
| 000409e0:· | 000409e0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 000409f0:· | 000409f0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 00040a00:· | 00040a00:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 00040a10:· | 00040a10:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 00040a20:· | 00040a20:·6470·6b67·2d71·7565·7279·202d·2d73·686f··dpkg-query·--sho | ||
| 00040a30:· | 00040a30:·7720·2d2d·7368·6f77·666f·726d·6174·3d27··w·--showformat=' | ||
| 00040a40:· | 00040a40:·247b·6462·3a53·7461·7475·732d·5374·6174··${db:Status-Stat | ||
| 00040a50:· | 00040a50:·7573·7d0a·2720·276c·696e·7578·2d62·6173··us}.'·'linux-bas | ||
| 00040a60:·6 | 00040a60:·6527·2032·2667·743b·2f64·6576·2f6e·756c··e'·2>/dev/nul | ||
| 00040a70:· | 00040a70:·6c20·7c20·6772·6570·202d·7120·5e69·6e73··l·|·grep·-q·^ins | ||
| 00040a80:· | 00040a80:·7461·6c6c·6564·2026·616d·703b·2661·6d70··talled·&& | ||
| 00040a90:· | 00040a90:·3b20·6470·6b67·2d71·7565·7279·202d·2d73··;·dpkg-query·--s | ||
| 00040aa0:· | 00040aa0:·686f·7720·2d2d·7368·6f77·666f·726d·6174··how·--showformat | ||
| 00040ab0:· | 00040ab0:·3d27·247b·6462·3a53·7461·7475·732d·5374··='${db:Status-St | ||
| 00040ac0:· | 00040ac0:·6174·7573·7d5c·6e27·2027·7273·7973·6c6f··atus}\n'·'rsyslo | ||
| 00040ad0:·6 | 00040ad0:·6727·2032·2667·743b·2f64·6576·2f6e·756c··g'·2>/dev/nul | ||
| 00040ae0:·6 | 00040ae0:·6c20·7c20·6772·6570·202d·7120·275e·696e··l·|·grep·-q·'^in | ||
| 00040af0:·7 | 00040af0:·7374·616c·6c65·6427·3b20·7468·656e·0a0a··stalled';·then.. | ||
| 00040b00:· | 00040b00:·2320·4c69·7374·206f·6620·6c6f·6720·6669··#·List·of·log·fi | ||
| 00040b10:· | 00040b10:·6c65·2070·6174·6873·2074·6f20·6265·2069··le·paths·to·be·i | ||
| 00040b20:· | 00040b20:·6e73·7065·6374·6564·2066·6f72·2063·6f72··nspected·for·cor | ||
| 00040b30:· | 00040b30:·7265·6374·2070·6572·6d69·7373·696f·6e73··rect·permissions | ||
| 00040b40:·0a2 | 00040b40:·0a23·202a·2050·7269·6d61·7269·6c79·2069··.#·*·Primarily·i | ||
| 00040b50:· | 00040b50:·6e73·7065·6374·206c·6f67·2066·696c·6520··nspect·log·file· | ||
| 00040b60:· | 00040b60:·7061·7468·7320·6c69·7374·6564·2069·6e20··paths·listed·in· | ||
| 00040b70:·2 | 00040b70:·2f65·7463·2f72·7379·736c·6f67·2e63·6f6e··/etc/rsyslog.con | ||
| 00040b80:· | 00040b80:·660a·5253·5953·4c4f·475f·4554·435f·434f··f.RSYSLOG_ETC_CO | ||
| 00040b90:· | 00040b90:·4e46·4947·3d22·2f65·7463·2f72·7379·736c··NFIG="/etc/rsysl | ||
| 00040ba0:· | 00040ba0:·6f67·2e63·6f6e·6622·0a23·202a·2041·6e64··og.conf".#·*·And | ||
| 00040bb0:·20 | 00040bb0:·2061·6c73·6f20·7468·6520·6c6f·6720·6669···also·the·log·fi | ||
| 00040bc0:·6 | 00040bc0:·6c65·2070·6174·6873·206c·6973·7465·6420··le·paths·listed· | ||
| 00040bd0:·6 | 00040bd0:·6166·7465·7220·7273·7973·6c6f·6727·7320··after·rsyslog's· | ||
| 00040be0:· | 00040be0:·2449·6e63·6c75·6465·436f·6e66·6967·2064··$IncludeConfig·d | ||
| 00040bf0:· | 00040bf0:·6972·6563·7469·7665·0a23·2020·2028·7374··irective.#···(st | ||
| 00040c00:· | 00040c00:·6f72·6520·7468·6520·7265·7375·6c74·2069··ore·the·result·i | ||
| 00040c10:· | 00040c10:·6e74·6f20·6172·7261·7920·666f·7220·7468··nto·array·for·th | ||
| 00040c20:·6 | 00040c20:·6520·6361·7365·2074·6865·7265·2773·2073··e·case·there's·s | ||
| 00040c30:· | 00040c30:·6865·6c6c·2067·6c6f·6220·7573·6564·2061··hell·glob·used·a | ||
| 00040c40:· | 00040c40:·7320·7661·6c75·6520·6f66·2049·6e63·6c75··s·value·of·Inclu | ||
| 00040c50:·65 | 00040c50:·6465·436f·6e66·6967·290a·7265·6164·6172··deConfig).readar | ||
| 00040c60:· | 00040c60:·7261·7920·2d74·204f·4c44·5f49·4e43·2026··ray·-t·OLD_INC·& | ||
| 00040c70:· | 00040c70:·6c74·3b20·266c·743b·2867·7265·7020·2d65··lt;·<(grep·-e | ||
| 00040c80:· | 00040c80:·2022·5c24·496e·636c·7564·6543·6f6e·6669···"\$IncludeConfi | ||
| 00040c90:·6 | 00040c90:·675b·5b3a·7370·6163·653a·5d5d·5c2b·5b5e··g[[:space:]]\+[^ | ||
| 00040ca0:· | 00040ca0:·5b3a·7370·6163·653a·5d3b·5d5c·2b22·202f··[:space:];]\+"·/ | ||
| 00040cb0:·6 | 00040cb0:·6574·632f·7273·7973·6c6f·672e·636f·6e66··etc/rsyslog.conf | ||
| 00040cc0:· | 00040cc0:·207c·2063·7574·202d·6420·2720·2720·2d66···|·cut·-d·'·'·-f | ||
| 00040cd0:· | 00040cd0:·2032·290a·7265·6164·6172·7261·7920·2d74···2).readarray·-t | ||
| 00040ce0:·2 | 00040ce0:·2052·5359·534c·4f47·5f49·4e43·4c55·4445···RSYSLOG_INCLUDE | ||
| 00040cf0:· | 00040cf0:·5f43·4f4e·4649·4720·266c·743b·2026·6c74··_CONFIG·<·< | ||
| 00040d00:· | 00040d00:·3b28·666f·7220·494e·4350·4154·4820·696e··;(for·INCPATH·in | ||
| 00040d10:·2 | 00040d10:·2022·247b·4f4c·445f·494e·435b·405d·7d22···"${OLD_INC[@]}" | ||
| 00040d20:· | 00040d20:·3b20·646f·2065·7661·6c20·7072·696e·7466··;·do·eval·printf | ||
| 00040d30:· | 00040d30:·2027·2573·5c5c·6e27·2022·247b·494e·4350···'%s\\n'·"${INCP | ||
| 00040d40:· | 00040d40:·4154·487d·223b·2064·6f6e·6529·0a72·6561··ATH}";·done).rea | ||
| 00040d50:· | 00040d50:·6461·7272·6179·202d·7420·4e45·575f·494e··darray·-t·NEW_IN | ||
| 00040d60:· | 00040d60:·4320·266c·743b·2026·6c74·3b28·7365·6420··C·<·<(sed· | ||
| 00040d70:· | 00040d70:·2d6e·2027·2f5e·5c73·2a69·6e63·6c75·6465··-n·'/^\s*include | ||
| 00040d80:·2 | 00040d80:·282f·2c2f·292f·4970·2720·2f65·7463·2f72··(/,/)/Ip'·/etc/r | ||
| 00040d90:· | 00040d90:·7379·736c·6f67·2e63·6f6e·6620·7c20·7365··syslog.conf·|·se | ||
| 00040da0:· | 00040da0:·6420·2d6e·2027·7340·2e2a·6669·6c65·5c73··d·-n·'s@.*file\s | ||
| 00040db0:· | 00040db0:·2a3d·5c73·2a22·5c28·5b2f·5b3a·616c·6e75··*=\s*"\([/[:alnu | ||
| 00040dc0:· | 00040dc0:·6d3a·5d5b·3a70·756e·6374·3a5d·5d2a·5c29··m:][:punct:]]*\) | ||
| 00040dd0:·2 | 00040dd0:·222e·2a40·5c31·4049·7027·290a·7265·6164··".*@\1@Ip').read | ||
| 00040de0:· | 00040de0:·6172·7261·7920·2d74·2052·5359·534c·4f47··array·-t·RSYSLOG | ||
| 00040df0:· | 00040df0:·5f49·4e43·4c55·4445·2026·6c74·3b20·266c··_INCLUDE·<·&l | ||
| 00040e00:· | 00040e00:·743b·2866·6f72·2049·4e43·5041·5448·2069··t;(for·INCPATH·i | ||
| 00040e10:·6 | 00040e10:·6e20·2224·7b4e·4557·5f49·4e43·5b40·5d7d··n·"${NEW_INC[@]} | ||
| 00040e20:· | 00040e20:·223b·2064·6f20·6576·616c·2070·7269·6e74··";·do·eval·print | ||
| 00040e30:·6 | 00040e30:·6620·2725·735c·5c6e·2720·2224·7b49·4e43··f·'%s\\n'·"${INC | ||
| 00040e40:· | 00040e40:·5041·5448·7d22·3b20·646f·6e65·290a·0a23··PATH}";·done)..# | ||
| 00040e50:· | 00040e50:·2044·6563·6c61·7265·2061·6e20·6172·7261···Declare·an·arra | ||
| 00040e60:· | 00040e60:·7920·746f·2068·6f6c·6420·7468·6520·6669··y·to·hold·the·fi | ||
| 00040e70:· | 00040e70:·6e61·6c20·6c69·7374·206f·6620·6469·6666··nal·list·of·diff | ||
| 00040e80:· | 00040e80:·6572·656e·7420·6c6f·6720·6669·6c65·2070··erent·log·file·p | ||
| 00040e90:· | 00040e90:·6174·6873·0a64·6563·6c61·7265·202d·6120··aths.declare·-a· | ||
| 00040ea0:· | 00040ea0:·4c4f·475f·4649·4c45·5f50·4154·4853·0a0a··LOG_FILE_PATHS.. | ||
| 00040eb0:· | 00040eb0:·2320·4172·7261·7920·746f·2068·6f6c·6420··#·Array·to·hold· | ||
| 00040ec0:·6 | 00040ec0:·616c·6c20·7273·7973·6c6f·6720·636f·6e66··all·rsyslog·conf | ||
| 00040ed0:· | 00040ed0:·6967·2065·6e74·7269·6573·0a52·5359·534c··ig·entries.RSYSL | ||
| 00040ee0:· | 00040ee0:·4f47·5f43·4f4e·4649·4753·3d28·290a·5253··OG_CONFIGS=().RS | ||
| 00040ef0:· | 00040ef0:·5953·4c4f·475f·434f·4e46·4947·533d·2822··YSLOG_CONFIGS=(" | ||
| 00040f00:· | 00040f00:·247b·5253·5953·4c4f·475f·4554·435f·434f··${RSYSLOG_ETC_CO | ||
| 00040f10:· | 00040f10:·4e46·4947·7d22·2022·247b·5253·5953·4c4f··NFIG}"·"${RSYSLO | ||
| 00040f20:· | 00040f20:·475f·494e·434c·5544·455f·434f·4e46·4947··G_INCLUDE_CONFIG | ||
| 00040f30:· | 00040f30:·5b40·5d7d·2220·2224·7b52·5359·534c·4f47··[@]}"·"${RSYSLOG | ||
| 00040f40:· | 00040f40:·5f49·4e43·4c55·4445·5b40·5d7d·2229·0a0a··_INCLUDE[@]}").. | ||
| 00040f50:·2 | 00040f50:·2320·4765·7420·6675·6c6c·206c·6973·7420··#·Get·full·list· | ||
| 00040f60:·6 | 00040f60:·6f66·2066·696c·6573·2074·6f20·6265·2063··of·files·to·be·c | ||
| 00040f70:· | 00040f70:·6865·636b·6564·0a23·2052·5359·534c·4f47··hecked.#·RSYSLOG | ||
| 00040f80:· | 00040f80:·5f43·4f4e·4649·4753·206d·6179·2063·6f6e··_CONFIGS·may·con | ||
| 00040f90:·7 | 00040f90:·7461·696e·2067·6c6f·6273·2073·7563·6820··tain·globs·such· | ||
| 00040fa0:· | 00040fa0:·6173·0a23·202f·6574·632f·7273·7973·6c6f··as.#·/etc/rsyslo | ||
| 00040fb0:·6 | 00040fb0:·672e·642f·2a2e·636f·6e66·202f·6574·632f··g.d/*.conf·/etc/ | ||
| 00040fc0:· | 00040fc0:·7273·7973·6c6f·672e·642f·2a2e·6672·756c··rsyslog.d/*.frul | ||
| 00040fd0:· | 00040fd0:·650a·2320·536f·2c20·6c6f·6f70·206f·7665··e.#·So,·loop·ove | ||
| 00040fe0:· | 00040fe0:·7220·7468·6520·656e·7472·6965·7320·696e··r·the·entries·in | ||
| 00040ff0:·2 | 00040ff0:·2052·5359·534c·4f47·5f43·4f4e·4649·4753···RSYSLOG_CONFIGS | ||
| 00041000:· | 00041000:·2061·6e64·2075·7365·2066·696e·6420·746f···and·use·find·to | ||
| 00041010:·2 | 00041010:·2067·6574·2074·6865·206c·6973·7420·6f66···get·the·list·of | ||
| 00041020:· | 00041020:·2069·6e63·6c75·6465·6420·6669·6c65·732e···included·files. | ||
| 00041030:· | 00041030:·0a52·5359·534c·4f47·5f43·4f4e·4649·475f··.RSYSLOG_CONFIG_ | ||
| 00041040:· | 00041040:·4649·4c45·533d·2829·0a66·6f72·2045·4e54··FILES=().for·ENT | ||
| 00041050:· | 00041050:·5259·2069·6e20·2224·7b52·5359·534c·4f47··RY·in·"${RSYSLOG | ||
| 00041060:· | 00041060:·5f43·4f4e·4649·4753·5b40·5d7d·220a·646f··_CONFIGS[@]}".do | ||
| 00041070:· | 00041070:·0a09·2320·4966·2064·6972·6563·746f·7279··..#·If·directory | ||
| 00041080:· | 00041080:·2c20·7273·7973·6c6f·6720·7769·6c6c·2073··,·rsyslog·will·s | ||
| 00041090:·6 | 00041090:·6561·7263·6820·666f·7220·636f·6e66·6967··earch·for·config | ||
| 000410a0:· | 000410a0:·2066·696c·6573·2069·6e20·7265·6375·7273···files·in·recurs | ||
| 000410b0:·6 | 000410b0:·6976·656c·792e·0a09·2320·486f·7765·7665··ively...#·Howeve | ||
| 000410c0:·7 | 000410c0:·722c·2066·696c·6573·2069·6e20·6869·6464··r,·files·in·hidd | ||
| 000410d0:· | 000410d0:·656e·2073·7562·2d64·6972·6563·746f·7269··en·sub-directori | ||
| 000410e0:·6 | 000410e0:·6573·206f·7220·6869·6464·656e·2066·696c··es·or·hidden·fil | ||
| 000410f0:· | 000410f0:·6573·2077·696c·6c20·6265·2069·676e·6f72··es·will·be·ignor | ||
| Max diff block lines reached; 1193039/1299741 bytes (91.79%) of diff not shown. | |||
| Offset 289, 14 lines modified | Offset 289, 140 lines modified | ||
| 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 290 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 290 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 | 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 |
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 297 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 298 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 299 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed·&&·dpkg-query·--show·-- | ||
| 300 | showformat='${db:Status-Status}\n'·'rsyslog'·2>/dev/null·|·grep·-q·'^installed'; | ||
| 301 | then | ||
| 302 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 303 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 304 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 305 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 306 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 307 | of·IncludeConfig) | ||
| 308 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+"·/ | ||
| 309 | etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 310 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 311 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 312 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed·- | ||
| 313 | n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 314 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 315 | '%s\\n'·"${INCPATH}";·done) | ||
| 316 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 317 | declare·-a·LOG_FILE_PATHS | ||
| 318 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 319 | RSYSLOG_CONFIGS=() | ||
| 320 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 321 | {RSYSLOG_INCLUDE[@]}") | ||
| 322 | #·Get·full·list·of·files·to·be·checked | ||
| 323 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 324 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 325 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 326 | included·files. | ||
| 327 | RSYSLOG_CONFIG_FILES=() | ||
| 328 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 329 | do | ||
| 330 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 331 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 332 | » if·[·-d·"${ENTRY}"·] | ||
| 333 | » then | ||
| 334 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 335 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 336 | » elif·[·-f·"${ENTRY}"·] | ||
| 337 | » then | ||
| 338 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 339 | » else | ||
| 340 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 341 | » fi | ||
| 342 | done | ||
| 343 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 344 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default·configuration) | ||
| 345 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 346 | do | ||
| 347 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 348 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 349 | ('$')·characters, | ||
| 350 | » #·*·Ignore·empty·lines, | ||
| 351 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 352 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 353 | not·log·files | ||
| 354 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 355 | path | ||
| 356 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 357 | all·of·the | ||
| 358 | » #·following·are·met: | ||
| 359 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 360 | » #·*·it·is·preceded·by·space | ||
| 361 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';')·characters | ||
| 362 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 363 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 364 | » then | ||
| 365 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 366 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 367 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 368 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 369 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 370 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 371 | {FILTERED_PATHS}") | ||
| 372 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 373 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 374 | newline),·split | ||
| 375 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 376 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 377 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 378 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 379 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 380 | » » #·Delete·the·temporary·array | ||
| 381 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 382 | » fi | ||
| 383 | done | ||
| 384 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so·grep | ||
| 385 | regex·is·a·bit | ||
| 386 | #·curly: | ||
| 387 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 388 | #·extract·File="logfile"·expression | ||
| 389 | #·match·only·"logfile"·expression | ||
| 390 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 391 | do | ||
| 392 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 393 | "${LOG_FILE}") | ||
| 394 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 395 | alnum:][:punct:]]*)\"\s*\)") | ||
| 396 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| 397 | ]]*)\""|tr·-d·"\"")") | ||
| 398 | done | ||
| 399 | #·Ensure·the·correct·attribute·if·file·exists | ||
| 400 | FILE_CMD="chgrp" | ||
| 401 | for·LOG_FILE_PATH·in·"${LOG_FILE_PATHS[@]}" | ||
| 402 | do | ||
| 403 | » #·Sanity·check·-·if·particular·$LOG_FILE_PATH·is·empty·string,·skip·it·from | ||
| 404 | further·processing | ||
| 405 | » if·[·-z·"$LOG_FILE_PATH"·] | ||
| 406 | » then | ||
| 407 | » » continue | ||
| 408 | » fi | ||
| Max diff block lines reached; 149177/154827 bytes (96.35%) of diff not shown. | |||
| Offset 15079, 188 lines modified | Offset 15079, 188 lines modified | ||
| 0003ae60:·6172·6765·743d·2223·6964·6d32·3932·3522··arget="#idm2925" | 0003ae60:·6172·6765·743d·2223·6964·6d32·3932·3522··arget="#idm2925" | ||
| 0003ae70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003ae70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003ae80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003ae80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003ae90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003ae90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003aea0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003aea0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003aeb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003aeb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003aec0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003aec0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003aed0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003aee0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003aef0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003af00:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003aed0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003aee0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003aef0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003af00:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003af10:·2220·6964·3d22·6964·6d32·3932·3522·3e3c··"·id="idm2925">< | |||
| 0003af20:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003af30:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003af40:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003af50:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003af60:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003af70:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003af80:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003af90:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003afa0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003afb0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003afc0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003afd0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003afe0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003aff0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b000:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b010:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003b020:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003b030:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003b040:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003b050:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003b060:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b070:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003b080:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b090:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b0a0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003 | 0003af10:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003af20:·2269·646d·3239·3235·223e·3c70·7265·3e3c··"idm2925"><pre>< | |||
| 0003af30:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003af40:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003af50:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003b0c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b0d0:·3239·3236·2220·7461·6269·6e64·6578·3d22··2926"·tabindex=" | |||
| 0003b0e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b0f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b100:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b110:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b120:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b130:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003b140:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b150:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b160:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b170:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003b180:·3932·3622·3e3c·7461·626c·6520·636c·6173··926"><table·clas | |||
| 0003b190:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b1a0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b1b0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b1c0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b1d0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b1e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b1f0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b200:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b210:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b220:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b230:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b240:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b250:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b260:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b270:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b280:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003b290:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003b2a0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003b2b0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003b2c0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b2d0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b2e0:·4953·412d·5354·4947·2d55·4254·552d·3232··ISA-STIG-UBTU-22 | |||
| 0003b2f0:·2d36·3531·3031·300a·2020·2d20·4e49·5354··-651010.··-·NIST | |||
| 0003b300:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b310:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b320:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b330:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b340:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b350:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b360:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b370:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b380:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b390:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b3a0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b3b0:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003b3c0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b3d0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b3e0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b3f0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b400:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003b410:·226c·696e·7578·2d62·6173·6522·2069·6e20··"linux-base"·in· | |||
| 0003b420:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003b430:·636b·6167·6573·270a·2020·7461·6773·3a0a··ckages'.··tags:. | |||
| 0003b440:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b450:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b460:·5542·5455·2d32·322d·3635·3130·3130·0a20··UBTU-22-651010.· | |||
| 0003b470:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b480:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b490:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b4a0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b4b0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b4c0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b4d0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b4e0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b4f0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b500:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b510:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b520:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003 | 0003af60:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003 | 0003af70:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003 | 0003af80:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003 | 0003af90:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003 | 0003afa0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003 | 0003afb0:·2223·6964·6d32·3932·3622·2074·6162·696e··"#idm2926"·tabin | ||
| 0003 | 0003afc0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003 | 0003afd0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003 | 0003afe0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003 | 0003aff0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| Max diff block lines reached; 17087948/17112540 bytes (99.86%) of diff not shown. | |||
| Offset 115, 26 lines modified | Offset 115, 33 lines modified | ||
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 118 | ············_\x8c_\x8i_\x8s············1.3.1 | 118 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260582r958944_rule | 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260582r958944_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | incl | 131 | #·Remediation·is·applicable·only·in·certain·platforms |
| 132 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 133 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 128 | class·install_aide·{ | ||
| 129 | ··package·{·'aide': | ||
| 130 | ····ensure·=>·'installed', | ||
| 131 | ··} | ||
| 132 | 134 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | |
| 135 | else | ||
| 136 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 137 | fi | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | -·name:·Gather·the·package·facts | 143 | -·name:·Gather·the·package·facts |
| 139 | ··package_facts: | 144 | ··package_facts: |
| Offset 165, 33 lines modified | Offset 172, 26 lines modified | ||
| 165 | ··-·PCI-DSSv4-11.5.2 | 172 | ··-·PCI-DSSv4-11.5.2 |
| 166 | ··-·enable_strategy | 173 | ··-·enable_strategy |
| 167 | ··-·low_complexity | 174 | ··-·low_complexity |
| 168 | ··-·low_disruption | 175 | ··-·low_disruption |
| 169 | ··-·medium_severity | 176 | ··-·medium_severity |
| 170 | ··-·no_reboot_needed | 177 | ··-·no_reboot_needed |
| 171 | ··-·package_aide_installed | 178 | ··-·package_aide_installed |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 184 | include·install_aide | ||
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 182 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 183 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 184 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 185 | else | ||
| 186 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 187 | 185 | class·install_aide·{ | |
| 186 | ··package·{·'aide': | ||
| 187 | ····ensure·=>·'installed', | ||
| 188 | ··} | ||
| 189 | } | ||
| 188 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 189 | Run·the·following·command·to·generate·a·new·database: | 191 | Run·the·following·command·to·generate·a·new·database: |
| 190 | $·sudo·aideinit | 192 | $·sudo·aideinit |
| 191 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 192 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 194 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 193 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 195 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 194 | generated·database·can·be·installed·as·follows: | 196 | generated·database·can·be·installed·as·follows: |
| Offset 218, 14 lines modified | Offset 218, 41 lines modified | ||
| 218 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 218 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 219 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 219 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 220 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 | 220 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 |
| 221 | ············_\x8c_\x8i_\x8s············1.3.1 | 221 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 222 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 222 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 224 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260583r958944_rule | 224 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260583r958944_rule |
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 226 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 227 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 228 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 229 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 230 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 231 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 232 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 233 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 234 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 235 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 236 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 237 | fi | ||
| 238 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 239 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 240 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 241 | fi | ||
| 242 | /usr/sbin/aideinit·-y·-f | ||
| 243 | else | ||
| 244 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 245 | fi | ||
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 246 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 247 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 248 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 249 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 250 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 230 | -·name:·Gather·the·package·facts | 251 | -·name:·Gather·the·package·facts |
| 231 | ··package_facts: | 252 | ··package_facts: |
| Offset 404, 41 lines modified | Offset 431, 14 lines modified | ||
| 404 | ··-·PCI-DSSv4-11.5.2 | 431 | ··-·PCI-DSSv4-11.5.2 |
| 405 | ··-·aide_build_database | 432 | ··-·aide_build_database |
| 406 | ··-·low_complexity | 433 | ··-·low_complexity |
| 407 | ··-·low_disruption | 434 | ··-·low_disruption |
| 408 | ··-·medium_severity | 435 | ··-·medium_severity |
| 409 | ··-·no_reboot_needed | 436 | ··-·no_reboot_needed |
| 410 | ··-·restrict_strategy | 437 | ··-·restrict_strategy |
| 411 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1212436/1218741 bytes (99.48%) of diff not shown. | |||
| Offset 15092, 184 lines modified | Offset 15092, 184 lines modified | ||
| 0003af30:·612d·7461·7267·6574·3d22·2369·646d·3235··a-target="#idm25 | 0003af30:·612d·7461·7267·6574·3d22·2369·646d·3235··a-target="#idm25 | ||
| 0003af40:·3639·2220·7461·6269·6e64·6578·3d22·3022··69"·tabindex="0" | 0003af40:·3639·2220·7461·6269·6e64·6578·3d22·3022··69"·tabindex="0" | ||
| 0003af50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003af50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003af60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003af60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003af70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003af70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003af80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003af80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003af90:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003af90:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003afa0:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003afb0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003afc0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003afd0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003afe0:·7073·6522·2069·643d·2269·646d·3235·3639··pse"·id="idm2569 | |||
| 0003aff0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b000:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b010:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b020:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b030:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b040:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b050:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b060:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b070:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b080:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b090:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b0a0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b0b0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b0c0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b0d0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b0e0:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003b0f0:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003b100:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b110:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b120:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b130:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b140:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003b150:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b160:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b170:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b180:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b190:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b1a0:·6964·6d32·3537·3022·2074·6162·696e·6465··idm2570"·tabinde | |||
| 0003b1b0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b1c0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b1d0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b1e0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b1f0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b200:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b210:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b220:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b230:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b240:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b250:·646d·3235·3730·223e·3c74·6162·6c65·2063··dm2570"><table·c | |||
| 0003b260:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b270:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b280:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b290:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b2a0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b2b0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b2c0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b2d0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b2e0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b2f0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b300:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b310:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b320:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b330:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b340:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b350:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b360:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b370:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b380:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b390:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003b3a0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b3b0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b3c0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b3d0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b3e0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b3f0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b400:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b410:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b420:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b430:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b440:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b450:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b460:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003b470:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b480:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b490:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b4a0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b4b0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b4c0:·6865·6e3a·2027·226c·696e·7578·2d62·6173··hen:·'"linux-bas | |||
| 0003b4d0:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | |||
| 0003b4e0:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003b4f0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b500:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b510:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b520:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b530:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b540:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b550:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b560:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b570:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b580:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b590:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b5a0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b5b0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b5c0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b5d0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b5e0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b5f0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b600:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b610:·612d·7461·7267·6574·3d22·2369·646d·3235··a-target="#idm25 | |||
| 0003b620:·3731·2220·7461·6269·6e64·6578·3d22·3022··71"·tabindex="0" | |||
| 0003b630:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b640:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b650:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b660:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b670:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003 | 0003afa0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003 | 0003afb0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | ||
| 0003 | 0003afc0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003 | 0003afd0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003 | 0003afe0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003 | 0003aff0:·6964·3d22·6964·6d32·3536·3922·3e3c·7072··id="idm2569"><pr | ||
| 0003b | 0003b000:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | ||
| 0003b | 0003b010:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | ||
| 0003b | 0003b020:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | ||
| 0003b | 0003b030:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | ||
| Max diff block lines reached; 9218165/9242205 bytes (99.74%) of diff not shown. | |||
| Offset 121, 26 lines modified | Offset 121, 33 lines modified | ||
| 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8c_\x8i_\x8s············6.3.1 | 126 | ············_\x8c_\x8i_\x8s············6.3.1 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | incl | 137 | #·Remediation·is·applicable·only·in·certain·platforms |
| 138 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 139 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 134 | class·install_aide·{ | ||
| 135 | ··package·{·'aide': | ||
| 136 | ····ensure·=>·'installed', | ||
| 137 | ··} | ||
| 138 | 140 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | |
| 141 | else | ||
| 142 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 143 | fi | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | -·name:·Gather·the·package·facts | 149 | -·name:·Gather·the·package·facts |
| 145 | ··package_facts: | 150 | ··package_facts: |
| Offset 169, 33 lines modified | Offset 176, 26 lines modified | ||
| 169 | ··-·PCI-DSSv4-11.5.2 | 176 | ··-·PCI-DSSv4-11.5.2 |
| 170 | ··-·enable_strategy | 177 | ··-·enable_strategy |
| 171 | ··-·low_complexity | 178 | ··-·low_complexity |
| 172 | ··-·low_disruption | 179 | ··-·low_disruption |
| 173 | ··-·medium_severity | 180 | ··-·medium_severity |
| 174 | ··-·no_reboot_needed | 181 | ··-·no_reboot_needed |
| 175 | ··-·package_aide_installed | 182 | ··-·package_aide_installed |
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | [[packages]] | ||
| 178 | name·=·"aide" | ||
| 179 | version·=·"*" | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 188 | include·install_aide | ||
| 185 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 186 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 187 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 188 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 189 | else | ||
| 190 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 191 | 189 | class·install_aide·{ | |
| 190 | ··package·{·'aide': | ||
| 191 | ····ensure·=>·'installed', | ||
| 192 | ··} | ||
| 193 | } | ||
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 193 | Run·the·following·command·to·generate·a·new·database: | 195 | Run·the·following·command·to·generate·a·new·database: |
| 194 | $·sudo·aideinit | 196 | $·sudo·aideinit |
| 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 196 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure·location | 198 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure·location |
| 197 | (such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can | 199 | (such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can |
| 198 | be·installed·as·follows: | 200 | be·installed·as·follows: |
| Offset 220, 14 lines modified | Offset 220, 41 lines modified | ||
| 220 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 220 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 221 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 221 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 222 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 222 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 223 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 223 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 224 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 224 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 225 | ············_\x8c_\x8i_\x8s············6.3.1 | 225 | ············_\x8c_\x8i_\x8s············6.3.1 |
| 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 228 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 229 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 230 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 231 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 232 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 233 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 234 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 235 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 236 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 237 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 238 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 239 | fi | ||
| 240 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 241 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 242 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 243 | fi | ||
| 244 | /usr/sbin/aideinit·-y·-f | ||
| 245 | else | ||
| 246 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 247 | fi | ||
| 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 248 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 228 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 249 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 229 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 250 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 230 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 251 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 231 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 252 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 232 | -·name:·Gather·the·package·facts | 253 | -·name:·Gather·the·package·facts |
| 233 | ··package_facts: | 254 | ··package_facts: |
| Offset 397, 41 lines modified | Offset 424, 14 lines modified | ||
| 397 | ··-·PCI-DSSv4-11.5.2 | 424 | ··-·PCI-DSSv4-11.5.2 |
| 398 | ··-·aide_build_database | 425 | ··-·aide_build_database |
| 399 | ··-·low_complexity | 426 | ··-·low_complexity |
| 400 | ··-·low_disruption | 427 | ··-·low_disruption |
| 401 | ··-·medium_severity | 428 | ··-·medium_severity |
| 402 | ··-·no_reboot_needed | 429 | ··-·no_reboot_needed |
| 403 | ··-·restrict_strategy | 430 | ··-·restrict_strategy |
| 404 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1189701/1196072 bytes (99.47%) of diff not shown. | |||
| Offset 15083, 185 lines modified | Offset 15083, 185 lines modified | ||
| 0003aea0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003aea0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003aeb0:·6964·6d32·3536·3922·2074·6162·696e·6465··idm2569"·tabinde | 0003aeb0:·6964·6d32·3536·3922·2074·6162·696e·6465··idm2569"·tabinde | ||
| 0003aec0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003aec0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003aed0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003aed0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003aee0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003aee0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003aef0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003aef0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003af00:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003af00:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003af10:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003af20:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003af30:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003af40:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003af50:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003af60:·6d32·3536·3922·3e3c·7461·626c·6520·636c··m2569"><table·cl | |||
| 0003af70:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003af80:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003af90:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003afa0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003afb0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003afc0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003afd0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003afe0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003aff0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b000:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b010:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b020:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b030:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b040:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b050:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b060:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b070:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b080:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b090:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b0a0:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b0b0:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b0c0:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003b0d0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b0e0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b0f0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b100:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b110:·6574·3d22·2369·646d·3235·3730·2220·7461··et="#idm2570"·ta | |||
| 0003b120:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b130:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b140:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b150:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b160:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b170:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b180:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b190:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b1a0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b1b0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b1c0:·6964·3d22·6964·6d32·3537·3022·3e3c·7461··id="idm2570"><ta | |||
| 0003b1d0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b1e0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b1f0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b200:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b210:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b220:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b230:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b240:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b250:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b260:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b270:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b280:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b290:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b2a0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b2b0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b2c0:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b2d0:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b2e0:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b2f0:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b300:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b310:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b320:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b330:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b340:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b350:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b360:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b370:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b380:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b390:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b3a0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b3b0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b3c0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b3d0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b3e0:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b3f0:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b400:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b410:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b420:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b430:·740a·2020·7768·656e·3a20·2722·6c69·6e75··t.··when:·'"linu | |||
| 0003b440:·782d·6261·7365·2220·696e·2061·6e73·6962··x-base"·in·ansib | |||
| 0003b450:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003b460:·7327·0a20·2074·6167·733a·0a20·202d·2043··s'.··tags:.··-·C | |||
| 0003b470:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b480:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b490:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b4a0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b4b0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b4c0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b4d0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b4e0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b4f0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b500:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b510:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b520:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b530:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b540:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b550:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b560:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b570:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b580:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b590:·6964·6d32·3537·3122·2074·6162·696e·6465··idm2571"·tabinde | |||
| 0003b5a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b5b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b5c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b5d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b5e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003 | 0003af10:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003 | 0003af20:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003 | 0003af30:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003 | 0003af40:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003 | 0003af50:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003 | 0003af60:·7073·6522·2069·643d·2269·646d·3235·3639··pse"·id="idm2569 | ||
| 0003 | 0003af70:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 0003 | 0003af80:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | ||
| 0003 | 0003af90:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | ||
| 0003 | 0003afa0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | ||
| Max diff block lines reached; 8970107/8994285 bytes (99.73%) of diff not shown. | |||
| Offset 120, 26 lines modified | Offset 120, 33 lines modified | ||
| 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.3.1 | 125 | ············_\x8c_\x8i_\x8s············6.3.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | incl | 136 | #·Remediation·is·applicable·only·in·certain·platforms |
| 137 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 138 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 133 | class·install_aide·{ | ||
| 134 | ··package·{·'aide': | ||
| 135 | ····ensure·=>·'installed', | ||
| 136 | ··} | ||
| 137 | 139 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | |
| 140 | else | ||
| 141 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 142 | fi | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 143 | -·name:·Gather·the·package·facts | 148 | -·name:·Gather·the·package·facts |
| 144 | ··package_facts: | 149 | ··package_facts: |
| Offset 168, 33 lines modified | Offset 175, 26 lines modified | ||
| 168 | ··-·PCI-DSSv4-11.5.2 | 175 | ··-·PCI-DSSv4-11.5.2 |
| 169 | ··-·enable_strategy | 176 | ··-·enable_strategy |
| 170 | ··-·low_complexity | 177 | ··-·low_complexity |
| 171 | ··-·low_disruption | 178 | ··-·low_disruption |
| 172 | ··-·medium_severity | 179 | ··-·medium_severity |
| 173 | ··-·no_reboot_needed | 180 | ··-·no_reboot_needed |
| 174 | ··-·package_aide_installed | 181 | ··-·package_aide_installed |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | [[packages]] | ||
| 177 | name·=·"aide" | ||
| 178 | version·=·"*" | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | include·install_aide | ||
| 184 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 185 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 186 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 187 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 188 | else | ||
| 189 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 190 | 188 | class·install_aide·{ | |
| 189 | ··package·{·'aide': | ||
| 190 | ····ensure·=>·'installed', | ||
| 191 | ··} | ||
| 192 | } | ||
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 192 | Run·the·following·command·to·generate·a·new·database: | 194 | Run·the·following·command·to·generate·a·new·database: |
| 193 | $·sudo·aideinit | 195 | $·sudo·aideinit |
| 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 195 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure·location | 197 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure·location |
| 196 | (such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can | 198 | (such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can |
| 197 | be·installed·as·follows: | 199 | be·installed·as·follows: |
| Offset 219, 14 lines modified | Offset 219, 41 lines modified | ||
| 219 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 219 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 220 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 220 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 221 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 221 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 222 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 222 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 223 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 223 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 224 | ············_\x8c_\x8i_\x8s············6.3.1 | 224 | ············_\x8c_\x8i_\x8s············6.3.1 |
| 225 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 225 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 227 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 228 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 229 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 230 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 231 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 232 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 233 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 234 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 235 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 236 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 237 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 238 | fi | ||
| 239 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 240 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 241 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 242 | fi | ||
| 243 | /usr/sbin/aideinit·-y·-f | ||
| 244 | else | ||
| 245 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 246 | fi | ||
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 247 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 248 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 249 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 250 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 251 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 231 | -·name:·Gather·the·package·facts | 252 | -·name:·Gather·the·package·facts |
| 232 | ··package_facts: | 253 | ··package_facts: |
| Offset 396, 41 lines modified | Offset 423, 14 lines modified | ||
| 396 | ··-·PCI-DSSv4-11.5.2 | 423 | ··-·PCI-DSSv4-11.5.2 |
| 397 | ··-·aide_build_database | 424 | ··-·aide_build_database |
| 398 | ··-·low_complexity | 425 | ··-·low_complexity |
| 399 | ··-·low_disruption | 426 | ··-·low_disruption |
| 400 | ··-·medium_severity | 427 | ··-·medium_severity |
| 401 | ··-·no_reboot_needed | 428 | ··-·no_reboot_needed |
| 402 | ··-·restrict_strategy | 429 | ··-·restrict_strategy |
| 403 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1156756/1163127 bytes (99.45%) of diff not shown. | |||
| Offset 15127, 184 lines modified | Offset 15127, 184 lines modified | ||
| 0003b160:·6574·3d22·2369·646d·3235·3639·2220·7461··et="#idm2569"·ta | 0003b160:·6574·3d22·2369·646d·3235·3639·2220·7461··et="#idm2569"·ta | ||
| 0003b170:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b170:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b180:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b180:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b190:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b190:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b1a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b1a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b1b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b1b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b1c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b1c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b1d0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b1e0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b1f0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b200:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b210:·643d·2269·646d·3235·3639·223e·3c74·6162··d="idm2569"><tab | |||
| 0003b220:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b230:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b240:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b250:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b260:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b270:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b280:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b290:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b2a0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b2b0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b2c0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b2d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b2e0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b2f0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b300:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b310:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b320:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b330:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b340:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b350:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b360:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b370:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003b380:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b390:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b3a0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b3b0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b3c0:·2d74·6172·6765·743d·2223·6964·6d32·3537··-target="#idm257 | |||
| 0003b3d0:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | |||
| 0003b3e0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b3f0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b400:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b410:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b420:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b430:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b440:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b450:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b460:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b470:·7073·6522·2069·643d·2269·646d·3235·3730··pse"·id="idm2570 | |||
| 0003b480:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b490:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b4a0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b4b0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b4c0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b4d0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b4e0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b4f0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b500:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b510:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b520:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b530:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b540:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b550:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b560:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b570:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b580:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003b590:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003b5a0:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003b5b0:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003b5c0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b5d0:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b5e0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b5f0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b600:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b610:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b620:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b630:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b640:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b650:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b660:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b670:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b680:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b690:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003b6a0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b6b0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b6c0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b6d0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b6e0:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003b6f0:·226c·696e·7578·2d62·6173·6522·2069·6e20··"linux-base"·in· | |||
| 0003b700:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003b710:·636b·6167·6573·270a·2020·7461·6773·3a0a··ckages'.··tags:. | |||
| 0003b720:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b730:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003b740:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b750:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b760:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b770:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b780:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b790:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b7a0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b7b0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b7c0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b7d0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b7e0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b7f0:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003b800:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b810:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b820:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b830:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b840:·6574·3d22·2369·646d·3235·3731·2220·7461··et="#idm2571"·ta | |||
| 0003b850:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b860:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b870:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b880:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b890:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b8a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b | 0003b1d0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0003b | 0003b1e0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 0003b | 0003b1f0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b | 0003b200:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b | 0003b210:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b | 0003b220:·6d32·3536·3922·3e3c·7072·653e·3c63·6f64··m2569"><pre><cod | ||
| 0003b | 0003b230:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | ||
| 0003b | 0003b240:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | ||
| 0003b | 0003b250:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | ||
| 0003b | 0003b260:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| Max diff block lines reached; 19769715/19793755 bytes (99.88%) of diff not shown. | |||
| Offset 15123, 184 lines modified | Offset 15123, 184 lines modified | ||
| 0003b120:·6765·743d·2223·6964·6d32·3536·3922·2074··get="#idm2569"·t | 0003b120:·6765·743d·2223·6964·6d32·3536·3922·2074··get="#idm2569"·t | ||
| 0003b130:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b130:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b140:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b140:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b150:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b150:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b160:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b160:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b170:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b170:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b180:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b180:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b190:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003b1a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b1b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b1c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b1d0:·6964·3d22·6964·6d32·3536·3922·3e3c·7461··id="idm2569"><ta | |||
| 0003b1e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b1f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b200:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b210:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b220:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b230:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b240:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b250:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b260:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b270:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b280:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b290:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b2a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b2b0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b2c0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b2d0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b2e0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b2f0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b300:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b310:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b320:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b330:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003b340:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b350:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b360:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b370:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b380:·612d·7461·7267·6574·3d22·2369·646d·3235··a-target="#idm25 | |||
| 0003b390:·3730·2220·7461·6269·6e64·6578·3d22·3022··70"·tabindex="0" | |||
| 0003b3a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b3b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b3c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b3d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b3e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b3f0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b400:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b410:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b420:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b430:·6170·7365·2220·6964·3d22·6964·6d32·3537··apse"·id="idm257 | |||
| 0003b440:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003b450:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b460:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b470:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b480:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b490:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b4a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b4b0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b4c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b4d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b4e0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b4f0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b500:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b510:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b520:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b530:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b540:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b550:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b560:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b570:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b580:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b590:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003b5a0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b5b0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b5c0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b5d0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b5e0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b5f0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b600:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b610:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b620:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b630:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b640:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b650:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003b660:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b670:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b680:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b690:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b6a0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b6b0:·2722·6c69·6e75·782d·6261·7365·2220·696e··'"linux-base"·in | |||
| 0003b6c0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003b6d0:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003b6e0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b6f0:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b700:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b710:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b720:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b730:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b740:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b750:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b760:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b770:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b780:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b790:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b7a0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b7b0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b7c0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b7d0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b7e0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b7f0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b800:·6765·743d·2223·6964·6d32·3537·3122·2074··get="#idm2571"·t | |||
| 0003b810:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b820:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b830:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b840:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b850:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b860:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b | 0003b190:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003b | 0003b1a0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | ||
| 0003b | 0003b1b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b | 0003b1c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b | 0003b1d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b | 0003b1e0:·646d·3235·3639·223e·3c70·7265·3e3c·636f··dm2569"><pre><co | ||
| 0003b | 0003b1f0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | ||
| 0003b | 0003b200:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | ||
| 0003b | 0003b210:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | ||
| 0003b | 0003b220:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| Max diff block lines reached; 19698279/19722319 bytes (99.88%) of diff not shown. | |||
| Offset 3, 2185 lines modified | Offset 3, 2185 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_var_log_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Verify·Permissions·on·/var/log·Directory</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_var_log_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_var_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Ensure·/var·Located·On·Separate·Partition</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-partition_for_var_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_audit_configuration_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_max_log_file_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Configure·auditd·Max·Log·File·Size</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_max_log_file_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_page_table_isolation_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_var_log_messages_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Verify·Permissions·on·/var/log/messages·File</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_var_log_messages_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-service_ip6tables_enabled_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_shared_media_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Configure·Sending·and·Accepting·Shared·Media·Redirects·by·Default</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-s | 37 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_shared_media_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_ia32_emulation_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-gid_passwd_group_same_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>All·GIDs·referenced·in·/etc/passwd·must·be·defined·in·/etc/group</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-gid_passwd_group_same_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-pa | 46 | ····<ocil:questionnaire·id="ocil:ssg-package_chrony_installed_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>The·Chrony·package·is·installed</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-pa | 49 | ········<ocil:test_action_ref>ocil:ssg-package_chrony_installed_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_lremovexattr_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-directory_permissions_var_log_audit_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>System·Audit·Logs·Must·Have·Mode·0750·or·Less·Permissive</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-directory_permissions_var_log_audit_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_kexec_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Disable·kexec·system·call</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_ | 61 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_kexec_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-dir_permissions_binary_dirs_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_sshd_pub_key_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Verify·Group·Ownership·on·SSH·Server·Public·*.pub·Key·Files</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_groupownership_sshd_pub_key_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_ | 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_unmap_kernel_at_el0_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Unmap·kernel·when·running·in·userspace·(aka·KAISER)</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_ | 73 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_unmap_kernel_at_el0_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-auditd_local_events_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Include·Local·Events·in·Audit·Logs</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-auditd_local_events_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-service_timesyncd_enabled_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Enable·systemd_timesyncd·Service</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-service_timesyncd_enabled_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_group_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchmodat_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchmodat</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchmodat_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-gnome_gdm_disable_xdmcp_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Disable·XDMCP·in·GDM</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-gnome_gdm_disable_xdmcp_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_watch_localtime_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_x11_forwarding_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Enable·Encrypted·X11·Forwarding</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_x11_forwarding_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_warning_banner_net_ocil:questionnaire:1"> | ||
| 107 | ····· | 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_rename_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·rename</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_rename_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-file_o | 112 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_gshadow_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Verify· | 113 | ······<ocil:title>Verify·Permissions·on·Backup·gshadow·File</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-file_o | 115 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_panic_on_oops_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Kernel·panic·oops</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| Max diff block lines reached; 664258/676444 bytes (98.20%) of diff not shown. | |||
| Offset 3, 3493 lines modified | Offset 3, 3493 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-file_permission | 10 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_files_permissions_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Ensure·System·Log·Files·Have·Correct·Permissions</ocil:title> | ||
| 11 | ······<ocil:title>Verify·Permissions·on·Backup·passwd·File</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_passwd_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-grub2_mce_argument_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Force·kernel·panic·on·uncorrected·MCEs</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-grub2_mce_argument_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_tmp_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Ensure·/tmp·Located·On·Separate·Partition</ocil:title> | ||
| 24 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_files_permissions_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_sshd_pub_key_ocil:questionnaire:1"> | ||
| 29 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchmod_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchmod</ocil:title> | ||
| 30 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchmod_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-sudoers_no_command_negation_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 23 | ······<ocil:title>Don't·define·allowed·commands·in·sudoers·by·means·of·exclusion</ocil:title> |
| 36 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-sudoers_no_command_negation_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_retpoline_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 29 | ······<ocil:title>Avoid·speculative·indirect·branches·in·kernel</ocil:title> |
| 42 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_retpoline_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 35 | ······<ocil:title>Enable·different·security·models</ocil:title> |
| 48 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_strictmodes_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>En | 41 | ······<ocil:title>Enable·Use·of·Strict·Mode·Checking</ocil:title> |
| 54 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_strictmodes_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-sshd_allow_only_protocol2_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>A | 47 | ······<ocil:title>Allow·Only·SSH·Protocol·2</ocil:title> |
| 60 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-sshd_allow_only_protocol2_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_pubkey_auth_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 53 | ······<ocil:title>Enable·Public·Key·Authentication</ocil:title> |
| 66 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_pubkey_auth_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_remote_loghost_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 59 | ······<ocil:title>Ensure·Logs·Sent·To·Remote·Host</ocil:title> |
| 72 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_remote_loghost_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-package_openssh-server_installed_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 65 | ······<ocil:title>Install·the·OpenSSH·Server·Package</ocil:title> |
| 78 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-package_openssh-server_installed_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-harden_ssh_client_crypto_policy_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 71 | ······<ocil:title>Harden·SSH·client·Crypto·Policy</ocil:title> |
| 84 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-harden_ssh_client_crypto_policy_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-s | 76 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_relayhost_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 77 | ······<ocil:title>Configure·System·to·Forward·All·Mail·through·a·specific·host</ocil:title> |
| 90 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-s | 79 | ········<ocil:test_action_ref>ocil:ssg-postfix_client_configure_relayhost_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-r | 82 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_force_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 83 | ······<ocil:title>Require·modules·to·be·validly·signed</ocil:title> |
| 96 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-r | 85 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_force_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_last_change_is_in_past_ocil:questionnaire:1"> | ||
| 101 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_writable_hooks_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Disable·mutable·hooks</ocil:title> | ||
| 102 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_writable_hooks_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_lsetxattr_ocil:questionnaire:1"> | ||
| 107 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-package_openldap-clients_removed_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure·LDAP·client·is·not·installed</ocil:title> | ||
| 108 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-a | 97 | ········<ocil:test_action_ref>ocil:ssg-package_openldap-clients_removed_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-s | 100 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_loglevel_verbose_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 101 | ······<ocil:title>Set·SSH·Daemon·LogLevel·to·VERBOSE</ocil:title> |
| 114 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-s | 103 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_loglevel_verbose_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_dev_shm_noexec_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 107 | ······<ocil:title>Add·noexec·Option·to·/dev/shm</ocil:title> |
| 120 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-mount_option_dev_shm_noexec_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_nosuid_removable_partitions_ocil:questionnaire:1"> |
| 125 | ······<ocil:title> | 113 | ······<ocil:title>Add·nosuid·Option·to·Removable·Media·Partitions</ocil:title> |
| Max diff block lines reached; 693486/705408 bytes (98.31%) of diff not shown. | |||
| Offset 3, 9024 lines modified | Offset 3, 9176 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_creat_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Record·Unsuccessful·Access·Attempts·to·Files·-·creat</ocil:title> | ||
| 10 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_shadow_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Verify·Permissions·on·shadow·File</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_shadow_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_shadow_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Verify·Permissions·on·Backup·shadow·File</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_shadow_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_home_directories_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>All·Interactive·User·Home·Directories·Must·Be·Group-Owned·By·The·Primary·Group</ocil:title> | ||
| 24 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_unsuccessful_file_modification_creat_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-package_iptables-persistent_installed_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 17 | ······<ocil:title>Install·iptables-persistent·Package</ocil:title> |
| 30 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-package_iptables-persistent_installed_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_removexattr_ocil:questionnaire:1"> | ||
| 35 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_passwd_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Verify·Group·Who·Owns·passwd·File</ocil:title> | ||
| 36 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-ntpd_run_as_ntp_user_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 29 | ······<ocil:title>Configure·ntpd·To·Run·As·ntp·User</ocil:title> |
| 42 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-ntpd_run_as_ntp_user_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_sshd_private_key_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 35 | ······<ocil:title>Verify·Group·Ownership·on·SSH·Server·Private·*_key·Key·Files</ocil:title> |
| 48 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_groupownership_sshd_private_key_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_d_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 41 | ······<ocil:title>Verify·Permissions·on·cron.d</ocil:title> |
| 54 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_cron_d_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-s | 46 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_minlen_login_defs_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 47 | ······<ocil:title>Set·Password·Minimum·Length·in·login.defs</ocil:title> |
| 60 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-s | 49 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_minlen_login_defs_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_yama_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>En | 53 | ······<ocil:title>Enable·Yama·support</ocil:title> |
| 66 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_yama_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-package_talk_removed_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 59 | ······<ocil:title>Uninstall·talk·Package</ocil:title> |
| 72 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-package_talk_removed_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_rp_filter_ocil:questionnaire:1"> | ||
| 77 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_renameat_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·renameat</ocil:title> | ||
| 78 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_renameat_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_warning_banner_net_ocil:questionnaire:1"> | ||
| 83 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_audit_auditd_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Verify·Permissions·on·/etc/audit/auditd.conf</ocil:title> | ||
| 84 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_audit_auditd_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_kernel_module_loading_finit_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 77 | ······<ocil:title>Ensure·auditd·Collects·Information·on·Kernel·Module·Loading·and·Unloading·-·finit_module</ocil:title> |
| 90 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_kernel_module_loading_finit_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-service_autofs_disabled_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 83 | ······<ocil:title>Disable·the·Automounter</ocil:title> |
| 96 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-service_autofs_disabled_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-journald_storage_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Ensure· | 89 | ······<ocil:title>Ensure·journald·is·configured·to·write·log·files·to·persistent·disk</ocil:title> |
| 102 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-journald_storage_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_var_tmp_noexec_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 95 | ······<ocil:title>Add·noexec·Option·to·/var/tmp</ocil:title> |
| 108 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-mount_option_var_tmp_noexec_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_monthly_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 101 | ······<ocil:title>Verify·Owner·on·cron.monthly</ocil:title> |
| 114 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_monthly_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_credentials_ocil:questionnaire:1"> | ||
| 119 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_files_permissions_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Ensure·System·Log·Files·Have·Correct·Permissions</ocil:title> | ||
| 120 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_files_permissions_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| Max diff block lines reached; 1354086/1366545 bytes (99.09%) of diff not shown. | |||
| Offset 3, 12972 lines modified | Offset 3, 13062 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_chcon_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Record·Any·Attempts·to·Run·chcon</ocil:title> | ||
| 11 | ······<ocil:title>Ensure·journald·is·configured·to·compress·large·log·files</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-journald_compress_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-clean_components_post_updating_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Ensure·apt_get·Removes·Previous·Package·Versions</ocil:title> | ||
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_chcon_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_system_journal_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 17 | ······<ocil:title>Verify·Owner·on·the·system·journal</ocil:title> |
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-file_ | 19 | ········<ocil:test_action_ref>ocil:ssg-file_owner_system_journal_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-package_dhcp_removed_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 23 | ······<ocil:title>Uninstall·DHCP·Server·Package</ocil:title> |
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-package_dhcp_removed_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-disallow_bypass_password_sudo_ocil:questionnaire:1"> | ||
| 35 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_rp_filter_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Enable·Kernel·Parameter·to·Use·Reverse·Path·Filtering·on·all·IPv4·Interfaces</ocil:title> | ||
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_rp_filter_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-auditd_audispd_configure_remote_server_ocil:questionnaire:1"> | ||
| 41 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_rp_filter_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Enable·Kernel·Parameter·to·Use·Reverse·Path·Filtering·on·all·IPv4·Interfaces·by·Default</ocil:title> | ||
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_rp_filter_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdriverauthmode_ocil:questionnaire:1"> | ||
| 47 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_space_left_percentage_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Configure·auditd·space_left·on·Low·Disk·Space</ocil:title> | ||
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_space_left_percentage_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_var_tmp_nosuid_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 47 | ······<ocil:title>Add·nosuid·Option·to·/var/tmp</ocil:title> |
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-mount_option_var_tmp_nosuid_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_disk_full_action_ocil:questionnaire:1"> | ||
| 59 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_kptr_restrict_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Restrict·Exposed·Kernel·Pointer·Addresses·Access</ocil:title> | ||
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_kptr_restrict_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-package_squid_removed_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 59 | ······<ocil:title>Uninstall·squid·Package</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-package_squid_removed_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_mail_alias_postmaster_ocil:questionnaire:1"> | ||
| 71 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_privileged_commands_init_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·init</ocil:title> | ||
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-audit_privileged_commands_init_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_audit_auditd_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 71 | ······<ocil:title>Verify·Permissions·on·/etc/audit/auditd.conf</ocil:title> |
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_audit_auditd_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_var_tmp_noexec_ocil:questionnaire:1"> | ||
| 83 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-package_audit-audispd-plugins_installed_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Ensure·the·default·plugins·for·the·audit·dispatcher·are·Installed</ocil:title> | ||
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-package_audit-audispd-plugins_installed_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-bios_enable_execution_restrictions_ocil:questionnaire:1"> | ||
| 89 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_watch_localtime_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Record·Attempts·to·Alter·the·localtime·File</ocil:title> | ||
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_watch_localtime_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_var_log_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 89 | ······<ocil:title>Verify·Group·Who·Owns·/var/log·Directory</ocil:title> |
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_var_log_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-sudo_add_noexec_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 95 | ······<ocil:title>Ensure·Privileged·Escalated·Commands·Cannot·Execute·Other·Commands·-·sudo·NOEXEC</ocil:title> |
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-sudo_add_noexec_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-set_iptables_default_rule_forward_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 101 | ······<ocil:title>Set·Default·iptables·Policy·for·Forwarded·Packets</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-set_iptables_default_rule_forward_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-no_files_unowned_by_user_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>A | 107 | ······<ocil:title>Ensure·All·Files·Are·Owned·by·a·User</ocil:title> |
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-no_files_unowned_by_user_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_ocil:questionnaire:1"> | ||
| 119 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-grub2_nosmap_argument_absent_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Ensure·SMAP·is·not·disabled·during·boot</ocil:title> | ||
| 120 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| Max diff block lines reached; 1421796/1434072 bytes (99.14%) of diff not shown. | |||
| Offset 3, 4087 lines modified | Offset 3, 4087 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-file_at_allow_exists_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Ensure·that·/etc/at.allow·exists</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-file_at_allow_exists_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_faillock_unlock_time_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Set·Lockout·Time·for·Failed·Password·Attempts</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-accounts_passwords_pam_faillock_unlock_time_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_dev_shm_nodev_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 11 | ······<ocil:title>Add·nodev·Option·to·/dev/shm</ocil:title> |
| 24 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-mount_option_dev_shm_nodev_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_hourly_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 17 | ······<ocil:title>Verify·Permissions·on·cron.hourly</ocil:title> |
| 30 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_cron_hourly_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-package_nftables_installed_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 23 | ······<ocil:title>Install·nftables·Package</ocil:title> |
| 36 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-package_nftables_installed_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-set_password_hashing_algorithm_logindefs_ocil:questionnaire:1"> | ||
| 41 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_kernel_module_loading_delete_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Ensure·auditd·Collects·Information·on·Kernel·Module·Unloading·-·delete_module</ocil:title> | ||
| 42 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_kernel_module_loading_delete_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_suid_privilege_function_ocil:questionnaire:1"> | ||
| 47 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_gshadow_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Verify·Permissions·on·gshadow·File</ocil:title> | ||
| 48 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_openat_ocil:questionnaire:1"> | ||
| 53 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-dconf_gnome_screensaver_lock_enabled_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Enable·GNOME3·Screensaver·Lock·After·Idle·Period</ocil:title> | ||
| 54 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-dconf_gnome_screensaver_lock_enabled_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-service_timesyncd_enabled_ocil:questionnaire:1"> | ||
| 59 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_creat_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Record·Unsuccessful·Access·Attempts·to·Files·-·creat</ocil:title> | ||
| 60 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-s | 49 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_unsuccessful_file_modification_creat_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_daily_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Verify· | 53 | ······<ocil:title>Verify·Owner·on·cron.daily</ocil:title> |
| 66 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-file_ | 55 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_daily_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_audit_configuration_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 59 | ······<ocil:title>Audit·Configuration·Files·Must·Be·Owned·By·Group·root</ocil:title> |
| 72 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-file_groupownership_audit_configuration_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_admin_space_left_action_ocil:questionnaire:1"> | ||
| 77 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_set_max_life_existing_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Set·Existing·Passwords·Maximum·Age</ocil:title> | ||
| 78 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-a | 67 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_set_max_life_existing_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_weekly_ocil:questionnaire:1"> | ||
| 83 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_icmp_echo_ignore_broadcasts_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Enable·Kernel·Parameter·to·Ignore·ICMP·Broadcast·Echo·Requests·on·IPv4·Interfaces</ocil:title> | ||
| 84 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_icmp_echo_ignore_broadcasts_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_set_min_life_existing_ocil:questionnaire:1"> | ||
| 89 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_shadow_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Verify·Permissions·on·Backup·shadow·File</ocil:title> | ||
| 90 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_accept_redirects_ocil:questionnaire:1"> | ||
| 95 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-disable_host_auth_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Disable·Host-Based·Authentication</ocil:title> | ||
| 96 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-disable_host_auth_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-package_samba_removed_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 89 | ······<ocil:title>Uninstall·Samba·Package</ocil:title> |
| 102 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-package_samba_removed_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_networkconfig_modification_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 95 | ······<ocil:title>Record·Events·that·Modify·the·System's·Network·Environment</ocil:title> |
| 108 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_networkconfig_modification_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-no_empty_passwords_etc_shadow_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>En | 101 | ······<ocil:title>Ensure·There·Are·No·Accounts·With·Blank·or·Null·Passwords</ocil:title> |
| 114 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-no_empty_passwords_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-accounts_umask_etc_bashrc_ocil:questionnaire:1"> | ||
| 119 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-aide_periodic_checking_systemd_timer_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Configure·Systemd·Timer·Execution·of·AIDE</ocil:title> | ||
| 120 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| Max diff block lines reached; 886743/898868 bytes (98.65%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····197 | 2 | -rw-r--r--···0········0········0·····1972·2025-03-01·08:08:00.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0··12 | 3 | -rw-r--r--···0········0········0··1228412·2025-03-01·08:08:00.000000·data.tar.xz |
| Offset 15996, 146 lines modified | Offset 15996, 146 lines modified | ||
| 0003e7b0:·6765·743d·2223·6964·6d31·3935·3722·2074··get="#idm1957"·t | 0003e7b0:·6765·743d·2223·6964·6d31·3935·3722·2074··get="#idm1957"·t | ||
| 0003e7c0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003e7c0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003e7d0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003e7d0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003e7e0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003e7e0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003e7f0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003e7f0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003e800:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003e800:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003e810:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003e810:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003e820:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003e830:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003e840:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003e850:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003e860:·3d22·6964·6d31·3935·3722·3e3c·7461·626c··="idm1957"><tabl | |||
| 0003e870:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003e880:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003e890:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003e8a0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003e8b0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003e8c0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003e8d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003e8e0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003e8f0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003e900:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003e910:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003e920:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003e930:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003e940:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 0003e950:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003e960:·636f·6465·3e0a·666f·7220·6620·696e·202f··code>.for·f·in·/ | |||
| 0003e970:·6574·632f·7375·646f·6572·7320·2f65·7463··etc/sudoers·/etc | |||
| 0003e980:·2f73·7564·6f65·7273·2e64·2f2a·203b·2064··/sudoers.d/*·;·d | |||
| 0003e990:·6f0a·2020·6966·205b·2021·202d·6520·2224··o.··if·[·!·-e·"$ | |||
| 0003e9a0:·6622·205d·203b·2074·6865·6e0a·2020·2020··f"·]·;·then.···· | |||
| 0003e9b0:·636f·6e74·696e·7565·0a20·2066·690a·2020··continue.··fi.·· | |||
| 0003e9c0:·6d61·7463·6869·6e67·5f6c·6973·743d·2428··matching_list=$( | |||
| 0003e9d0:·6772·6570·202d·5020·275e·283f·2123·292e··grep·-P·'^(?!#). | |||
| 0003e9e0:·2a5b·5c73·5d2b·5c21·6175·7468·656e·7469··*[\s]+\!authenti | |||
| 0003e9f0:·6361·7465·2e2a·2427·2024·6620·7c20·756e··cate.*$'·$f·|·un | |||
| 0003ea00:·6971·2029·0a20·2069·6620·2120·7465·7374··iq·).··if·!·test | |||
| 0003ea10:·202d·7a20·2224·6d61·7463·6869·6e67·5f6c···-z·"$matching_l | |||
| 0003ea20:·6973·7422·3b20·7468·656e·0a20·2020·2077··ist";·then.····w | |||
| 0003ea30:·6869·6c65·2049·4653·3d20·7265·6164·202d··hile·IFS=·read·- | |||
| 0003ea40:·7220·656e·7472·793b·2064·6f0a·2020·2020··r·entry;·do.···· | |||
| 0003ea50:·2020·2320·636f·6d6d·656e·7420·6f75·7420····#·comment·out· | |||
| 0003ea60:·2221·6175·7468·656e·7469·6361·7465·2220··"!authenticate"· | |||
| 0003ea70:·6d61·7463·6865·7320·746f·2070·7265·7365··matches·to·prese | |||
| 0003ea80:·7276·6520·7573·6572·2064·6174·610a·2020··rve·user·data.·· | |||
| 0003ea90:·2020·2020·7365·6420·2d69·2022·732f·5e24······sed·-i·"s/^$ | |||
| 0003eaa0:·7b65·6e74·7279·7d24·2f23·2026·616d·703b··{entry}$/#·& | |||
| 0003eab0:·2f67·2220·2466·0a20·2020·2064·6f6e·6520··/g"·$f.····done· | |||
| 0003eac0:·266c·743b·266c·743b·266c·743b·2022·246d··<<<·"$m | |||
| 0003ead0:·6174·6368·696e·675f·6c69·7374·220a·0a20··atching_list"..· | |||
| 0003eae0:·2020·202f·7573·722f·7362·696e·2f76·6973·····/usr/sbin/vis | |||
| 0003eaf0:·7564·6f20·2d63·6620·2466·2026·616d·703b··udo·-cf·$f·& | |||
| 0003eb00:·2667·743b·202f·6465·762f·6e75·6c6c·207c··>·/dev/null·| | |||
| 0003eb10:·7c20·6563·686f·2022·4661·696c·2074·6f20··|·echo·"Fail·to· | |||
| 0003eb20:·7661·6c69·6461·7465·2024·6620·7769·7468··validate·$f·with | |||
| 0003eb30:·2076·6973·7564·6f22·0a20·2066·690a·646f···visudo".··fi.do | |||
| 0003eb40:·6e65·0a3c·2f63·6f64·653e·3c2f·7072·653e··ne.</code></pre> | |||
| 0003eb50:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003eb60:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003eb70:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003eb80:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003eb90:·6765·743d·2223·6964·6d31·3935·3822·2074··get="#idm1958"·t | |||
| 0003eba0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ebb0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ebc0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ebd0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ebe0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003ebf0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003e | 0003ec00:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003e | 0003ec10:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003e | 0003ec20:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003e | 0003ec30:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003e | 0003ec40:·2069·643d·2269·646d·3139·3538·223e·3c74···id="idm1958"><t | ||
| 0003e | 0003ec50:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003e | 0003ec60:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003e | 0003ec70:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003e | 0003ec80:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003e8b0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003e8c0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003e8d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003e8e0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003e8f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003e900:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003e910:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003e920:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003e930:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003e940:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003e950:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003e960:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003e970:·4669·6e64·202f·6574·632f·7375·646f·6572··Find·/etc/sudoer | |||
| 0003e980:·732e·642f·2066·696c·6573·0a20·2061·6e73··s.d/·files.··ans | |||
| 0003e990:·6962·6c65·2e62·7569·6c74·696e·2e66·696e··ible.builtin.fin | |||
| 0003e9a0:·643a·0a20·2020·2070·6174·6873·3a0a·2020··d:.····paths:.·· | |||
| 0003e9b0:·2020·2d20·2f65·7463·2f73·7564·6f65·7273····-·/etc/sudoers | |||
| 0003e9c0:·2e64·2f0a·2020·7265·6769·7374·6572·3a20··.d/.··register:· | |||
| 0003e9d0:·7375·646f·6572·730a·2020·7461·6773·3a0a··sudoers.··tags:. | |||
| 0003e9e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003e9f0:·434d·2d36·2861·290a·2020·2d20·4e49·5354··CM-6(a).··-·NIST | |||
| 0003ea00:·2d38·3030·2d35·332d·4941·2d31·310a·2020··-800-53-IA-11.·· | |||
| 0003ea10:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003ea20:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003ea30:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003ea40:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003ea50:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003ea60:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | |||
| 0003ea70:·6779·0a20·202d·2073·7564·6f5f·7265·6d6f··gy.··-·sudo_remo | |||
| 0003ea80:·7665·5f6e·6f5f·6175·7468·656e·7469·6361··ve_no_authentica | |||
| 0003ea90:·7465·0a0a·2d20·6e61·6d65·3a20·5265·6d6f··te..-·name:·Remo | |||
| 0003eaa0:·7665·206c·696e·6573·2063·6f6e·7461·696e··ve·lines·contain | |||
| 0003eab0:·696e·6720·2161·7574·6865·6e74·6963·6174··ing·!authenticat | |||
| 0003eac0:·6520·6672·6f6d·2073·7564·6f65·7273·2066··e·from·sudoers·f | |||
| 0003ead0:·696c·6573·0a20·2061·6e73·6962·6c65·2e62··iles.··ansible.b | |||
| 0003eae0:·7569·6c74·696e·2e72·6570·6c61·6365·3a0a··uiltin.replace:. | |||
| 0003eaf0:·2020·2020·7265·6765·7870·3a20·285e·283f······regexp:·(^(? | |||
| 0003eb00:·2123·292e·2a5b·5c73·5d2b·5c21·6175·7468··!#).*[\s]+\!auth | |||
| 0003eb10:·656e·7469·6361·7465·2e2a·2429·0a20·2020··enticate.*$).··· | |||
| 0003eb20:·2072·6570·6c61·6365·3a20·2723·205c·6726···replace:·'#·\g& | |||
| 0003eb30:·6c74·3b31·2667·743b·270a·2020·2020·7061··lt;1>'.····pa | |||
| 0003eb40:·7468·3a20·277b·7b20·6974·656d·2e70·6174··th:·'{{·item.pat | |||
| 0003eb50:·6820·7d7d·270a·2020·2020·7661·6c69·6461··h·}}'.····valida | |||
| 0003eb60:·7465·3a20·2f75·7372·2f73·6269·6e2f·7669··te:·/usr/sbin/vi | |||
| 0003eb70:·7375·646f·202d·6366·2025·730a·2020·7769··sudo·-cf·%s.··wi | |||
| 0003eb80:·7468·5f69·7465·6d73·3a0a·2020·2d20·7061··th_items:.··-·pa | |||
| 0003eb90:·7468·3a20·2f65·7463·2f73·7564·6f65·7273··th:·/etc/sudoers | |||
| 0003eba0:·0a20·202d·2027·7b7b·2073·7564·6f65·7273··.··-·'{{·sudoers | |||
| 0003ebb0:·2e66·696c·6573·207d·7d27·0a20·2074·6167··.files·}}'.··tag | |||
| Max diff block lines reached; 1101724/1120520 bytes (98.32%) of diff not shown. | |||
| Offset 227, 14 lines modified | Offset 227, 35 lines modified | ||
| 227 | ···························1.7,·SR·1.8,·SR·1.9 | 227 | ···························1.7,·SR·1.8,·SR·1.9 |
| 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 233 | ···························SRG-OS-000373-GPOS-00158 | 233 | ···························SRG-OS-000373-GPOS-00158 |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 239 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 240 | ··if·[·!·-e·"$f"·]·;·then | ||
| 241 | ····continue | ||
| 242 | ··fi | ||
| 243 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 244 | ··if·!·test·-z·"$matching_list";·then | ||
| 245 | ····while·IFS=·read·-r·entry;·do | ||
| 246 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 247 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 248 | ····done·<<<·"$matching_list" | ||
| 249 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 250 | visudo" | ||
| 251 | ··fi | ||
| 252 | done | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 253 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 254 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 255 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 256 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 257 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Find·/etc/sudoers.d/·files | 258 | -·name:·Find·/etc/sudoers.d/·files |
| 240 | ··ansible.builtin.find: | 259 | ··ansible.builtin.find: |
| Offset 265, 35 lines modified | Offset 286, 14 lines modified | ||
| 265 | ··-·NIST-800-53-IA-11 | 286 | ··-·NIST-800-53-IA-11 |
| 266 | ··-·low_complexity | 287 | ··-·low_complexity |
| 267 | ··-·low_disruption | 288 | ··-·low_disruption |
| 268 | ··-·medium_severity | 289 | ··-·medium_severity |
| 269 | ··-·no_reboot_needed | 290 | ··-·no_reboot_needed |
| 270 | ··-·restrict_strategy | 291 | ··-·restrict_strategy |
| 271 | ··-·sudo_remove_no_authenticate | 292 | ··-·sudo_remove_no_authenticate |
| 272 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 273 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 274 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 275 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 276 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 277 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 278 | ··if·[·!·-e·"$f"·]·;·then | ||
| 279 | ····continue | ||
| 280 | ··fi | ||
| 281 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 282 | ··if·!·test·-z·"$matching_list";·then | ||
| 283 | ····while·IFS=·read·-r·entry;·do | ||
| 284 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 285 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 286 | ····done·<<<·"$matching_list" | ||
| 287 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 288 | visudo" | ||
| 289 | ··fi | ||
| 290 | done | ||
| 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 292 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 293 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 294 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 295 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 296 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 297 | ············Without·re-authentication,·users·may·access·resources·or·perform | 299 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 314, 14 lines modified | Offset 314, 35 lines modified | ||
| 314 | ···························1.7,·SR·1.8,·SR·1.9 | 314 | ···························1.7,·SR·1.8,·SR·1.9 |
| 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 320 | ···························SRG-OS-000373-GPOS-00158 | 320 | ···························SRG-OS-000373-GPOS-00158 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 327 | ··if·[·!·-e·"$f"·]·;·then | ||
| 328 | ····continue | ||
| 329 | ··fi | ||
| 330 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 331 | ··if·!·test·-z·"$matching_list";·then | ||
| 332 | ····while·IFS=·read·-r·entry;·do | ||
| 333 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 334 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 335 | ····done·<<<·"$matching_list" | ||
| 336 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 337 | visudo" | ||
| 338 | ··fi | ||
| 339 | done | ||
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 340 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 341 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 342 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 343 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 344 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 326 | -·name:·Find·/etc/sudoers.d/·files | 345 | -·name:·Find·/etc/sudoers.d/·files |
| 327 | ··ansible.builtin.find: | 346 | ··ansible.builtin.find: |
| Offset 352, 35 lines modified | Offset 373, 14 lines modified | ||
| 352 | ··-·NIST-800-53-IA-11 | 373 | ··-·NIST-800-53-IA-11 |
| 353 | ··-·low_complexity | 374 | ··-·low_complexity |
| 354 | ··-·low_disruption | 375 | ··-·low_disruption |
| 355 | ··-·medium_severity | 376 | ··-·medium_severity |
| 356 | ··-·no_reboot_needed | 377 | ··-·no_reboot_needed |
| 357 | ··-·restrict_strategy | 378 | ··-·restrict_strategy |
| 358 | ··-·sudo_remove_nopasswd | 379 | ··-·sudo_remove_nopasswd |
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 360 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 361 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 362 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 363 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 364 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 365 | ··if·[·!·-e·"$f"·]·;·then | ||
| 366 | ····continue | ||
| 367 | ··fi | ||
| 368 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 369 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 130126/135574 bytes (95.98%) of diff not shown. | |||
| Offset 16016, 146 lines modified | Offset 16016, 146 lines modified | ||
| 0003e8f0:·2d74·6172·6765·743d·2223·6964·6d31·3935··-target="#idm195 | 0003e8f0:·2d74·6172·6765·743d·2223·6964·6d31·3935··-target="#idm195 | ||
| 0003e900:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | 0003e900:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | ||
| 0003e910:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003e910:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003e920:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003e920:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003e930:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003e930:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003e940:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003e940:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003e950:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003e950:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003e960:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003e970:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003e980:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003e990:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003e9a0:·2220·6964·3d22·6964·6d31·3935·3722·3e3c··"·id="idm1957">< | |||
| 0003e9b0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003e9c0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003e9d0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003e9e0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003e9f0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003ea00:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003ea10:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ea20:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003ea30:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ea40:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003ea50:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003ea60:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ea70:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003ea80:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | |||
| 0003ea90:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003eaa0:·7265·3e3c·636f·6465·3e0a·666f·7220·6620··re><code>.for·f· | |||
| 0003eab0:·696e·202f·6574·632f·7375·646f·6572·7320··in·/etc/sudoers· | |||
| 0003eac0:·2f65·7463·2f73·7564·6f65·7273·2e64·2f2a··/etc/sudoers.d/* | |||
| 0003ead0:·203b·2064·6f0a·2020·6966·205b·2021·202d···;·do.··if·[·!·- | |||
| 0003eae0:·6520·2224·6622·205d·203b·2074·6865·6e0a··e·"$f"·]·;·then. | |||
| 0003eaf0:·2020·2020·636f·6e74·696e·7565·0a20·2066······continue.··f | |||
| 0003eb00:·690a·2020·6d61·7463·6869·6e67·5f6c·6973··i.··matching_lis | |||
| 0003eb10:·743d·2428·6772·6570·202d·5020·275e·283f··t=$(grep·-P·'^(? | |||
| 0003eb20:·2123·292e·2a5b·5c73·5d2b·5c21·6175·7468··!#).*[\s]+\!auth | |||
| 0003eb30:·656e·7469·6361·7465·2e2a·2427·2024·6620··enticate.*$'·$f· | |||
| 0003eb40:·7c20·756e·6971·2029·0a20·2069·6620·2120··|·uniq·).··if·!· | |||
| 0003eb50:·7465·7374·202d·7a20·2224·6d61·7463·6869··test·-z·"$matchi | |||
| 0003eb60:·6e67·5f6c·6973·7422·3b20·7468·656e·0a20··ng_list";·then.· | |||
| 0003eb70:·2020·2077·6869·6c65·2049·4653·3d20·7265·····while·IFS=·re | |||
| 0003eb80:·6164·202d·7220·656e·7472·793b·2064·6f0a··ad·-r·entry;·do. | |||
| 0003eb90:·2020·2020·2020·2320·636f·6d6d·656e·7420········#·comment· | |||
| 0003eba0:·6f75·7420·2221·6175·7468·656e·7469·6361··out·"!authentica | |||
| 0003ebb0:·7465·2220·6d61·7463·6865·7320·746f·2070··te"·matches·to·p | |||
| 0003ebc0:·7265·7365·7276·6520·7573·6572·2064·6174··reserve·user·dat | |||
| 0003ebd0:·610a·2020·2020·2020·7365·6420·2d69·2022··a.······sed·-i·" | |||
| 0003ebe0:·732f·5e24·7b65·6e74·7279·7d24·2f23·2026··s/^${entry}$/#·& | |||
| 0003ebf0:·616d·703b·2f67·2220·2466·0a20·2020·2064··amp;/g"·$f.····d | |||
| 0003ec00:·6f6e·6520·266c·743b·266c·743b·266c·743b··one·<<< | |||
| 0003ec10:·2022·246d·6174·6368·696e·675f·6c69·7374···"$matching_list | |||
| 0003ec20:·220a·0a20·2020·202f·7573·722f·7362·696e··"..····/usr/sbin | |||
| 0003ec30:·2f76·6973·7564·6f20·2d63·6620·2466·2026··/visudo·-cf·$f·& | |||
| 0003ec40:·616d·703b·2667·743b·202f·6465·762f·6e75··amp;>·/dev/nu | |||
| 0003ec50:·6c6c·207c·7c20·6563·686f·2022·4661·696c··ll·||·echo·"Fail | |||
| 0003ec60:·2074·6f20·7661·6c69·6461·7465·2024·6620···to·validate·$f· | |||
| 0003ec70:·7769·7468·2076·6973·7564·6f22·0a20·2066··with·visudo".··f | |||
| 0003ec80:·690a·646f·6e65·0a3c·2f63·6f64·653e·3c2f··i.done.</code></ | |||
| 0003ec90:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003eca0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ecb0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003ecc0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003ecd0:·2d74·6172·6765·743d·2223·6964·6d31·3935··-target="#idm195 | |||
| 0003ece0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003ecf0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003ed00:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003ed10:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003ed20:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003ed30:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003e | 0003ed40:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003e | 0003ed50:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003e | 0003ed60:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003e | 0003ed70:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003e | 0003ed80:·7073·6522·2069·643d·2269·646d·3139·3538··pse"·id="idm1958 | ||
| 0003e | 0003ed90:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003e9c0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003e9d0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003e9e0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003e9f0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003ea00:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003ea10:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ea20:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003ea30:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ea40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003ea50:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003ea60:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003ea70:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003ea80:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | |||
| 0003ea90:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003eaa0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003eab0:·6d65·3a20·4669·6e64·202f·6574·632f·7375··me:·Find·/etc/su | |||
| 0003eac0:·646f·6572·732e·642f·2066·696c·6573·0a20··doers.d/·files.· | |||
| 0003ead0:·2061·6e73·6962·6c65·2e62·7569·6c74·696e···ansible.builtin | |||
| 0003eae0:·2e66·696e·643a·0a20·2020·2070·6174·6873··.find:.····paths | |||
| 0003eaf0:·3a0a·2020·2020·2d20·2f65·7463·2f73·7564··:.····-·/etc/sud | |||
| 0003eb00:·6f65·7273·2e64·2f0a·2020·7265·6769·7374··oers.d/.··regist | |||
| 0003eb10:·6572·3a20·7375·646f·6572·730a·2020·7461··er:·sudoers.··ta | |||
| 0003eb20:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | |||
| 0003eb30:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003eb40:·4e49·5354·2d38·3030·2d35·332d·4941·2d31··NIST-800-53-IA-1 | |||
| 0003eb50:·310a·2020·2d20·6c6f·775f·636f·6d70·6c65··1.··-·low_comple | |||
| 0003eb60:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003eb70:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003eb80:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003eb90:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003eba0:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | |||
| 0003ebb0:·7261·7465·6779·0a20·202d·2073·7564·6f5f··rategy.··-·sudo_ | |||
| 0003ebc0:·7265·6d6f·7665·5f6e·6f5f·6175·7468·656e··remove_no_authen | |||
| 0003ebd0:·7469·6361·7465·0a0a·2d20·6e61·6d65·3a20··ticate..-·name:· | |||
| 0003ebe0:·5265·6d6f·7665·206c·696e·6573·2063·6f6e··Remove·lines·con | |||
| 0003ebf0:·7461·696e·696e·6720·2161·7574·6865·6e74··taining·!authent | |||
| 0003ec00:·6963·6174·6520·6672·6f6d·2073·7564·6f65··icate·from·sudoe | |||
| 0003ec10:·7273·2066·696c·6573·0a20·2061·6e73·6962··rs·files.··ansib | |||
| 0003ec20:·6c65·2e62·7569·6c74·696e·2e72·6570·6c61··le.builtin.repla | |||
| 0003ec30:·6365·3a0a·2020·2020·7265·6765·7870·3a20··ce:.····regexp:· | |||
| 0003ec40:·285e·283f·2123·292e·2a5b·5c73·5d2b·5c21··(^(?!#).*[\s]+\! | |||
| 0003ec50:·6175·7468·656e·7469·6361·7465·2e2a·2429··authenticate.*$) | |||
| 0003ec60:·0a20·2020·2072·6570·6c61·6365·3a20·2723··.····replace:·'# | |||
| 0003ec70:·205c·6726·6c74·3b31·2667·743b·270a·2020···\g<1>'.·· | |||
| 0003ec80:·2020·7061·7468·3a20·277b·7b20·6974·656d····path:·'{{·item | |||
| 0003ec90:·2e70·6174·6820·7d7d·270a·2020·2020·7661··.path·}}'.····va | |||
| 0003eca0:·6c69·6461·7465·3a20·2f75·7372·2f73·6269··lidate:·/usr/sbi | |||
| 0003ecb0:·6e2f·7669·7375·646f·202d·6366·2025·730a··n/visudo·-cf·%s. | |||
| 0003ecc0:·2020·7769·7468·5f69·7465·6d73·3a0a·2020····with_items:.·· | |||
| 0003ecd0:·2d20·7061·7468·3a20·2f65·7463·2f73·7564··-·path:·/etc/sud | |||
| 0003ece0:·6f65·7273·0a20·202d·2027·7b7b·2073·7564··oers.··-·'{{·sud | |||
| 0003ecf0:·6f65·7273·2e66·696c·6573·207d·7d27·0a20··oers.files·}}'.· | |||
| Max diff block lines reached; 1243176/1261972 bytes (98.51%) of diff not shown. | |||
| Offset 231, 14 lines modified | Offset 231, 35 lines modified | ||
| 231 | ···························1.7,·SR·1.8,·SR·1.9 | 231 | ···························1.7,·SR·1.8,·SR·1.9 |
| 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 237 | ···························SRG-OS-000373-GPOS-00158 | 237 | ···························SRG-OS-000373-GPOS-00158 |
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 243 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 244 | ··if·[·!·-e·"$f"·]·;·then | ||
| 245 | ····continue | ||
| 246 | ··fi | ||
| 247 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 248 | ··if·!·test·-z·"$matching_list";·then | ||
| 249 | ····while·IFS=·read·-r·entry;·do | ||
| 250 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 251 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 252 | ····done·<<<·"$matching_list" | ||
| 253 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 254 | visudo" | ||
| 255 | ··fi | ||
| 256 | done | ||
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 258 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 259 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 260 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 261 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 243 | -·name:·Find·/etc/sudoers.d/·files | 262 | -·name:·Find·/etc/sudoers.d/·files |
| 244 | ··ansible.builtin.find: | 263 | ··ansible.builtin.find: |
| Offset 269, 35 lines modified | Offset 290, 14 lines modified | ||
| 269 | ··-·NIST-800-53-IA-11 | 290 | ··-·NIST-800-53-IA-11 |
| 270 | ··-·low_complexity | 291 | ··-·low_complexity |
| 271 | ··-·low_disruption | 292 | ··-·low_disruption |
| 272 | ··-·medium_severity | 293 | ··-·medium_severity |
| 273 | ··-·no_reboot_needed | 294 | ··-·no_reboot_needed |
| 274 | ··-·restrict_strategy | 295 | ··-·restrict_strategy |
| 275 | ··-·sudo_remove_no_authenticate | 296 | ··-·sudo_remove_no_authenticate |
| 276 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 277 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 278 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 279 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 280 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 281 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 282 | ··if·[·!·-e·"$f"·]·;·then | ||
| 283 | ····continue | ||
| 284 | ··fi | ||
| 285 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 286 | ··if·!·test·-z·"$matching_list";·then | ||
| 287 | ····while·IFS=·read·-r·entry;·do | ||
| 288 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 289 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 290 | ····done·<<<·"$matching_list" | ||
| 291 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 292 | visudo" | ||
| 293 | ··fi | ||
| 294 | done | ||
| 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 298 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 299 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 300 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 301 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 302 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 301 | ············Without·re-authentication,·users·may·access·resources·or·perform | 303 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 318, 14 lines modified | Offset 318, 35 lines modified | ||
| 318 | ···························1.7,·SR·1.8,·SR·1.9 | 318 | ···························1.7,·SR·1.8,·SR·1.9 |
| 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 324 | ···························SRG-OS-000373-GPOS-00158 | 324 | ···························SRG-OS-000373-GPOS-00158 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 330 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 331 | ··if·[·!·-e·"$f"·]·;·then | ||
| 332 | ····continue | ||
| 333 | ··fi | ||
| 334 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 335 | ··if·!·test·-z·"$matching_list";·then | ||
| 336 | ····while·IFS=·read·-r·entry;·do | ||
| 337 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 338 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 339 | ····done·<<<·"$matching_list" | ||
| 340 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 341 | visudo" | ||
| 342 | ··fi | ||
| 343 | done | ||
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 330 | -·name:·Find·/etc/sudoers.d/·files | 349 | -·name:·Find·/etc/sudoers.d/·files |
| 331 | ··ansible.builtin.find: | 350 | ··ansible.builtin.find: |
| Offset 356, 35 lines modified | Offset 377, 14 lines modified | ||
| 356 | ··-·NIST-800-53-IA-11 | 377 | ··-·NIST-800-53-IA-11 |
| 357 | ··-·low_complexity | 378 | ··-·low_complexity |
| 358 | ··-·low_disruption | 379 | ··-·low_disruption |
| 359 | ··-·medium_severity | 380 | ··-·medium_severity |
| 360 | ··-·no_reboot_needed | 381 | ··-·no_reboot_needed |
| 361 | ··-·restrict_strategy | 382 | ··-·restrict_strategy |
| 362 | ··-·sudo_remove_nopasswd | 383 | ··-·sudo_remove_nopasswd |
| 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 364 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 365 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 366 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 367 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 368 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 369 | ··if·[·!·-e·"$f"·]·;·then | ||
| 370 | ····continue | ||
| 371 | ··fi | ||
| 372 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 373 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 146364/151812 bytes (96.41%) of diff not shown. | |||
| Offset 14776, 146 lines modified | Offset 14776, 146 lines modified | ||
| 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00039b80:·3935·3722·2074·6162·696e·6465·783d·2230··957"·tabindex="0 | 00039b80:·3935·3722·2074·6162·696e·6465·783d·2230··957"·tabindex="0 | ||
| 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00039be0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 00039bf0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00039c00:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039c10:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039c20:·7365·2220·6964·3d22·6964·6d31·3935·3722··se"·id="idm1957" | |||
| 00039c30:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039c40:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039c50:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00039c60:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00039c70:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00039c80:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00039c90:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039ca0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00039cb0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039cc0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00039cd0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039ce0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039cf0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039d00:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 00039d10:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00039d20:·3c70·7265·3e3c·636f·6465·3e0a·666f·7220··<pre><code>.for· | |||
| 00039d30:·6620·696e·202f·6574·632f·7375·646f·6572··f·in·/etc/sudoer | |||
| 00039d40:·7320·2f65·7463·2f73·7564·6f65·7273·2e64··s·/etc/sudoers.d | |||
| 00039d50:·2f2a·203b·2064·6f0a·2020·6966·205b·2021··/*·;·do.··if·[·! | |||
| 00039d60:·202d·6520·2224·6622·205d·203b·2074·6865···-e·"$f"·]·;·the | |||
| 00039d70:·6e0a·2020·2020·636f·6e74·696e·7565·0a20··n.····continue.· | |||
| 00039d80:·2066·690a·2020·6d61·7463·6869·6e67·5f6c···fi.··matching_l | |||
| 00039d90:·6973·743d·2428·6772·6570·202d·5020·275e··ist=$(grep·-P·'^ | |||
| 00039da0:·283f·2123·292e·2a5b·5c73·5d2b·5c21·6175··(?!#).*[\s]+\!au | |||
| 00039db0:·7468·656e·7469·6361·7465·2e2a·2427·2024··thenticate.*$'·$ | |||
| 00039dc0:·6620·7c20·756e·6971·2029·0a20·2069·6620··f·|·uniq·).··if· | |||
| 00039dd0:·2120·7465·7374·202d·7a20·2224·6d61·7463··!·test·-z·"$matc | |||
| 00039de0:·6869·6e67·5f6c·6973·7422·3b20·7468·656e··hing_list";·then | |||
| 00039df0:·0a20·2020·2077·6869·6c65·2049·4653·3d20··.····while·IFS=· | |||
| 00039e00:·7265·6164·202d·7220·656e·7472·793b·2064··read·-r·entry;·d | |||
| 00039e10:·6f0a·2020·2020·2020·2320·636f·6d6d·656e··o.······#·commen | |||
| 00039e20:·7420·6f75·7420·2221·6175·7468·656e·7469··t·out·"!authenti | |||
| 00039e30:·6361·7465·2220·6d61·7463·6865·7320·746f··cate"·matches·to | |||
| 00039e40:·2070·7265·7365·7276·6520·7573·6572·2064···preserve·user·d | |||
| 00039e50:·6174·610a·2020·2020·2020·7365·6420·2d69··ata.······sed·-i | |||
| 00039e60:·2022·732f·5e24·7b65·6e74·7279·7d24·2f23···"s/^${entry}$/# | |||
| 00039e70:·2026·616d·703b·2f67·2220·2466·0a20·2020···&/g"·$f.··· | |||
| 00039e80:·2064·6f6e·6520·266c·743b·266c·743b·266c···done·<<&l | |||
| 00039e90:·743b·2022·246d·6174·6368·696e·675f·6c69··t;·"$matching_li | |||
| 00039ea0:·7374·220a·0a20·2020·202f·7573·722f·7362··st"..····/usr/sb | |||
| 00039eb0:·696e·2f76·6973·7564·6f20·2d63·6620·2466··in/visudo·-cf·$f | |||
| 00039ec0:·2026·616d·703b·2667·743b·202f·6465·762f···&>·/dev/ | |||
| 00039ed0:·6e75·6c6c·207c·7c20·6563·686f·2022·4661··null·||·echo·"Fa | |||
| 00039ee0:·696c·2074·6f20·7661·6c69·6461·7465·2024··il·to·validate·$ | |||
| 00039ef0:·6620·7769·7468·2076·6973·7564·6f22·0a20··f·with·visudo".· | |||
| 00039f00:·2066·690a·646f·6e65·0a3c·2f63·6f64·653e···fi.done.</code> | |||
| 00039f10:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00039f20:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00039f30:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00039f40:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00039f50:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 00039f60:·3935·3822·2074·6162·696e·6465·783d·2230··958"·tabindex="0 | |||
| 00039f70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00039f80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00039f90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00039fa0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00039fb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00039 | 00039fc0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 00039 | 00039fd0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 00039 | 00039fe0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 00039 | 00039ff0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 00039c20:·6c61·7073·6522·2069·643d·2269·646d·3139··lapse"·id="idm19 | |||
| 00039c30:·3537·223e·3c74·6162·6c65·2063·6c61·7373··57"><table·class | |||
| 00039c40:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00039c50:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00039c60:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00039c70:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00039c80:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00039c90:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00039ca0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00039cb0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00039cc0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039cd0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00039ce0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00039cf0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00039d00:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 00039d10:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 00039d20:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 00039d30:·6e61·6d65·3a20·4669·6e64·202f·6574·632f··name:·Find·/etc/ | |||
| 00039d40:·7375·646f·6572·732e·642f·2066·696c·6573··sudoers.d/·files | |||
| 00039d50:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | |||
| 00039d60:·696e·2e66·696e·643a·0a20·2020·2070·6174··in.find:.····pat | |||
| 00039d70:·6873·3a0a·2020·2020·2d20·2f65·7463·2f73··hs:.····-·/etc/s | |||
| 00039d80:·7564·6f65·7273·2e64·2f0a·2020·7265·6769··udoers.d/.··regi | |||
| 00039d90:·7374·6572·3a20·7375·646f·6572·730a·2020··ster:·sudoers.·· | |||
| 00039da0:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 00039db0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 00039dc0:·2d20·4e49·5354·2d38·3030·2d35·332d·4941··-·NIST-800-53-IA | |||
| 00039dd0:·2d31·310a·2020·2d20·6c6f·775f·636f·6d70··-11.··-·low_comp | |||
| 00039de0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 00039df0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 00039e00:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 00039e10:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 00039e20:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | |||
| 00039e30:·7374·7261·7465·6779·0a20·202d·2073·7564··strategy.··-·sud | |||
| 00039e40:·6f5f·7265·6d6f·7665·5f6e·6f5f·6175·7468··o_remove_no_auth | |||
| 00039e50:·656e·7469·6361·7465·0a0a·2d20·6e61·6d65··enticate..-·name | |||
| 00039e60:·3a20·5265·6d6f·7665·206c·696e·6573·2063··:·Remove·lines·c | |||
| 00039e70:·6f6e·7461·696e·696e·6720·2161·7574·6865··ontaining·!authe | |||
| 00039e80:·6e74·6963·6174·6520·6672·6f6d·2073·7564··nticate·from·sud | |||
| 00039e90:·6f65·7273·2066·696c·6573·0a20·2061·6e73··oers·files.··ans | |||
| 00039ea0:·6962·6c65·2e62·7569·6c74·696e·2e72·6570··ible.builtin.rep | |||
| 00039eb0:·6c61·6365·3a0a·2020·2020·7265·6765·7870··lace:.····regexp | |||
| 00039ec0:·3a20·285e·283f·2123·292e·2a5b·5c73·5d2b··:·(^(?!#).*[\s]+ | |||
| 00039ed0:·5c21·6175·7468·656e·7469·6361·7465·2e2a··\!authenticate.* | |||
| 00039ee0:·2429·0a20·2020·2072·6570·6c61·6365·3a20··$).····replace:· | |||
| 00039ef0:·2723·205c·6726·6c74·3b31·2667·743b·270a··'#·\g<1>'. | |||
| 00039f00:·2020·2020·7061·7468·3a20·277b·7b20·6974······path:·'{{·it | |||
| 00039f10:·656d·2e70·6174·6820·7d7d·270a·2020·2020··em.path·}}'.···· | |||
| 00039f20:·7661·6c69·6461·7465·3a20·2f75·7372·2f73··validate:·/usr/s | |||
| 00039f30:·6269·6e2f·7669·7375·646f·202d·6366·2025··bin/visudo·-cf·% | |||
| 00039f40:·730a·2020·7769·7468·5f69·7465·6d73·3a0a··s.··with_items:. | |||
| 00039f50:·2020·2d20·7061·7468·3a20·2f65·7463·2f73····-·path:·/etc/s | |||
| 00039f60:·7564·6f65·7273·0a20·202d·2027·7b7b·2073··udoers.··-·'{{·s | |||
| 00039f70:·7564·6f65·7273·2e66·696c·6573·207d·7d27··udoers.files·}}' | |||
| Max diff block lines reached; 361044/379840 bytes (95.05%) of diff not shown. | |||
| Offset 91, 14 lines modified | Offset 91, 35 lines modified | ||
| 91 | ···························1.7,·SR·1.8,·SR·1.9 | 91 | ···························1.7,·SR·1.8,·SR·1.9 |
| 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 97 | ···························SRG-OS-000373-GPOS-00158 | 97 | ···························SRG-OS-000373-GPOS-00158 |
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 103 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 104 | ··if·[·!·-e·"$f"·]·;·then | ||
| 105 | ····continue | ||
| 106 | ··fi | ||
| 107 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 108 | ··if·!·test·-z·"$matching_list";·then | ||
| 109 | ····while·IFS=·read·-r·entry;·do | ||
| 110 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 111 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 112 | ····done·<<<·"$matching_list" | ||
| 113 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 114 | visudo" | ||
| 115 | ··fi | ||
| 116 | done | ||
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 103 | -·name:·Find·/etc/sudoers.d/·files | 122 | -·name:·Find·/etc/sudoers.d/·files |
| 104 | ··ansible.builtin.find: | 123 | ··ansible.builtin.find: |
| Offset 129, 35 lines modified | Offset 150, 14 lines modified | ||
| 129 | ··-·NIST-800-53-IA-11 | 150 | ··-·NIST-800-53-IA-11 |
| 130 | ··-·low_complexity | 151 | ··-·low_complexity |
| 131 | ··-·low_disruption | 152 | ··-·low_disruption |
| 132 | ··-·medium_severity | 153 | ··-·medium_severity |
| 133 | ··-·no_reboot_needed | 154 | ··-·no_reboot_needed |
| 134 | ··-·restrict_strategy | 155 | ··-·restrict_strategy |
| 135 | ··-·sudo_remove_no_authenticate | 156 | ··-·sudo_remove_no_authenticate |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 141 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 142 | ··if·[·!·-e·"$f"·]·;·then | ||
| 143 | ····continue | ||
| 144 | ··fi | ||
| 145 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 146 | ··if·!·test·-z·"$matching_list";·then | ||
| 147 | ····while·IFS=·read·-r·entry;·do | ||
| 148 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 149 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 150 | ····done·<<<·"$matching_list" | ||
| 151 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 152 | visudo" | ||
| 153 | ··fi | ||
| 154 | done | ||
| 155 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 156 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 158 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 157 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 159 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 158 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 160 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 159 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 161 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 160 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 162 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 161 | ············Without·re-authentication,·users·may·access·resources·or·perform | 163 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 178, 14 lines modified | Offset 178, 35 lines modified | ||
| 178 | ···························1.7,·SR·1.8,·SR·1.9 | 178 | ···························1.7,·SR·1.8,·SR·1.9 |
| 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 184 | ···························SRG-OS-000373-GPOS-00158 | 184 | ···························SRG-OS-000373-GPOS-00158 |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 190 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 191 | ··if·[·!·-e·"$f"·]·;·then | ||
| 192 | ····continue | ||
| 193 | ··fi | ||
| 194 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 195 | ··if·!·test·-z·"$matching_list";·then | ||
| 196 | ····while·IFS=·read·-r·entry;·do | ||
| 197 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 198 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 199 | ····done·<<<·"$matching_list" | ||
| 200 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 201 | visudo" | ||
| 202 | ··fi | ||
| 203 | done | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 190 | -·name:·Find·/etc/sudoers.d/·files | 209 | -·name:·Find·/etc/sudoers.d/·files |
| 191 | ··ansible.builtin.find: | 210 | ··ansible.builtin.find: |
| Offset 216, 35 lines modified | Offset 237, 14 lines modified | ||
| 216 | ··-·NIST-800-53-IA-11 | 237 | ··-·NIST-800-53-IA-11 |
| 217 | ··-·low_complexity | 238 | ··-·low_complexity |
| 218 | ··-·low_disruption | 239 | ··-·low_disruption |
| 219 | ··-·medium_severity | 240 | ··-·medium_severity |
| 220 | ··-·no_reboot_needed | 241 | ··-·no_reboot_needed |
| 221 | ··-·restrict_strategy | 242 | ··-·restrict_strategy |
| 222 | ··-·sudo_remove_nopasswd | 243 | ··-·sudo_remove_nopasswd |
| 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 228 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 229 | ··if·[·!·-e·"$f"·]·;·then | ||
| 230 | ····continue | ||
| 231 | ··fi | ||
| 232 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 233 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 46299/51744 bytes (89.48%) of diff not shown. | |||
| Offset 16006, 146 lines modified | Offset 16006, 146 lines modified | ||
| 0003e850:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003e850:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003e860:·2223·6964·6d31·3935·3722·2074·6162·696e··"#idm1957"·tabin | 0003e860:·2223·6964·6d31·3935·3722·2074·6162·696e··"#idm1957"·tabin | ||
| 0003e870:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003e870:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003e880:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003e880:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003e890:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003e890:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003e8a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003e8a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003e8b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003e8b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003e8c0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003e8d0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003e8e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003e8f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003e900:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003e910:·6d31·3935·3722·3e3c·7461·626c·6520·636c··m1957"><table·cl | |||
| 0003e920:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003e930:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003e940:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003e950:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003e960:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003e970:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003e980:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003e990:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003e9a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003e9b0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003e9c0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003e9d0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003e9e0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003e9f0:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003ea00:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003ea10:·3e0a·666f·7220·6620·696e·202f·6574·632f··>.for·f·in·/etc/ | |||
| 0003ea20:·7375·646f·6572·7320·2f65·7463·2f73·7564··sudoers·/etc/sud | |||
| 0003ea30:·6f65·7273·2e64·2f2a·203b·2064·6f0a·2020··oers.d/*·;·do.·· | |||
| 0003ea40:·6966·205b·2021·202d·6520·2224·6622·205d··if·[·!·-e·"$f"·] | |||
| 0003ea50:·203b·2074·6865·6e0a·2020·2020·636f·6e74···;·then.····cont | |||
| 0003ea60:·696e·7565·0a20·2066·690a·2020·6d61·7463··inue.··fi.··matc | |||
| 0003ea70:·6869·6e67·5f6c·6973·743d·2428·6772·6570··hing_list=$(grep | |||
| 0003ea80:·202d·5020·275e·283f·2123·292e·2a5b·5c73···-P·'^(?!#).*[\s | |||
| 0003ea90:·5d2b·5c21·6175·7468·656e·7469·6361·7465··]+\!authenticate | |||
| 0003eaa0:·2e2a·2427·2024·6620·7c20·756e·6971·2029··.*$'·$f·|·uniq·) | |||
| 0003eab0:·0a20·2069·6620·2120·7465·7374·202d·7a20··.··if·!·test·-z· | |||
| 0003eac0:·2224·6d61·7463·6869·6e67·5f6c·6973·7422··"$matching_list" | |||
| 0003ead0:·3b20·7468·656e·0a20·2020·2077·6869·6c65··;·then.····while | |||
| 0003eae0:·2049·4653·3d20·7265·6164·202d·7220·656e···IFS=·read·-r·en | |||
| 0003eaf0:·7472·793b·2064·6f0a·2020·2020·2020·2320··try;·do.······#· | |||
| 0003eb00:·636f·6d6d·656e·7420·6f75·7420·2221·6175··comment·out·"!au | |||
| 0003eb10:·7468·656e·7469·6361·7465·2220·6d61·7463··thenticate"·matc | |||
| 0003eb20:·6865·7320·746f·2070·7265·7365·7276·6520··hes·to·preserve· | |||
| 0003eb30:·7573·6572·2064·6174·610a·2020·2020·2020··user·data.······ | |||
| 0003eb40:·7365·6420·2d69·2022·732f·5e24·7b65·6e74··sed·-i·"s/^${ent | |||
| 0003eb50:·7279·7d24·2f23·2026·616d·703b·2f67·2220··ry}$/#·&/g"· | |||
| 0003eb60:·2466·0a20·2020·2064·6f6e·6520·266c·743b··$f.····done·< | |||
| 0003eb70:·266c·743b·266c·743b·2022·246d·6174·6368··<<·"$match | |||
| 0003eb80:·696e·675f·6c69·7374·220a·0a20·2020·202f··ing_list"..····/ | |||
| 0003eb90:·7573·722f·7362·696e·2f76·6973·7564·6f20··usr/sbin/visudo· | |||
| 0003eba0:·2d63·6620·2466·2026·616d·703b·2667·743b··-cf·$f·&> | |||
| 0003ebb0:·202f·6465·762f·6e75·6c6c·207c·7c20·6563···/dev/null·||·ec | |||
| 0003ebc0:·686f·2022·4661·696c·2074·6f20·7661·6c69··ho·"Fail·to·vali | |||
| 0003ebd0:·6461·7465·2024·6620·7769·7468·2076·6973··date·$f·with·vis | |||
| 0003ebe0:·7564·6f22·0a20·2066·690a·646f·6e65·0a3c··udo".··fi.done.< | |||
| 0003ebf0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003ec00:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003ec10:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003ec20:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003ec30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003ec40:·2223·6964·6d31·3935·3822·2074·6162·696e··"#idm1958"·tabin | |||
| 0003ec50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003ec60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003ec70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003ec80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003ec90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003e | 0003eca0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003e | 0003ecb0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003e | 0003ecc0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003e | 0003ecd0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003e900:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003e910:·2269·646d·3139·3537·223e·3c74·6162·6c65··"idm1957"><table | |||
| 0003e920:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003e930:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003e940:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003e950:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003e960:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003e970:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003e980:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003e990:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003e9a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003e9b0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003e9c0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003e9d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003e9e0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003e9f0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003ea00:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003ea10:·6f64·653e·2d20·6e61·6d65·3a20·4669·6e64··ode>-·name:·Find | |||
| 0003ea20:·202f·6574·632f·7375·646f·6572·732e·642f···/etc/sudoers.d/ | |||
| 0003ea30:·2066·696c·6573·0a20·2061·6e73·6962·6c65···files.··ansible | |||
| 0003ea40:·2e62·7569·6c74·696e·2e66·696e·643a·0a20··.builtin.find:.· | |||
| 0003ea50:·2020·2070·6174·6873·3a0a·2020·2020·2d20·····paths:.····-· | |||
| 0003ea60:·2f65·7463·2f73·7564·6f65·7273·2e64·2f0a··/etc/sudoers.d/. | |||
| 0003ea70:·2020·7265·6769·7374·6572·3a20·7375·646f····register:·sudo | |||
| 0003ea80:·6572·730a·2020·7461·6773·3a0a·2020·2d20··ers.··tags:.··-· | |||
| 0003ea90:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003eaa0:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | |||
| 0003eab0:·2d35·332d·4941·2d31·310a·2020·2d20·6c6f··-53-IA-11.··-·lo | |||
| 0003eac0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003ead0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003eae0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003eaf0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003eb00:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | |||
| 0003eb10:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | |||
| 0003eb20:·202d·2073·7564·6f5f·7265·6d6f·7665·5f6e···-·sudo_remove_n | |||
| 0003eb30:·6f5f·6175·7468·656e·7469·6361·7465·0a0a··o_authenticate.. | |||
| 0003eb40:·2d20·6e61·6d65·3a20·5265·6d6f·7665·206c··-·name:·Remove·l | |||
| 0003eb50:·696e·6573·2063·6f6e·7461·696e·696e·6720··ines·containing· | |||
| 0003eb60:·2161·7574·6865·6e74·6963·6174·6520·6672··!authenticate·fr | |||
| 0003eb70:·6f6d·2073·7564·6f65·7273·2066·696c·6573··om·sudoers·files | |||
| 0003eb80:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | |||
| 0003eb90:·696e·2e72·6570·6c61·6365·3a0a·2020·2020··in.replace:.···· | |||
| 0003eba0:·7265·6765·7870·3a20·285e·283f·2123·292e··regexp:·(^(?!#). | |||
| 0003ebb0:·2a5b·5c73·5d2b·5c21·6175·7468·656e·7469··*[\s]+\!authenti | |||
| 0003ebc0:·6361·7465·2e2a·2429·0a20·2020·2072·6570··cate.*$).····rep | |||
| 0003ebd0:·6c61·6365·3a20·2723·205c·6726·6c74·3b31··lace:·'#·\g<1 | |||
| 0003ebe0:·2667·743b·270a·2020·2020·7061·7468·3a20··>'.····path:· | |||
| 0003ebf0:·277b·7b20·6974·656d·2e70·6174·6820·7d7d··'{{·item.path·}} | |||
| 0003ec00:·270a·2020·2020·7661·6c69·6461·7465·3a20··'.····validate:· | |||
| 0003ec10:·2f75·7372·2f73·6269·6e2f·7669·7375·646f··/usr/sbin/visudo | |||
| 0003ec20:·202d·6366·2025·730a·2020·7769·7468·5f69···-cf·%s.··with_i | |||
| 0003ec30:·7465·6d73·3a0a·2020·2d20·7061·7468·3a20··tems:.··-·path:· | |||
| 0003ec40:·2f65·7463·2f73·7564·6f65·7273·0a20·202d··/etc/sudoers.··- | |||
| 0003ec50:·2027·7b7b·2073·7564·6f65·7273·2e66·696c···'{{·sudoers.fil | |||
| Max diff block lines reached; 1199264/1218060 bytes (98.46%) of diff not shown. | |||
| Offset 229, 14 lines modified | Offset 229, 35 lines modified | ||
| 229 | ···························1.7,·SR·1.8,·SR·1.9 | 229 | ···························1.7,·SR·1.8,·SR·1.9 |
| 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 235 | ···························SRG-OS-000373-GPOS-00158 | 235 | ···························SRG-OS-000373-GPOS-00158 |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 241 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 242 | ··if·[·!·-e·"$f"·]·;·then | ||
| 243 | ····continue | ||
| 244 | ··fi | ||
| 245 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 246 | ··if·!·test·-z·"$matching_list";·then | ||
| 247 | ····while·IFS=·read·-r·entry;·do | ||
| 248 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 249 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 250 | ····done·<<<·"$matching_list" | ||
| 251 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 252 | visudo" | ||
| 253 | ··fi | ||
| 254 | done | ||
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 255 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 256 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 257 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 258 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 259 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 241 | -·name:·Find·/etc/sudoers.d/·files | 260 | -·name:·Find·/etc/sudoers.d/·files |
| 242 | ··ansible.builtin.find: | 261 | ··ansible.builtin.find: |
| Offset 267, 35 lines modified | Offset 288, 14 lines modified | ||
| 267 | ··-·NIST-800-53-IA-11 | 288 | ··-·NIST-800-53-IA-11 |
| 268 | ··-·low_complexity | 289 | ··-·low_complexity |
| 269 | ··-·low_disruption | 290 | ··-·low_disruption |
| 270 | ··-·medium_severity | 291 | ··-·medium_severity |
| 271 | ··-·no_reboot_needed | 292 | ··-·no_reboot_needed |
| 272 | ··-·restrict_strategy | 293 | ··-·restrict_strategy |
| 273 | ··-·sudo_remove_no_authenticate | 294 | ··-·sudo_remove_no_authenticate |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 279 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 280 | ··if·[·!·-e·"$f"·]·;·then | ||
| 281 | ····continue | ||
| 282 | ··fi | ||
| 283 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 284 | ··if·!·test·-z·"$matching_list";·then | ||
| 285 | ····while·IFS=·read·-r·entry;·do | ||
| 286 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 287 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 288 | ····done·<<<·"$matching_list" | ||
| 289 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 290 | visudo" | ||
| 291 | ··fi | ||
| 292 | done | ||
| 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 299 | ············Without·re-authentication,·users·may·access·resources·or·perform | 301 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 316, 14 lines modified | Offset 316, 35 lines modified | ||
| 316 | ···························1.7,·SR·1.8,·SR·1.9 | 316 | ···························1.7,·SR·1.8,·SR·1.9 |
| 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 322 | ···························SRG-OS-000373-GPOS-00158 | 322 | ···························SRG-OS-000373-GPOS-00158 |
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 328 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 329 | ··if·[·!·-e·"$f"·]·;·then | ||
| 330 | ····continue | ||
| 331 | ··fi | ||
| 332 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 333 | ··if·!·test·-z·"$matching_list";·then | ||
| 334 | ····while·IFS=·read·-r·entry;·do | ||
| 335 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 336 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 337 | ····done·<<<·"$matching_list" | ||
| 338 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 339 | visudo" | ||
| 340 | ··fi | ||
| 341 | done | ||
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 328 | -·name:·Find·/etc/sudoers.d/·files | 347 | -·name:·Find·/etc/sudoers.d/·files |
| 329 | ··ansible.builtin.find: | 348 | ··ansible.builtin.find: |
| Offset 354, 35 lines modified | Offset 375, 14 lines modified | ||
| 354 | ··-·NIST-800-53-IA-11 | 375 | ··-·NIST-800-53-IA-11 |
| 355 | ··-·low_complexity | 376 | ··-·low_complexity |
| 356 | ··-·low_disruption | 377 | ··-·low_disruption |
| 357 | ··-·medium_severity | 378 | ··-·medium_severity |
| 358 | ··-·no_reboot_needed | 379 | ··-·no_reboot_needed |
| 359 | ··-·restrict_strategy | 380 | ··-·restrict_strategy |
| 360 | ··-·sudo_remove_nopasswd | 381 | ··-·sudo_remove_nopasswd |
| 361 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 362 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 363 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 364 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 365 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 366 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 367 | ··if·[·!·-e·"$f"·]·;·then | ||
| 368 | ····continue | ||
| 369 | ··fi | ||
| 370 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 371 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 141644/147092 bytes (96.30%) of diff not shown. | |||
| Offset 16213, 777 lines modified | Offset 16213, 777 lines modified | ||
| 0003f540:·6172·6765·743d·2223·6964·6d35·3037·3022··arget="#idm5070" | 0003f540:·6172·6765·743d·2223·6964·6d35·3037·3022··arget="#idm5070" | ||
| 0003f550:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003f550:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003f560:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003f560:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003f570:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003f570:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003f580:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003f580:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003f590:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003f590:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | Diff chunk too large, falling back to line-by-line diff (763 lines added, 763 lines removed) | |
| 0003f5a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003f5a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003f5b0:·6f6e·20 | 0003f5b0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | ||
| 0003f5c0:· | 0003f5c0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003f5d0:·6 | 0003f5d0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003f5e0:·6 | 0003f5e0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003f5f0:·6 | 0003f5f0:·6964·3d22·6964·6d35·3037·3022·3e3c·7072··id="idm5070"><pr | ||
| 0003f600:· | 0003f600:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | ||
| 0003f610:·6 | 0003f610:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | ||
| 0003f620:·6 | 0003f620:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | ||
| 0003f630:· | 0003f630:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | ||
| 0003f640:·2 | 0003f640:·2064·706b·672d·7175·6572·7920·2d2d·7368···dpkg-query·--sh | ||
| 0003f650:· | 0003f650:·6f77·202d·2d73·686f·7766·6f72·6d61·743d··ow·--showformat= | ||
| 0003f660:· | 0003f660:·2724·7b64·623a·5374·6174·7573·2d53·7461··'${db:Status-Sta | ||
| 0003f670:·74 | 0003f670:·7475·737d·0a27·2027·6c69·6e75·782d·6261··tus}.'·'linux-ba | ||
| 0003f680:·7 | 0003f680:·7365·2720·3226·6774·3b2f·6465·762f·6e75··se'·2>/dev/nu | ||
| 0003f690:·6 | 0003f690:·6c6c·207c·2067·7265·7020·2d71·205e·696e··ll·|·grep·-q·^in | ||
| 0003f6a0:· | 0003f6a0:·7374·616c·6c65·6420·2661·6d70·3b26·616d··stalled·&&am | ||
| 0003f6b0:· | 0003f6b0:·703b·2064·706b·672d·7175·6572·7920·2d2d··p;·dpkg-query·-- | ||
| 0003f6c0:·7 | 0003f6c0:·7368·6f77·202d·2d73·686f·7766·6f72·6d61··show·--showforma | ||
| 0003f6d0:· | 0003f6d0:·743d·2724·7b64·623a·5374·6174·7573·2d53··t='${db:Status-S | ||
| 0003f6e0:· | 0003f6e0:·7461·7475·737d·5c6e·2720·2772·7379·736c··tatus}\n'·'rsysl | ||
| 0003f6f0:·6 | 0003f6f0:·6f67·2720·3226·6774·3b2f·6465·762f·6e75··og'·2>/dev/nu | ||
| 0003f700:·6 | 0003f700:·6c6c·207c·2067·7265·7020·2d71·2027·5e69··ll·|·grep·-q·'^i | ||
| 0003f710:· | 0003f710:·6e73·7461·6c6c·6564·273b·2074·6865·6e0a··nstalled';·then. | ||
| 0003f720:· | 0003f720:·0a23·204c·6973·7420·6f66·206c·6f67·2066··.#·List·of·log·f | ||
| 0003f730:· | 0003f730:·696c·6520·7061·7468·7320·746f·2062·6520··ile·paths·to·be· | ||
| 0003f740:·6 | 0003f740:·696e·7370·6563·7465·6420·666f·7220·636f··inspected·for·co | ||
| 0003f750:· | 0003f750:·7272·6563·7420·7065·726d·6973·7369·6f6e··rrect·permission | ||
| 0003f760:· | 0003f760:·730a·2320·2a20·5072·696d·6172·696c·7920··s.#·*·Primarily· | ||
| 0003f770:· | 0003f770:·696e·7370·6563·7420·6c6f·6720·6669·6c65··inspect·log·file | ||
| 0003f780:· | 0003f780:·2070·6174·6873·206c·6973·7465·6420·696e···paths·listed·in | ||
| 0003f790:· | 0003f790:·202f·6574·632f·7273·7973·6c6f·672e·636f···/etc/rsyslog.co | ||
| 0003f7a0:· | 0003f7a0:·6e66·0a52·5359·534c·4f47·5f45·5443·5f43··nf.RSYSLOG_ETC_C | ||
| 0003f7b0:·4 | 0003f7b0:·4f4e·4649·473d·222f·6574·632f·7273·7973··ONFIG="/etc/rsys | ||
| 0003f7c0:· | 0003f7c0:·6c6f·672e·636f·6e66·220a·2320·2a20·416e··log.conf".#·*·An | ||
| 0003f7d0:· | 0003f7d0:·6420·616c·736f·2074·6865·206c·6f67·2066··d·also·the·log·f | ||
| 0003f7e0:· | 0003f7e0:·696c·6520·7061·7468·7320·6c69·7374·6564··ile·paths·listed | ||
| 0003f7f0:· | 0003f7f0:·2061·6674·6572·2072·7379·736c·6f67·2773···after·rsyslog's | ||
| 0003f800:· | 0003f800:·2024·496e·636c·7564·6543·6f6e·6669·6720···$IncludeConfig· | ||
| 0003f810:· | 0003f810:·6469·7265·6374·6976·650a·2320·2020·2873··directive.#···(s | ||
| 0003f820:· | 0003f820:·746f·7265·2074·6865·2072·6573·756c·7420··tore·the·result· | ||
| 0003f830:· | 0003f830:·696e·746f·2061·7272·6179·2066·6f72·2074··into·array·for·t | ||
| 0003f840:· | 0003f840:·6865·2063·6173·6520·7468·6572·6527·7320··he·case·there's· | ||
| 0003f850:· | 0003f850:·7368·656c·6c20·676c·6f62·2075·7365·6420··shell·glob·used· | ||
| 0003f860:·6 | 0003f860:·6173·2076·616c·7565·206f·6620·496e·636c··as·value·of·Incl | ||
| 0003f870:·6 | 0003f870:·7564·6543·6f6e·6669·6729·0a72·6561·6461··udeConfig).reada | ||
| 0003f880:· | 0003f880:·7272·6179·202d·7420·4f4c·445f·494e·4320··rray·-t·OLD_INC· | ||
| 0003f890:· | 0003f890:·266c·743b·2026·6c74·3b28·6772·6570·202d··<·<(grep·- | ||
| 0003f8a0:·20 | 0003f8a0:·6520·225c·2449·6e63·6c75·6465·436f·6e66··e·"\$IncludeConf | ||
| 0003f8b0:· | 0003f8b0:·6967·5b5b·3a73·7061·6365·3a5d·5d5c·2b5b··ig[[:space:]]\+[ | ||
| 0003f8c0:· | 0003f8c0:·5e5b·3a73·7061·6365·3a5d·3b5d·5c2b·2220··^[:space:];]\+"· | ||
| 0003f8d0:· | 0003f8d0:·2f65·7463·2f72·7379·736c·6f67·2e63·6f6e··/etc/rsyslog.con | ||
| 0003f8e0:·2072· | 0003f8e0:·6620·7c20·6375·7420·2d64·2027·2027·202d··f·|·cut·-d·'·'·- | ||
| 0003f8f0:·66 | 0003f8f0:·6620·3229·0a72·6561·6461·7272·6179·202d··f·2).readarray·- | ||
| 0003f900:· | 0003f900:·7420·5253·5953·4c4f·475f·494e·434c·5544··t·RSYSLOG_INCLUD | ||
| 0003f910:· | 0003f910:·455f·434f·4e46·4947·2026·6c74·3b20·266c··E_CONFIG·<·&l | ||
| 0003f920:· | 0003f920:·743b·2866·6f72·2049·4e43·5041·5448·2069··t;(for·INCPATH·i | ||
| 0003f930:· | 0003f930:·6e20·2224·7b4f·4c44·5f49·4e43·5b40·5d7d··n·"${OLD_INC[@]} | ||
| 0003f940:·2 | 0003f940:·223b·2064·6f20·6576·616c·2070·7269·6e74··";·do·eval·print | ||
| 0003f950:· | 0003f950:·6620·2725·735c·5c6e·2720·2224·7b49·4e43··f·'%s\\n'·"${INC | ||
| 0003f960:· | 0003f960:·5041·5448·7d22·3b20·646f·6e65·290a·7265··PATH}";·done).re | ||
| 0003f970:· | 0003f970:·6164·6172·7261·7920·2d74·204e·4557·5f49··adarray·-t·NEW_I | ||
| 0003f980:· | 0003f980:·4e43·2026·6c74·3b20·266c·743b·2873·6564··NC·<·<(sed | ||
| 0003f990:· | 0003f990:·202d·6e20·272f·5e5c·732a·696e·636c·7564···-n·'/^\s*includ | ||
| 0003f9a0:· | 0003f9a0:·6528·2f2c·2f29·2f49·7027·202f·6574·632f··e(/,/)/Ip'·/etc/ | ||
| 0003f9b0:·2 | 0003f9b0:·7273·7973·6c6f·672e·636f·6e66·207c·2073··rsyslog.conf·|·s | ||
| 0003f9c0:· | 0003f9c0:·6564·202d·6e20·2773·402e·2a66·696c·655c··ed·-n·'s@.*file\ | ||
| 0003f9d0:· | 0003f9d0:·732a·3d5c·732a·225c·285b·2f5b·3a61·6c6e··s*=\s*"\([/[:aln | ||
| 0003f9e0:· | 0003f9e0:·756d·3a5d·5b3a·7075·6e63·743a·5d5d·2a5c··um:][:punct:]]*\ | ||
| 0003f9f0:· | 0003f9f0:·2922·2e2a·405c·3140·4970·2729·0a72·6561··)".*@\1@Ip').rea | ||
| 0003fa00:·6 | 0003fa00:·6461·7272·6179·202d·7420·5253·5953·4c4f··darray·-t·RSYSLO | ||
| 0003fa10:· | 0003fa10:·475f·494e·434c·5544·4520·266c·743b·2026··G_INCLUDE·<·& | ||
| 0003fa20:· | 0003fa20:·6c74·3b28·666f·7220·494e·4350·4154·4820··lt;(for·INCPATH· | ||
| 0003fa30:·696 | 0003fa30:·696e·2022·247b·4e45·575f·494e·435b·405d··in·"${NEW_INC[@] | ||
| 0003fa40:· | 0003fa40:·7d22·3b20·646f·2065·7661·6c20·7072·696e··}";·do·eval·prin | ||
| 0003fa50:· | 0003fa50:·7466·2027·2573·5c5c·6e27·2022·247b·494e··tf·'%s\\n'·"${IN | ||
| 0003fa60:· | 0003fa60:·4350·4154·487d·223b·2064·6f6e·6529·0a0a··CPATH}";·done).. | ||
| 0003fa70:· | 0003fa70:·2320·4465·636c·6172·6520·616e·2061·7272··#·Declare·an·arr | ||
| 0003fa80:· | 0003fa80:·6179·2074·6f20·686f·6c64·2074·6865·2066··ay·to·hold·the·f | ||
| 0003fa90:·6 | 0003fa90:·696e·616c·206c·6973·7420·6f66·2064·6966··inal·list·of·dif | ||
| 0003faa0:·6 | 0003faa0:·6665·7265·6e74·206c·6f67·2066·696c·6520··ferent·log·file· | ||
| 0003fab0:· | 0003fab0:·7061·7468·730a·6465·636c·6172·6520·2d61··paths.declare·-a | ||
| 0003fac0:· | 0003fac0:·204c·4f47·5f46·494c·455f·5041·5448·530a···LOG_FILE_PATHS. | ||
| 0003fad0:· | 0003fad0:·0a23·2041·7272·6179·2074·6f20·686f·6c64··.#·Array·to·hold | ||
| 0003fae0:· | 0003fae0:·2061·6c6c·2072·7379·736c·6f67·2063·6f6e···all·rsyslog·con | ||
| 0003faf0:· | 0003faf0:·6669·6720·656e·7472·6965·730a·5253·5953··fig·entries.RSYS | ||
| 0003fb00:· | 0003fb00:·4c4f·475f·434f·4e46·4947·533d·2829·0a52··LOG_CONFIGS=().R | ||
| 0003fb10:· | 0003fb10:·5359·534c·4f47·5f43·4f4e·4649·4753·3d28··SYSLOG_CONFIGS=( | ||
| 0003fb20:· | 0003fb20:·2224·7b52·5359·534c·4f47·5f45·5443·5f43··"${RSYSLOG_ETC_C | ||
| 0003fb30:· | 0003fb30:·4f4e·4649·477d·2220·2224·7b52·5359·534c··ONFIG}"·"${RSYSL | ||
| 0003fb40:· | 0003fb40:·4f47·5f49·4e43·4c55·4445·5f43·4f4e·4649··OG_INCLUDE_CONFI | ||
| 0003fb50:· | 0003fb50:·475b·405d·7d22·2022·247b·5253·5953·4c4f··G[@]}"·"${RSYSLO | ||
| 0003fb60:· | 0003fb60:·475f·494e·434c·5544·455b·405d·7d22·290a··G_INCLUDE[@]}"). | ||
| 0003fb70:· | 0003fb70:·0a23·2047·6574·2066·756c·6c20·6c69·7374··.#·Get·full·list | ||
| 0003fb80:· | 0003fb80:·206f·6620·6669·6c65·7320·746f·2062·6520···of·files·to·be· | ||
| 0003fb90:·6 | 0003fb90:·6368·6563·6b65·640a·2320·5253·5953·4c4f··checked.#·RSYSLO | ||
| 0003fba0:· | 0003fba0:·475f·434f·4e46·4947·5320·6d61·7920·636f··G_CONFIGS·may·co | ||
| 0003fbb0:· | 0003fbb0:·6e74·6169·6e20·676c·6f62·7320·7375·6368··ntain·globs·such | ||
| 0003fbc0:· | 0003fbc0:·2061·730a·2320·2f65·7463·2f72·7379·736c···as.#·/etc/rsysl | ||
| 0003fbd0:· | 0003fbd0:·6f67·2e64·2f2a·2e63·6f6e·6620·2f65·7463··og.d/*.conf·/etc | ||
| 0003fbe0:· | 0003fbe0:·2f72·7379·736c·6f67·2e64·2f2a·2e66·7275··/rsyslog.d/*.fru | ||
| 0003fbf0:· | 0003fbf0:·6c65·0a23·2053·6f2c·206c·6f6f·7020·6f76··le.#·So,·loop·ov | ||
| 0003fc00:· | 0003fc00:·6572·2074·6865·2065·6e74·7269·6573·2069··er·the·entries·i | ||
| 0003fc10:· | 0003fc10:·6e20·5253·5953·4c4f·475f·434f·4e46·4947··n·RSYSLOG_CONFIG | ||
| 0003fc20:· | 0003fc20:·5320·616e·6420·7573·6520·6669·6e64·2074··S·and·use·find·t | ||
| 0003fc30:· | 0003fc30:·6f20·6765·7420·7468·6520·6c69·7374·206f··o·get·the·list·o | ||
| 0003fc40:· | 0003fc40:·6620·696e·636c·7564·6564·2066·696c·6573··f·included·files | ||
| 0003fc50:· | 0003fc50:·2e0a·5253·5953·4c4f·475f·434f·4e46·4947··..RSYSLOG_CONFIG | ||
| 0003fc60:· | 0003fc60:·5f46·494c·4553·3d28·290a·666f·7220·454e··_FILES=().for·EN | ||
| 0003fc70:· | 0003fc70:·5452·5920·696e·2022·247b·5253·5953·4c4f··TRY·in·"${RSYSLO | ||
| 0003fc80:· | 0003fc80:·475f·434f·4e46·4947·535b·405d·7d22·0a64··G_CONFIGS[@]}".d | ||
| 0003fc90:·6 | 0003fc90:·6f0a·0923·2049·6620·6469·7265·6374·6f72··o..#·If·director | ||
| 0003fca0:· | 0003fca0:·792c·2072·7379·736c·6f67·2077·696c·6c20··y,·rsyslog·will· | ||
| 0003fcb0:·7 | 0003fcb0:·7365·6172·6368·2066·6f72·2063·6f6e·6669··search·for·confi | ||
| 0003fcc0:· | 0003fcc0:·6720·6669·6c65·7320·696e·2072·6563·7572··g·files·in·recur | ||
| 0003fcd0:· | 0003fcd0:·7369·7665·6c79·2e0a·0923·2048·6f77·6576··sively...#·Howev | ||
| 0003fce0:· | 0003fce0:·6572·2c20·6669·6c65·7320·696e·2068·6964··er,·files·in·hid | ||
| 0003fcf0:· | 0003fcf0:·6465·6e20·7375·622d·6469·7265·6374·6f72··den·sub-director | ||
| 0003fd00:·6573 | 0003fd00:·6965·7320·6f72·2068·6964·6465·6e20·6669··ies·or·hidden·fi | ||
| 0003fd10:· | 0003fd10:·6c65·7320·7769·6c6c·2062·6520·6967·6e6f··les·will·be·igno | ||
| Max diff block lines reached; 1048760/1154634 bytes (90.83%) of diff not shown. | |||
| Offset 258, 14 lines modified | Offset 258, 142 lines modified | ||
| 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 | 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 |
| 265 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 266 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 267 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 268 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed·&&·dpkg-query·--show·-- | ||
| 269 | showformat='${db:Status-Status}\n'·'rsyslog'·2>/dev/null·|·grep·- | ||
| 270 | q·'^installed';·then | ||
| 271 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 272 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 273 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 274 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 275 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 276 | of·IncludeConfig) | ||
| 277 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 278 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 279 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 280 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 281 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 282 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 283 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 284 | '%s\\n'·"${INCPATH}";·done) | ||
| 285 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 286 | declare·-a·LOG_FILE_PATHS | ||
| 287 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 288 | RSYSLOG_CONFIGS=() | ||
| 289 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 290 | {RSYSLOG_INCLUDE[@]}") | ||
| 291 | #·Get·full·list·of·files·to·be·checked | ||
| 292 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 293 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 294 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 295 | included·files. | ||
| 296 | RSYSLOG_CONFIG_FILES=() | ||
| 297 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 298 | do | ||
| 299 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 300 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 301 | » if·[·-d·"${ENTRY}"·] | ||
| 302 | » then | ||
| 303 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 304 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 305 | » elif·[·-f·"${ENTRY}"·] | ||
| 306 | » then | ||
| 307 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 308 | » else | ||
| 309 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 310 | » fi | ||
| 311 | done | ||
| 312 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 313 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 314 | configuration) | ||
| 315 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 316 | do | ||
| 317 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 318 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 319 | ('$')·characters, | ||
| 320 | » #·*·Ignore·empty·lines, | ||
| 321 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 322 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 323 | not·log·files | ||
| 324 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 325 | path | ||
| 326 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 327 | all·of·the | ||
| 328 | » #·following·are·met: | ||
| 329 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 330 | » #·*·it·is·preceded·by·space | ||
| 331 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 332 | characters | ||
| 333 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 334 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 335 | » then | ||
| 336 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 337 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 338 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 339 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 340 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 341 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 342 | {FILTERED_PATHS}") | ||
| 343 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 344 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 345 | newline),·split | ||
| 346 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 347 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 348 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 349 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 350 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 351 | » » #·Delete·the·temporary·array | ||
| 352 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 353 | » fi | ||
| 354 | done | ||
| 355 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 356 | grep·regex·is·a·bit | ||
| 357 | #·curly: | ||
| 358 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 359 | #·extract·File="logfile"·expression | ||
| 360 | #·match·only·"logfile"·expression | ||
| 361 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 362 | do | ||
| 363 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 364 | "${LOG_FILE}") | ||
| 365 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 366 | alnum:][:punct:]]*)\"\s*\)") | ||
| 367 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| 368 | ]]*)\""|tr·-d·"\"")") | ||
| 369 | done | ||
| 370 | #·Ensure·the·correct·attribute·if·file·exists | ||
| 371 | FILE_CMD="chgrp" | ||
| 372 | for·LOG_FILE_PATH·in·"${LOG_FILE_PATHS[@]}" | ||
| 373 | do | ||
| 374 | » #·Sanity·check·-·if·particular·$LOG_FILE_PATH·is·empty·string,·skip·it·from | ||
| 375 | further·processing | ||
| 376 | » if·[·-z·"$LOG_FILE_PATH"·] | ||
| 377 | » then | ||
| Max diff block lines reached; 132204/137855 bytes (95.90%) of diff not shown. | |||
| Offset 15037, 185 lines modified | Offset 15037, 185 lines modified | ||
| 0003abc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003abc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003abd0:·3d22·2369·646d·3236·3833·2220·7461·6269··="#idm2683"·tabi | 0003abd0:·3d22·2369·646d·3236·3833·2220·7461·6269··="#idm2683"·tabi | ||
| 0003abe0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003abe0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003abf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003abf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ac00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ac00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ac10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ac10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ac20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ac20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ac30:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003ac40:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003ac50:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003ac60:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003ac70:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003ac80:·2269·646d·3236·3833·223e·3c74·6162·6c65··"idm2683"><table | |||
| 0003ac90:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003aca0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003acb0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003acc0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003acd0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003ace0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003acf0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003ad00:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003ad10:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003ad20:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003ad30:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003ad40:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003ad50:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003ad60:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003ad70:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003ad80:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003ad90:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003ada0:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003adb0:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003adc0:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003add0:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003ade0:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003adf0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003ae00:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003ae10:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003ae20:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003ae30:·6172·6765·743d·2223·6964·6d32·3638·3422··arget="#idm2684" | |||
| 0003ae40:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003ae50:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003ae60:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003ae70:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003ae80:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003ae90:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003aea0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003aeb0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003aec0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003aed0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003aee0:·6522·2069·643d·2269·646d·3236·3834·223e··e"·id="idm2684"> | |||
| 0003aef0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003af00:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003af10:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003af20:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003af30:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003af40:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003af50:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003af60:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003af70:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003af80:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003af90:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003afa0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003afb0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003afc0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003afd0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003afe0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003aff0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b000:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b010:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b020:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b030:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b040:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003b050:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b060:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b070:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b080:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b090:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b0a0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b0b0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b0c0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b0d0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b0e0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b0f0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b100:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003b110:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b120:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b130:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b140:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b150:·7365·6e74·0a20·2077·6865·6e3a·2027·226c··sent.··when:·'"l | |||
| 0003b160:·696e·7578·2d62·6173·6522·2069·6e20·616e··inux-base"·in·an | |||
| 0003b170:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003b180:·6167·6573·270a·2020·7461·6773·3a0a·2020··ages'.··tags:.·· | |||
| 0003b190:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b1a0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b1b0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b1c0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b1d0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b1e0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b1f0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b200:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b210:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b220:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b230:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b240:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b250:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b260:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b270:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b280:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b290:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b2a0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b2b0:·3d22·2369·646d·3236·3835·2220·7461·6269··="#idm2685"·tabi | |||
| 0003b2c0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b2d0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b2e0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b2f0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b300:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003 | 0003ac30:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003 | 0003ac40:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003 | 0003ac50:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003 | 0003ac60:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003 | 0003ac70:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003 | 0003ac80:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | ||
| 0003 | 0003ac90:·3638·3322·3e3c·7072·653e·3c63·6f64·653e··683"><pre><code> | ||
| 0003 | 0003aca0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | ||
| 0003 | 0003acb0:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | ||
| 0003 | 0003acc0:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | ||
| Max diff block lines reached; 17130517/17154695 bytes (99.86%) of diff not shown. | |||
| Offset 15042, 185 lines modified | Offset 15042, 185 lines modified | ||
| 0003ac10:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ac10:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ac20:·743d·2223·6964·6d32·3638·3322·2074·6162··t="#idm2683"·tab | 0003ac20:·743d·2223·6964·6d32·3638·3322·2074·6162··t="#idm2683"·tab | ||
| 0003ac30:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003ac30:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003ac40:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003ac40:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003ac50:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003ac50:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003ac60:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003ac60:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003ac70:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003ac70:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003ac80:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003ac80:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003ac90:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003aca0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003acb0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003acc0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003acd0:·3d22·6964·6d32·3638·3322·3e3c·7461·626c··="idm2683"><tabl | |||
| 0003ace0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003acf0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ad00:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ad10:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ad20:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ad30:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ad40:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ad50:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ad60:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ad70:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ad80:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ad90:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003ada0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003adb0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003adc0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003add0:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003ade0:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003adf0:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003ae00:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003ae10:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003ae20:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003ae30:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003ae40:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003ae50:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003ae60:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003ae70:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003ae80:·7461·7267·6574·3d22·2369·646d·3236·3834··target="#idm2684 | |||
| 0003ae90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003aea0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003aeb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003aec0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003aed0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003aee0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003aef0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003af00:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003af10:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003af20:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003af30:·7365·2220·6964·3d22·6964·6d32·3638·3422··se"·id="idm2684" | |||
| 0003af40:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003af50:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003af60:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003af70:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003af80:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003af90:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003afa0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003afb0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003afc0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003afd0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003afe0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003aff0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b000:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b010:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b020:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b030:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b040:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003b050:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003b060:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003b070:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003b080:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b090:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | |||
| 0003b0a0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b0b0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b0c0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b0d0:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b0e0:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b0f0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b100:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b110:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b120:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b130:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b140:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b150:·7461·6c6c·6564·0a0a·2d20·6e61·6d65·3a20··talled..-·name:· | |||
| 0003b160:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003b170:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003b180:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003b190:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003b1a0:·6573·656e·740a·2020·7768·656e·3a20·2722··esent.··when:·'" | |||
| 0003b1b0:·6c69·6e75·782d·6261·7365·2220·696e·2061··linux-base"·in·a | |||
| 0003b1c0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003b1d0:·6b61·6765·7327·0a20·2074·6167·733a·0a20··kages'.··tags:.· | |||
| 0003b1e0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b1f0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b200:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b210:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b220:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b230:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b240:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b250:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b260:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b270:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b280:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b290:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b2a0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b2b0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b2c0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b2d0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b2e0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b2f0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b300:·743d·2223·6964·6d32·3638·3522·2074·6162··t="#idm2685"·tab | |||
| 0003b310:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b320:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b330:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b340:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b350:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b360:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003 | 0003ac90:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 0003 | 0003aca0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003 | 0003acb0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003 | 0003acc0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003 | 0003acd0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003 | 0003ace0:·3236·3833·223e·3c70·7265·3e3c·636f·6465··2683"><pre><code | ||
| 0003 | 0003acf0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | ||
| 0003 | 0003ad00:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | ||
| 0003 | 0003ad10:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | ||
| Max diff block lines reached; 17323772/17347950 bytes (99.86%) of diff not shown. | |||
| Offset 15028, 185 lines modified | Offset 15028, 185 lines modified | ||
| 0003ab30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003ab30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003ab40:·2223·6964·6d32·3638·3322·2074·6162·696e··"#idm2683"·tabin | 0003ab40:·2223·6964·6d32·3638·3322·2074·6162·696e··"#idm2683"·tabin | ||
| 0003ab50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003ab50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ab60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003ab60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003ab70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003ab70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003ab80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003ab80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003ab90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003ab90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003aba0:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003abb0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003abc0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003abd0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003abe0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003abf0:·6964·6d32·3638·3322·3e3c·7461·626c·6520··idm2683"><table· | |||
| 0003ac00:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003ac10:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003ac20:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003ac30:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003ac40:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003ac50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ac60:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003ac70:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003ac80:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ac90:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003aca0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003acb0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003acc0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003acd0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003ace0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003acf0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003ad00:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003ad10:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003ad20:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003ad30:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003ad40:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003ad50:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003ad60:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003ad70:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003ad80:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003ad90:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003ada0:·7267·6574·3d22·2369·646d·3236·3834·2220··rget="#idm2684"· | |||
| 0003adb0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003adc0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003add0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003ade0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003adf0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003ae00:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003ae10:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003ae20:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003ae30:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003ae40:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003ae50:·2220·6964·3d22·6964·6d32·3638·3422·3e3c··"·id="idm2684">< | |||
| 0003ae60:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003ae70:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003ae80:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003ae90:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003aea0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003aeb0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003aec0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003aed0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003aee0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003aef0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003af00:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003af10:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003af20:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003af30:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003af40:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003af50:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | |||
| 0003af60:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | |||
| 0003af70:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | |||
| 0003af80:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | |||
| 0003af90:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | |||
| 0003afa0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003afb0:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | |||
| 0003afc0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003afd0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003afe0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003aff0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b000:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b010:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b020:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b030:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b040:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b050:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b060:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b070:·6c6c·6564·0a0a·2d20·6e61·6d65·3a20·456e··lled..-·name:·En | |||
| 0003b080:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b090:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b0a0:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b0b0:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b0c0:·656e·740a·2020·7768·656e·3a20·2722·6c69··ent.··when:·'"li | |||
| 0003b0d0:·6e75·782d·6261·7365·2220·696e·2061·6e73··nux-base"·in·ans | |||
| 0003b0e0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003b0f0:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | |||
| 0003b100:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b110:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b120:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b130:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b140:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b150:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b160:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b170:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b180:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b190:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b1a0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b1b0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b1c0:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b1d0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b1e0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b1f0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b200:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b210:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b220:·2223·6964·6d32·3638·3522·2074·6162·696e··"#idm2685"·tabin | |||
| 0003b230:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b240:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b250:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b260:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b270:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003 | 0003aba0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003 | 0003abb0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003 | 0003abc0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003 | 0003abd0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003 | 0003abe0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003 | 0003abf0:·6c61·7073·6522·2069·643d·2269·646d·3236··lapse"·id="idm26 | ||
| 0003 | 0003ac00:·3833·223e·3c70·7265·3e3c·636f·6465·3e0a··83"><pre><code>. | ||
| 0003 | 0003ac10:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | ||
| 0003 | 0003ac20:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | ||
| 0003 | 0003ac30:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | ||
| Max diff block lines reached; 6468492/6492670 bytes (99.63%) of diff not shown. | |||
| Offset 111, 26 lines modified | Offset 111, 33 lines modified | ||
| 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"aide" | ||
| 121 | version·=·"*" | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | incl | 127 | #·Remediation·is·applicable·only·in·certain·platforms |
| 128 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 129 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 124 | class·install_aide·{ | ||
| 125 | ··package·{·'aide': | ||
| 126 | ····ensure·=>·'installed', | ||
| 127 | ··} | ||
| 128 | 130 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | |
| 131 | else | ||
| 132 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 133 | fi | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Gather·the·package·facts | 139 | -·name:·Gather·the·package·facts |
| 135 | ··package_facts: | 140 | ··package_facts: |
| Offset 159, 33 lines modified | Offset 166, 26 lines modified | ||
| 159 | ··-·PCI-DSSv4-11.5.2 | 166 | ··-·PCI-DSSv4-11.5.2 |
| 160 | ··-·enable_strategy | 167 | ··-·enable_strategy |
| 161 | ··-·low_complexity | 168 | ··-·low_complexity |
| 162 | ··-·low_disruption | 169 | ··-·low_disruption |
| 163 | ··-·medium_severity | 170 | ··-·medium_severity |
| 164 | ··-·no_reboot_needed | 171 | ··-·no_reboot_needed |
| 165 | ··-·package_aide_installed | 172 | ··-·package_aide_installed |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | [[packages]] | ||
| 168 | name·=·"aide" | ||
| 169 | version·=·"*" | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 178 | include·install_aide | ||
| 175 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 176 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 177 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 178 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 179 | else | ||
| 180 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 181 | 179 | class·install_aide·{ | |
| 180 | ··package·{·'aide': | ||
| 181 | ····ensure·=>·'installed', | ||
| 182 | ··} | ||
| 183 | } | ||
| 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 184 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 183 | Run·the·following·command·to·generate·a·new·database: | 185 | Run·the·following·command·to·generate·a·new·database: |
| 184 | $·sudo·aideinit | 186 | $·sudo·aideinit |
| 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 187 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 186 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 188 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 187 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 189 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 188 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 190 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 209, 14 lines modified | Offset 209, 41 lines modified | ||
| 209 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 209 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 210 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 210 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 211 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 211 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 212 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 212 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 213 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 213 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 214 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 214 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 215 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 215 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 217 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 218 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 219 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 220 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 221 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 222 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 223 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 224 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 225 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 226 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 227 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 228 | fi | ||
| 229 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 230 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 231 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 232 | fi | ||
| 233 | /usr/sbin/aideinit·-y·-f | ||
| 234 | else | ||
| 235 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 236 | fi | ||
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 217 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 238 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 218 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 239 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 219 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 240 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 220 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 241 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 221 | -·name:·Gather·the·package·facts | 242 | -·name:·Gather·the·package·facts |
| 222 | ··package_facts: | 243 | ··package_facts: |
| Offset 386, 41 lines modified | Offset 413, 14 lines modified | ||
| 386 | ··-·PCI-DSSv4-11.5.2 | 413 | ··-·PCI-DSSv4-11.5.2 |
| 387 | ··-·aide_build_database | 414 | ··-·aide_build_database |
| 388 | ··-·low_complexity | 415 | ··-·low_complexity |
| 389 | ··-·low_disruption | 416 | ··-·low_disruption |
| 390 | ··-·medium_severity | 417 | ··-·medium_severity |
| 391 | ··-·no_reboot_needed | 418 | ··-·no_reboot_needed |
| 392 | ··-·restrict_strategy | 419 | ··-·restrict_strategy |
| 393 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 879734/886084 bytes (99.28%) of diff not shown. | |||
| Offset 15543, 417 lines modified | Offset 15543, 417 lines modified | ||
| 0003cb60:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | 0003cb60:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | ||
| 0003cb70:·3632·3522·2074·6162·696e·6465·783d·2230··625"·tabindex="0 | 0003cb70:·3632·3522·2074·6162·696e·6465·783d·2230··625"·tabindex="0 | ||
| 0003cb80:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003cb80:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003cb90:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003cb90:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003cba0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003cba0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003cbb0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003cbb0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (403 lines added, 403 lines removed) | |
| 0003cbc0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003cbc0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003cbd0:·6961·7469·6f6e·20 | 0003cbd0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 0003cbe0:·6 | 0003cbe0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003cbf0:· | 0003cbf0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003cc00:· | 0003cc00:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003cc10:· | 0003cc10:·7365·2220·6964·3d22·6964·6d34·3632·3522··se"·id="idm4625" | ||
| 0003cc20:·3 | 0003cc20:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | ||
| 0003cc30:· | 0003cc30:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | ||
| 0003cc40:· | 0003cc40:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | ||
| 0003cc50:·6 | 0003cc50:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | ||
| 0003cc60:· | 0003cc60:·730a·6966·2064·706b·672d·7175·6572·7920··s.if·dpkg-query· | ||
| 0003cc70:· | 0003cc70:·2d2d·7368·6f77·202d·2d73·686f·7766·6f72··--show·--showfor | ||
| 0003cc80:·6 | 0003cc80:·6d61·743d·2724·7b64·623a·5374·6174·7573··mat='${db:Status | ||
| 0003cc90:· | 0003cc90:·2d53·7461·7475·737d·5c6e·2720·276c·6962··-Status}\n'·'lib | ||
| 0003cca0:· | 0003cca0:·7061·6d2d·7275·6e74·696d·6527·2032·2667··pam-runtime'·2&g | ||
| 0003ccb0:· | 0003ccb0:·743b·2f64·6576·2f6e·756c·6c20·7c20·6772··t;/dev/null·|·gr | ||
| 0003ccc0:· | 0003ccc0:·6570·202d·7120·275e·696e·7374·616c·6c65··ep·-q·'^installe | ||
| 0003ccd0:· | 0003ccd0:·6427·3b20·7468·656e·0a0a·7661·725f·7061··d';·then..var_pa | ||
| 0003cce0:·7 | 0003cce0:·7373·776f·7264·5f70·616d·5f75·6e69·785f··ssword_pam_unix_ | ||
| 0003ccf0:· | 0003ccf0:·7265·6d65·6d62·6572·3d27·3c61·6262·7220··remember='<abbr· | ||
| 0003cd00:· | 0003cd00:·7469·746c·653d·2266·726f·6d20·5072·6f66··title="from·Prof | ||
| 0003cd10:· | 0003cd10:·696c·652f·7265·6669·6e65·2d76·616c·7565··ile/refine-value | ||
| 0003cd20:· | 0003cd20:·3a20·7863·6364·665f·6f72·672e·7373·6770··:·xccdf_org.ssgp | ||
| 0003cd30:· | 0003cd30:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f76··roject.content_v | ||
| 0003cd40:· | 0003cd40:·616c·7565·5f76·6172·5f70·6173·7377·6f72··alue_var_passwor | ||
| 0003cd50:· | 0003cd50:·645f·7061·6d5f·756e·6978·5f72·656d·656d··d_pam_unix_remem | ||
| 0003cd60:· | 0003cd60:·6265·7222·3e32·3c2f·6162·6272·3e27·0a0a··ber">2</abbr>'.. | ||
| 0003cd70:· | 0003cd70:·0a0a·0a0a·0a69·6620·5b20·2d65·2022·2f65··.....if·[·-e·"/e | ||
| 0003cd80:· | 0003cd80:·7463·2f70·616d·2e64·2f63·6f6d·6d6f·6e2d··tc/pam.d/common- | ||
| 0003cd90:· | 0003cd90:·7061·7373·776f·7264·2220·5d20·3b20·7468··password"·]·;·th | ||
| 0003cda0:· | 0003cda0:·656e·0a20·2020·2076·616c·7565·5265·6765··en.····valueRege | ||
| 0003cdb0:· | 0003cdb0:·783d·2224·7661·725f·7061·7373·776f·7264··x="$var_password | ||
| 0003cdc0:· | 0003cdc0:·5f70·616d·5f75·6e69·785f·7265·6d65·6d62··_pam_unix_rememb | ||
| 0003cdd0:· | 0003cdd0:·6572·2220·6465·6661·756c·7456·616c·7565··er"·defaultValue | ||
| 0003cde0:· | 0003cde0:·3d22·2476·6172·5f70·6173·7377·6f72·645f··="$var_password_ | ||
| 0003cdf0:· | 0003cdf0:·7061·6d5f·756e·6978·5f72·656d·656d·6265··pam_unix_remembe | ||
| 0003ce00:· | 0003ce00:·7222·0a20·2020·2023·206e·6f6e·2d65·6d70··r".····#·non-emp | ||
| 0003ce10:· | 0003ce10:·7479·2076·616c·7565·7320·6e65·6564·2074··ty·values·need·t | ||
| 0003ce20:· | 0003ce20:·6f20·6265·2070·7265·6365·6465·6420·6279··o·be·preceded·by | ||
| 0003ce30:·20 | 0003ce30:·2061·6e20·6571·7561·6c73·2073·6967·6e0a···an·equals·sign. | ||
| 0003ce40:· | 0003ce40:·2020·2020·5b20·2d6e·2022·247b·7661·6c75······[·-n·"${valu | ||
| 0003ce50:·6 | 0003ce50:·6552·6567·6578·7d22·205d·2026·616d·703b··eRegex}"·]·& | ||
| 0003ce60:· | 0003ce60:·2661·6d70·3b20·7661·6c75·6552·6567·6578··&·valueRegex | ||
| 0003ce70:· | 0003ce70:·3d22·3d24·7b76·616c·7565·5265·6765·787d··="=${valueRegex} | ||
| 0003ce80:· | 0003ce80:·220a·2020·2020·2320·6164·6420·616e·2065··".····#·add·an·e | ||
| 0003ce90:· | 0003ce90:·7175·616c·7320·7369·676e·2074·6f20·6e6f··quals·sign·to·no | ||
| 0003cea0:· | 0003cea0:·6e2d·656d·7074·7920·7661·6c75·6573·0a20··n-empty·values.· | ||
| 0003ceb0:· | 0003ceb0:·2020·205b·202d·6e20·2224·7b64·6566·6175·····[·-n·"${defau | ||
| 0003cec0:· | 0003cec0:·6c74·5661·6c75·657d·2220·5d20·2661·6d70··ltValue}"·]·& | ||
| 0003ced0:·6 | 0003ced0:·3b26·616d·703b·2064·6566·6175·6c74·5661··;&·defaultVa | ||
| 0003cee0:· | 0003cee0:·6c75·653d·223d·247b·6465·6661·756c·7456··lue="=${defaultV | ||
| 0003cef0:· | 0003cef0:·616c·7565·7d22·0a0a·2020·2020·2320·6669··alue}"..····#·fi | ||
| 0003cf00:· | 0003cf00:·7820·2774·7970·6527·2069·6620·6974·2773··x·'type'·if·it's | ||
| 0003cf10:·20 | 0003cf10:·2077·726f·6e67·0a20·2020·2069·6620·6772···wrong.····if·gr | ||
| 0003cf20:·6 | 0003cf20:·6570·202d·7120·2d50·2022·5e5c·5c73·2a28··ep·-q·-P·"^\\s*( | ||
| 0003cf30:· | 0003cf30:·3f22·2721·2722·7061·7373·776f·7264·5c5c··?"'!'"password\\ | ||
| 0003cf40:· | 0003cf40:·7329·5b5b·3a61·6c6e·756d·3a5d·5d2b·5c5c··s)[[:alnum:]]+\\ | ||
| 0003cf50:· | 0003cf50:·732b·5b5b·3a61·6c6e·756d·3a5d·5d2b·5c5c··s+[[:alnum:]]+\\ | ||
| 0003cf60:· | 0003cf60:·732b·7061·6d5f·756e·6978·2e73·6f22·2026··s+pam_unix.so"·& | ||
| 0003cf70:·6 | 0003cf70:·6c74·3b20·222f·6574·632f·7061·6d2e·642f··lt;·"/etc/pam.d/ | ||
| 0003cf80:· | 0003cf80:·636f·6d6d·6f6e·2d70·6173·7377·6f72·6422··common-password" | ||
| 0003cf90:· | 0003cf90:·203b·2074·6865·6e0a·2020·2020·2020·2020···;·then.········ | ||
| 0003cfa0:· | 0003cfa0:·7365·6420·2d2d·666f·6c6c·6f77·2d73·796d··sed·--follow-sym | ||
| 0003cfb0:·6 | 0003cfb0:·6c69·6e6b·7320·2d69·202d·4520·2d65·2022··links·-i·-E·-e·" | ||
| 0003cfc0:· | 0003cfc0:·732f·5e28·5c5c·732a·295b·5b3a·616c·6e75··s/^(\\s*)[[:alnu | ||
| 0003cfd0:· | 0003cfd0:·6d3a·5d5d·2b28·5c5c·732b·5b5b·3a61·6c6e··m:]]+(\\s+[[:aln | ||
| 0003cfe0:· | 0003cfe0:·756d·3a5d·5d2b·5c5c·732b·7061·6d5f·756e··um:]]+\\s+pam_un | ||
| 0003cff0:·6 | 0003cff0:·6978·2e73·6f29·2f5c·5c31·7061·7373·776f··ix.so)/\\1passwo | ||
| 0003d000:· | 0003d000:·7264·5c5c·322f·2220·222f·6574·632f·7061··rd\\2/"·"/etc/pa | ||
| 0003d010:· | 0003d010:·6d2e·642f·636f·6d6d·6f6e·2d70·6173·7377··m.d/common-passw | ||
| 0003d020:· | 0003d020:·6f72·6422·0a20·2020·2066·690a·0a20·2020··ord".····fi..··· | ||
| 0003d030:· | 0003d030:·2023·2066·6978·2027·636f·6e74·726f·6c27···#·fix·'control' | ||
| 0003d040:· | 0003d040:·2069·6620·6974·2773·2077·726f·6e67·0a20···if·it's·wrong.· | ||
| 0003d050:· | 0003d050:·2020·2069·6620·6772·6570·202d·7120·2d50·····if·grep·-q·-P | ||
| 0003d060:· | 0003d060:·2022·5e5c·5c73·2a70·6173·7377·6f72·645c···"^\\s*password\ | ||
| 0003d070:·5c73·2b | 0003d070:·5c73·2b28·3f22·2721·2722·5c5b·7375·6363··\s+(?"'!'"\[succ | ||
| 0003d080:· | 0003d080:·6573·733d·5b5b·3a61·6c6e·756d·3a5d·5d2e··ess=[[:alnum:]]. | ||
| 0003d090:· | 0003d090:·2a5c·5d29·5b5b·3a61·6c6e·756d·3a5d·5d2b··*\])[[:alnum:]]+ | ||
| 0003d0a0:· | 0003d0a0:·5c5c·732b·7061·6d5f·756e·6978·2e73·6f22··\\s+pam_unix.so" | ||
| 0003d0b0:· | 0003d0b0:·2026·6c74·3b20·222f·6574·632f·7061·6d2e···<·"/etc/pam. | ||
| 0003d0c0:·6 | 0003d0c0:·642f·636f·6d6d·6f6e·2d70·6173·7377·6f72··d/common-passwor | ||
| 0003d0d0:· | 0003d0d0:·6422·203b·2074·6865·6e0a·2020·2020·2020··d"·;·then.······ | ||
| 0003d0e0:·20 | 0003d0e0:·2020·7365·6420·2d2d·666f·6c6c·6f77·2d73····sed·--follow-s | ||
| 0003d0f0:·7 | 0003d0f0:·796d·6c69·6e6b·7320·2d69·202d·4520·2d65··ymlinks·-i·-E·-e | ||
| 0003d100:· | 0003d100:·2022·732f·5e28·5c5c·732a·7061·7373·776f···"s/^(\\s*passwo | ||
| 0003d110:·7 | 0003d110:·7264·5c5c·732b·295b·5b3a·616c·6e75·6d3a··rd\\s+)[[:alnum: | ||
| 0003d120:· | 0003d120:·5d5d·2b28·5c5c·732b·7061·6d5f·756e·6978··]]+(\\s+pam_unix | ||
| 0003d130:· | 0003d130:·2e73·6f29·2f5c·5c31·5c5b·7375·6363·6573··.so)/\\1\[succes | ||
| 0003d140:· | 0003d140:·733d·5b5b·3a61·6c6e·756d·3a5d·5d2e·2a5c··s=[[:alnum:]].*\ | ||
| 0003d150:· | 0003d150:·5d5c·5c32·2f22·2022·2f65·7463·2f70·616d··]\\2/"·"/etc/pam | ||
| 0003d160:· | 0003d160:·2e64·2f63·6f6d·6d6f·6e2d·7061·7373·776f··.d/common-passwo | ||
| 0003d170:·2 | 0003d170:·7264·220a·2020·2020·6669·0a0a·2020·2020··rd".····fi..···· | ||
| 0003d180:· | 0003d180:·2320·6669·7820·7468·6520·7661·6c75·6520··#·fix·the·value· | ||
| 0003d190:· | 0003d190:·666f·7220·276f·7074·696f·6e27·2069·6620··for·'option'·if· | ||
| 0003d1a0:· | 0003d1a0:·6f6e·6520·6578·6973·7473·2062·7574·2064··one·exists·but·d | ||
| 0003d1b0:· | 0003d1b0:·6f65·7320·6e6f·7420·6d61·7463·6820·2776··oes·not·match·'v | ||
| 0003d1c0:· | 0003d1c0:·616c·7565·5265·6765·7827·0a20·2020·2069··alueRegex'.····i | ||
| 0003d1d0:· | 0003d1d0:·6620·6772·6570·202d·7120·2d50·2022·5e5c··f·grep·-q·-P·"^\ | ||
| 0003d1e0:· | 0003d1e0:·5c73·2a70·6173·7377·6f72·645c·5c73·2b5c··\s*password\\s+\ | ||
| 0003d1f0:· | 0003d1f0:·5b73·7563·6365·7373·3d5b·5b3a·616c·6e75··[success=[[:alnu | ||
| 0003d200:· | 0003d200:·6d3a·5d5d·2e2a·5c5d·5c5c·732b·7061·6d5f··m:]].*\]\\s+pam_ | ||
| 0003d210:·7 | 0003d210:·756e·6978·2e73·6f28·5c5c·732e·2b29·3f5c··unix.so(\\s.+)?\ | ||
| 0003d220:· | 0003d220:·5c73·2b72·656d·656d·6265·7228·3f22·2721··\s+remember(?"'! | ||
| 0003d230:· | 0003d230:·2722·247b·7661·6c75·6552·6567·6578·7d28··'"${valueRegex}( | ||
| 0003d240:· | 0003d240:·5c5c·737c·5c24·2929·2220·266c·743b·2022··\\s|\$))"·<·" | ||
| 0003d250:· | 0003d250:·2f65·7463·2f70·616d·2e64·2f63·6f6d·6d6f··/etc/pam.d/commo | ||
| 0003d260:·6 | 0003d260:·6e2d·7061·7373·776f·7264·2220·3b20·7468··n-password"·;·th | ||
| 0003d270:· | 0003d270:·656e·0a20·2020·2020·2020·2073·6564·202d··en.········sed·- | ||
| 0003d280:· | 0003d280:·2d66·6f6c·6c6f·772d·7379·6d6c·696e·6b73··-follow-symlinks | ||
| 0003d290:· | 0003d290:·202d·6920·2d45·202d·6520·2273·2f5e·285c···-i·-E·-e·"s/^(\ | ||
| 0003d2a0:· | 0003d2a0:·5c73·2a70·6173·7377·6f72·645c·5c73·2b5c··\s*password\\s+\ | ||
| 0003d2b0:· | 0003d2b0:·5b73·7563·6365·7373·3d5b·5b3a·616c·6e75··[success=[[:alnu | ||
| 0003d2c0:· | 0003d2c0:·6d3a·5d5d·2e2a·5c5d·5c5c·732b·7061·6d5f··m:]].*\]\\s+pam_ | ||
| 0003d2d0:·6978·2e73·6f2 | 0003d2d0:·756e·6978·2e73·6f28·5c5c·732e·2b29·3f5c··unix.so(\\s.+)?\ | ||
| 0003d2e0:· | 0003d2e0:·5c73·2972·656d·656d·6265·723d·5b5e·5b3a··\s)remember=[^[: | ||
| 0003d2f0:· | 0003d2f0:·7370·6163·653a·5d5d·2a2f·5c5c·3172·656d··space:]]*/\\1rem | ||
| 0003d300:· | 0003d300:·656d·6265·7224·7b64·6566·6175·6c74·5661··ember${defaultVa | ||
| 0003d310:· | 0003d310:·6c75·657d·2f22·2022·2f65·7463·2f70·616d··lue}/"·"/etc/pam | ||
| 0003d320:· | 0003d320:·2e64·2f63·6f6d·6d6f·6e2d·7061·7373·776f··.d/common-passwo | ||
| 0003d330:· | 0003d330:·7264·220a·0a20·2020·2023·2061·6464·2027··rd"..····#·add·' | ||
| Max diff block lines reached; 535780/591974 bytes (90.51%) of diff not shown. | |||
| Offset 177, 14 lines modified | Offset 177, 76 lines modified | ||
| 177 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 | 177 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 178 | ············_\x8n_\x8i_\x8s_\x8t···········IA-5(f),·IA-5(1)(e) | 178 | ············_\x8n_\x8i_\x8s_\x8t···········IA-5(f),·IA-5(1)(e) |
| 179 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-6,·PR.AC-7 | 179 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-6,·PR.AC-7 |
| 180 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.5 | 180 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.5 |
| 181 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000077-GPOS-00045 | 181 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000077-GPOS-00045 |
| 182 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R31 | 182 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R31 |
| 183 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.7,·8.3 | 183 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.7,·8.3 |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 186 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·| | ||
| 187 | grep·-q·'^installed';·then | ||
| 188 | var_password_pam_unix_remember='2' | ||
| 189 | if·[·-e·"/etc/pam.d/common-password"·]·;·then | ||
| 190 | ····valueRegex="$var_password_pam_unix_remember" | ||
| 191 | defaultValue="$var_password_pam_unix_remember" | ||
| 192 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| 193 | ····[·-n·"${valueRegex}"·]·&&·valueRegex="=${valueRegex}" | ||
| 194 | ····#·add·an·equals·sign·to·non-empty·values | ||
| 195 | ····[·-n·"${defaultValue}"·]·&&·defaultValue="=${defaultValue}" | ||
| 196 | ····#·fix·'type'·if·it's·wrong | ||
| 197 | ····if·grep·-q·-P·"^\\s*(?"'!'"password\\s)[[:alnum:]]+\\s+[[:alnum:]]+\\s+pam_unix.so"·<·"/ | ||
| 198 | etc/pam.d/common-password"·;·then | ||
| 199 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*)[[:alnum:]]+(\\s+[[:alnum: | ||
| 200 | ]]+\\s+pam_unix.so)/\\1password\\2/"·"/etc/pam.d/common-password" | ||
| 201 | ····fi | ||
| 202 | ····#·fix·'control'·if·it's·wrong | ||
| 203 | ····if·grep·-q·-P·"^\\s*password\\s+(?"'!'"\[success=[[:alnum:]].*\])[[:alnum: | ||
| 204 | ]]+\\s+pam_unix.so"·<·"/etc/pam.d/common-password"·;·then | ||
| 205 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+)[[:alnum:]]+(\\s+pam_unix.so)/ | ||
| 206 | \\1\[success=[[:alnum:]].*\]\\2/"·"/etc/pam.d/common-password" | ||
| 207 | ····fi | ||
| 208 | ····#·fix·the·value·for·'option'·if·one·exists·but·does·not·match·'valueRegex' | ||
| 209 | ····if·grep·-q·-P·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so | ||
| 210 | (\\s.+)?\\s+remember(?"'!'"${valueRegex}(\\s|\$))"·<·"/etc/pam.d/common-password"·;·then | ||
| 211 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+\[success=[[:alnum: | ||
| 212 | ]].*\]\\s+pam_unix.so(\\s.+)?\\s)remember=[^[:space:]]*/\\1remember${defaultValue}/"·"/etc/ | ||
| 213 | pam.d/common-password" | ||
| 214 | ····#·add·'option=default'·if·option·is·not·set | ||
| 215 | ····elif·grep·-q·-E·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so"·<·"/etc/ | ||
| 216 | pam.d/common-password"·&& | ||
| 217 | ············grep····-E·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so"·<·"/etc/ | ||
| 218 | pam.d/common-password"·|·grep·-q·-E·-v·"\\sremember(=|\\s|\$)"·;·then | ||
| 219 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+\[success=[[:alnum: | ||
| 220 | ]].*\]\\s+pam_unix.so[^\\n]*)/\\1·remember${defaultValue}/"·"/etc/pam.d/common-password" | ||
| 221 | ····#·add·a·new·entry·if·none·exists | ||
| 222 | ····elif·!·grep·-q·-P·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so | ||
| 223 | (\\s.+)?\\s+remember${valueRegex}(\\s|\$)"·<·"/etc/pam.d/common-password"·;·then | ||
| 224 | ········echo·"password·\[success=[[:alnum:]].*\]·pam_unix.so·remember${defaultValue}"·>>·"/ | ||
| 225 | etc/pam.d/common-password" | ||
| 226 | ····fi | ||
| 227 | else | ||
| 228 | ····echo·"/etc/pam.d/common-password·doesn't·exist"·>&2 | ||
| 229 | fi | ||
| 230 | else | ||
| 231 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 232 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 237 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 189 | -·name:·Gather·the·package·facts | 238 | -·name:·Gather·the·package·facts |
| 190 | ··package_facts: | 239 | ··package_facts: |
| Offset 283, 76 lines modified | Offset 345, 14 lines modified | ||
| 283 | ··-·PCI-DSSv4-8.3.7 | 345 | ··-·PCI-DSSv4-8.3.7 |
| 284 | ··-·accounts_password_pam_unix_remember | 346 | ··-·accounts_password_pam_unix_remember |
| 285 | ··-·configure_strategy | 347 | ··-·configure_strategy |
| 286 | ··-·low_complexity | 348 | ··-·low_complexity |
| 287 | ··-·medium_disruption | 349 | ··-·medium_disruption |
| 288 | ··-·medium_severity | 350 | ··-·medium_severity |
| 289 | ··-·no_reboot_needed | 351 | ··-·no_reboot_needed |
| 290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 291 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 292 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·| | ||
| 293 | grep·-q·'^installed';·then | ||
| 294 | var_password_pam_unix_remember='2' | ||
| 295 | if·[·-e·"/etc/pam.d/common-password"·]·;·then | ||
| 296 | ····valueRegex="$var_password_pam_unix_remember" | ||
| 297 | defaultValue="$var_password_pam_unix_remember" | ||
| 298 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| 299 | ····[·-n·"${valueRegex}"·]·&&·valueRegex="=${valueRegex}" | ||
| 300 | ····#·add·an·equals·sign·to·non-empty·values | ||
| 301 | ····[·-n·"${defaultValue}"·]·&&·defaultValue="=${defaultValue}" | ||
| 302 | ····#·fix·'type'·if·it's·wrong | ||
| 303 | ····if·grep·-q·-P·"^\\s*(?"'!'"password\\s)[[:alnum:]]+\\s+[[:alnum:]]+\\s+pam_unix.so"·<·"/ | ||
| 304 | etc/pam.d/common-password"·;·then | ||
| 305 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*)[[:alnum:]]+(\\s+[[:alnum: | ||
| 306 | ]]+\\s+pam_unix.so)/\\1password\\2/"·"/etc/pam.d/common-password" | ||
| 307 | ····fi | ||
| 308 | ····#·fix·'control'·if·it's·wrong | ||
| 309 | ····if·grep·-q·-P·"^\\s*password\\s+(?"'!'"\[success=[[:alnum:]].*\])[[:alnum: | ||
| 310 | ]]+\\s+pam_unix.so"·<·"/etc/pam.d/common-password"·;·then | ||
| 311 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+)[[:alnum:]]+(\\s+pam_unix.so)/ | ||
| 312 | \\1\[success=[[:alnum:]].*\]\\2/"·"/etc/pam.d/common-password" | ||
| 313 | ····fi | ||
| 314 | ····#·fix·the·value·for·'option'·if·one·exists·but·does·not·match·'valueRegex' | ||
| 315 | ····if·grep·-q·-P·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so | ||
| 316 | (\\s.+)?\\s+remember(?"'!'"${valueRegex}(\\s|\$))"·<·"/etc/pam.d/common-password"·;·then | ||
| 317 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+\[success=[[:alnum: | ||
| 318 | ]].*\]\\s+pam_unix.so(\\s.+)?\\s)remember=[^[:space:]]*/\\1remember${defaultValue}/"·"/etc/ | ||
| 319 | pam.d/common-password" | ||
| 320 | ····#·add·'option=default'·if·option·is·not·set | ||
| 321 | ····elif·grep·-q·-E·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so"·<·"/etc/ | ||
| Max diff block lines reached; 86401/93024 bytes (92.88%) of diff not shown. | |||
| Offset 15996, 146 lines modified | Offset 15996, 146 lines modified | ||
| 0003e7b0:·6765·743d·2223·6964·6d34·3033·3122·2074··get="#idm4031"·t | 0003e7b0:·6765·743d·2223·6964·6d34·3033·3122·2074··get="#idm4031"·t | ||
| 0003e7c0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003e7c0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003e7d0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003e7d0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003e7e0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003e7e0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003e7f0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003e7f0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003e800:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003e800:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003e810:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003e810:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003e820:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003e830:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003e840:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003e850:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003e860:·3d22·6964·6d34·3033·3122·3e3c·7461·626c··="idm4031"><tabl | |||
| 0003e870:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003e880:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003e890:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003e8a0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003e8b0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003e8c0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003e8d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003e8e0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003e8f0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003e900:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003e910:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003e920:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003e930:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003e940:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 0003e950:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003e960:·636f·6465·3e0a·666f·7220·6620·696e·202f··code>.for·f·in·/ | |||
| 0003e970:·6574·632f·7375·646f·6572·7320·2f65·7463··etc/sudoers·/etc | |||
| 0003e980:·2f73·7564·6f65·7273·2e64·2f2a·203b·2064··/sudoers.d/*·;·d | |||
| 0003e990:·6f0a·2020·6966·205b·2021·202d·6520·2224··o.··if·[·!·-e·"$ | |||
| 0003e9a0:·6622·205d·203b·2074·6865·6e0a·2020·2020··f"·]·;·then.···· | |||
| 0003e9b0:·636f·6e74·696e·7565·0a20·2066·690a·2020··continue.··fi.·· | |||
| 0003e9c0:·6d61·7463·6869·6e67·5f6c·6973·743d·2428··matching_list=$( | |||
| 0003e9d0:·6772·6570·202d·5020·275e·283f·2123·292e··grep·-P·'^(?!#). | |||
| 0003e9e0:·2a5b·5c73·5d2b·5c21·6175·7468·656e·7469··*[\s]+\!authenti | |||
| 0003e9f0:·6361·7465·2e2a·2427·2024·6620·7c20·756e··cate.*$'·$f·|·un | |||
| 0003ea00:·6971·2029·0a20·2069·6620·2120·7465·7374··iq·).··if·!·test | |||
| 0003ea10:·202d·7a20·2224·6d61·7463·6869·6e67·5f6c···-z·"$matching_l | |||
| 0003ea20:·6973·7422·3b20·7468·656e·0a20·2020·2077··ist";·then.····w | |||
| 0003ea30:·6869·6c65·2049·4653·3d20·7265·6164·202d··hile·IFS=·read·- | |||
| 0003ea40:·7220·656e·7472·793b·2064·6f0a·2020·2020··r·entry;·do.···· | |||
| 0003ea50:·2020·2320·636f·6d6d·656e·7420·6f75·7420····#·comment·out· | |||
| 0003ea60:·2221·6175·7468·656e·7469·6361·7465·2220··"!authenticate"· | |||
| 0003ea70:·6d61·7463·6865·7320·746f·2070·7265·7365··matches·to·prese | |||
| 0003ea80:·7276·6520·7573·6572·2064·6174·610a·2020··rve·user·data.·· | |||
| 0003ea90:·2020·2020·7365·6420·2d69·2022·732f·5e24······sed·-i·"s/^$ | |||
| 0003eaa0:·7b65·6e74·7279·7d24·2f23·2026·616d·703b··{entry}$/#·& | |||
| 0003eab0:·2f67·2220·2466·0a20·2020·2064·6f6e·6520··/g"·$f.····done· | |||
| 0003eac0:·266c·743b·266c·743b·266c·743b·2022·246d··<<<·"$m | |||
| 0003ead0:·6174·6368·696e·675f·6c69·7374·220a·0a20··atching_list"..· | |||
| 0003eae0:·2020·202f·7573·722f·7362·696e·2f76·6973·····/usr/sbin/vis | |||
| 0003eaf0:·7564·6f20·2d63·6620·2466·2026·616d·703b··udo·-cf·$f·& | |||
| 0003eb00:·2667·743b·202f·6465·762f·6e75·6c6c·207c··>·/dev/null·| | |||
| 0003eb10:·7c20·6563·686f·2022·4661·696c·2074·6f20··|·echo·"Fail·to· | |||
| 0003eb20:·7661·6c69·6461·7465·2024·6620·7769·7468··validate·$f·with | |||
| 0003eb30:·2076·6973·7564·6f22·0a20·2066·690a·646f···visudo".··fi.do | |||
| 0003eb40:·6e65·0a3c·2f63·6f64·653e·3c2f·7072·653e··ne.</code></pre> | |||
| 0003eb50:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003eb60:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003eb70:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003eb80:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003eb90:·6765·743d·2223·6964·6d34·3033·3222·2074··get="#idm4032"·t | |||
| 0003eba0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ebb0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ebc0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ebd0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ebe0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003ebf0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003e | 0003ec00:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003e | 0003ec10:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003e | 0003ec20:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003e | 0003ec30:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003e | 0003ec40:·2069·643d·2269·646d·3430·3332·223e·3c74···id="idm4032"><t | ||
| 0003e | 0003ec50:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003e | 0003ec60:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003e | 0003ec70:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003e | 0003ec80:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003e8b0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003e8c0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003e8d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003e8e0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003e8f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003e900:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003e910:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003e920:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003e930:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003e940:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003e950:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003e960:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003e970:·4669·6e64·202f·6574·632f·7375·646f·6572··Find·/etc/sudoer | |||
| 0003e980:·732e·642f·2066·696c·6573·0a20·2061·6e73··s.d/·files.··ans | |||
| 0003e990:·6962·6c65·2e62·7569·6c74·696e·2e66·696e··ible.builtin.fin | |||
| 0003e9a0:·643a·0a20·2020·2070·6174·6873·3a0a·2020··d:.····paths:.·· | |||
| 0003e9b0:·2020·2d20·2f65·7463·2f73·7564·6f65·7273····-·/etc/sudoers | |||
| 0003e9c0:·2e64·2f0a·2020·7265·6769·7374·6572·3a20··.d/.··register:· | |||
| 0003e9d0:·7375·646f·6572·730a·2020·7461·6773·3a0a··sudoers.··tags:. | |||
| 0003e9e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003e9f0:·434d·2d36·2861·290a·2020·2d20·4e49·5354··CM-6(a).··-·NIST | |||
| 0003ea00:·2d38·3030·2d35·332d·4941·2d31·310a·2020··-800-53-IA-11.·· | |||
| 0003ea10:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003ea20:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003ea30:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003ea40:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003ea50:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003ea60:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | |||
| 0003ea70:·6779·0a20·202d·2073·7564·6f5f·7265·6d6f··gy.··-·sudo_remo | |||
| 0003ea80:·7665·5f6e·6f5f·6175·7468·656e·7469·6361··ve_no_authentica | |||
| 0003ea90:·7465·0a0a·2d20·6e61·6d65·3a20·5265·6d6f··te..-·name:·Remo | |||
| 0003eaa0:·7665·206c·696e·6573·2063·6f6e·7461·696e··ve·lines·contain | |||
| 0003eab0:·696e·6720·2161·7574·6865·6e74·6963·6174··ing·!authenticat | |||
| 0003eac0:·6520·6672·6f6d·2073·7564·6f65·7273·2066··e·from·sudoers·f | |||
| 0003ead0:·696c·6573·0a20·2061·6e73·6962·6c65·2e62··iles.··ansible.b | |||
| 0003eae0:·7569·6c74·696e·2e72·6570·6c61·6365·3a0a··uiltin.replace:. | |||
| 0003eaf0:·2020·2020·7265·6765·7870·3a20·285e·283f······regexp:·(^(? | |||
| 0003eb00:·2123·292e·2a5b·5c73·5d2b·5c21·6175·7468··!#).*[\s]+\!auth | |||
| 0003eb10:·656e·7469·6361·7465·2e2a·2429·0a20·2020··enticate.*$).··· | |||
| 0003eb20:·2072·6570·6c61·6365·3a20·2723·205c·6726···replace:·'#·\g& | |||
| 0003eb30:·6c74·3b31·2667·743b·270a·2020·2020·7061··lt;1>'.····pa | |||
| 0003eb40:·7468·3a20·277b·7b20·6974·656d·2e70·6174··th:·'{{·item.pat | |||
| 0003eb50:·6820·7d7d·270a·2020·2020·7661·6c69·6461··h·}}'.····valida | |||
| 0003eb60:·7465·3a20·2f75·7372·2f73·6269·6e2f·7669··te:·/usr/sbin/vi | |||
| 0003eb70:·7375·646f·202d·6366·2025·730a·2020·7769··sudo·-cf·%s.··wi | |||
| 0003eb80:·7468·5f69·7465·6d73·3a0a·2020·2d20·7061··th_items:.··-·pa | |||
| 0003eb90:·7468·3a20·2f65·7463·2f73·7564·6f65·7273··th:·/etc/sudoers | |||
| 0003eba0:·0a20·202d·2027·7b7b·2073·7564·6f65·7273··.··-·'{{·sudoers | |||
| 0003ebb0:·2e66·696c·6573·207d·7d27·0a20·2074·6167··.files·}}'.··tag | |||
| Max diff block lines reached; 1103380/1122176 bytes (98.33%) of diff not shown. | |||
| Offset 227, 14 lines modified | Offset 227, 35 lines modified | ||
| 227 | ···························1.7,·SR·1.8,·SR·1.9 | 227 | ···························1.7,·SR·1.8,·SR·1.9 |
| 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 233 | ···························SRG-OS-000373-GPOS-00158 | 233 | ···························SRG-OS-000373-GPOS-00158 |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 239 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 240 | ··if·[·!·-e·"$f"·]·;·then | ||
| 241 | ····continue | ||
| 242 | ··fi | ||
| 243 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 244 | ··if·!·test·-z·"$matching_list";·then | ||
| 245 | ····while·IFS=·read·-r·entry;·do | ||
| 246 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 247 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 248 | ····done·<<<·"$matching_list" | ||
| 249 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 250 | visudo" | ||
| 251 | ··fi | ||
| 252 | done | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 253 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 254 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 255 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 256 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 257 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Find·/etc/sudoers.d/·files | 258 | -·name:·Find·/etc/sudoers.d/·files |
| 240 | ··ansible.builtin.find: | 259 | ··ansible.builtin.find: |
| Offset 265, 35 lines modified | Offset 286, 14 lines modified | ||
| 265 | ··-·NIST-800-53-IA-11 | 286 | ··-·NIST-800-53-IA-11 |
| 266 | ··-·low_complexity | 287 | ··-·low_complexity |
| 267 | ··-·low_disruption | 288 | ··-·low_disruption |
| 268 | ··-·medium_severity | 289 | ··-·medium_severity |
| 269 | ··-·no_reboot_needed | 290 | ··-·no_reboot_needed |
| 270 | ··-·restrict_strategy | 291 | ··-·restrict_strategy |
| 271 | ··-·sudo_remove_no_authenticate | 292 | ··-·sudo_remove_no_authenticate |
| 272 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 273 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 274 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 275 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 276 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 277 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 278 | ··if·[·!·-e·"$f"·]·;·then | ||
| 279 | ····continue | ||
| 280 | ··fi | ||
| 281 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 282 | ··if·!·test·-z·"$matching_list";·then | ||
| 283 | ····while·IFS=·read·-r·entry;·do | ||
| 284 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 285 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 286 | ····done·<<<·"$matching_list" | ||
| 287 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 288 | visudo" | ||
| 289 | ··fi | ||
| 290 | done | ||
| 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 292 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 293 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 294 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 295 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 296 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 297 | ············Without·re-authentication,·users·may·access·resources·or·perform | 299 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 314, 14 lines modified | Offset 314, 35 lines modified | ||
| 314 | ···························1.7,·SR·1.8,·SR·1.9 | 314 | ···························1.7,·SR·1.8,·SR·1.9 |
| 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 320 | ···························SRG-OS-000373-GPOS-00158 | 320 | ···························SRG-OS-000373-GPOS-00158 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 327 | ··if·[·!·-e·"$f"·]·;·then | ||
| 328 | ····continue | ||
| 329 | ··fi | ||
| 330 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 331 | ··if·!·test·-z·"$matching_list";·then | ||
| 332 | ····while·IFS=·read·-r·entry;·do | ||
| 333 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 334 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 335 | ····done·<<<·"$matching_list" | ||
| 336 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 337 | visudo" | ||
| 338 | ··fi | ||
| 339 | done | ||
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 340 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 341 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 342 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 343 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 344 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 326 | -·name:·Find·/etc/sudoers.d/·files | 345 | -·name:·Find·/etc/sudoers.d/·files |
| 327 | ··ansible.builtin.find: | 346 | ··ansible.builtin.find: |
| Offset 352, 35 lines modified | Offset 373, 14 lines modified | ||
| 352 | ··-·NIST-800-53-IA-11 | 373 | ··-·NIST-800-53-IA-11 |
| 353 | ··-·low_complexity | 374 | ··-·low_complexity |
| 354 | ··-·low_disruption | 375 | ··-·low_disruption |
| 355 | ··-·medium_severity | 376 | ··-·medium_severity |
| 356 | ··-·no_reboot_needed | 377 | ··-·no_reboot_needed |
| 357 | ··-·restrict_strategy | 378 | ··-·restrict_strategy |
| 358 | ··-·sudo_remove_nopasswd | 379 | ··-·sudo_remove_nopasswd |
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 360 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 361 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 362 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 363 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 364 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 365 | ··if·[·!·-e·"$f"·]·;·then | ||
| 366 | ····continue | ||
| 367 | ··fi | ||
| 368 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 369 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 130126/135574 bytes (95.98%) of diff not shown. | |||
| Offset 16016, 146 lines modified | Offset 16016, 146 lines modified | ||
| 0003e8f0:·2d74·6172·6765·743d·2223·6964·6d34·3033··-target="#idm403 | 0003e8f0:·2d74·6172·6765·743d·2223·6964·6d34·3033··-target="#idm403 | ||
| 0003e900:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | 0003e900:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 0003e910:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003e910:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003e920:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003e920:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003e930:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003e930:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003e940:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003e940:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003e950:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003e950:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003e960:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003e970:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003e980:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003e990:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003e9a0:·2220·6964·3d22·6964·6d34·3033·3122·3e3c··"·id="idm4031">< | |||
| 0003e9b0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003e9c0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003e9d0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003e9e0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003e9f0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003ea00:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003ea10:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ea20:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003ea30:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ea40:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003ea50:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003ea60:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ea70:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003ea80:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | |||
| 0003ea90:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003eaa0:·7265·3e3c·636f·6465·3e0a·666f·7220·6620··re><code>.for·f· | |||
| 0003eab0:·696e·202f·6574·632f·7375·646f·6572·7320··in·/etc/sudoers· | |||
| 0003eac0:·2f65·7463·2f73·7564·6f65·7273·2e64·2f2a··/etc/sudoers.d/* | |||
| 0003ead0:·203b·2064·6f0a·2020·6966·205b·2021·202d···;·do.··if·[·!·- | |||
| 0003eae0:·6520·2224·6622·205d·203b·2074·6865·6e0a··e·"$f"·]·;·then. | |||
| 0003eaf0:·2020·2020·636f·6e74·696e·7565·0a20·2066······continue.··f | |||
| 0003eb00:·690a·2020·6d61·7463·6869·6e67·5f6c·6973··i.··matching_lis | |||
| 0003eb10:·743d·2428·6772·6570·202d·5020·275e·283f··t=$(grep·-P·'^(? | |||
| 0003eb20:·2123·292e·2a5b·5c73·5d2b·5c21·6175·7468··!#).*[\s]+\!auth | |||
| 0003eb30:·656e·7469·6361·7465·2e2a·2427·2024·6620··enticate.*$'·$f· | |||
| 0003eb40:·7c20·756e·6971·2029·0a20·2069·6620·2120··|·uniq·).··if·!· | |||
| 0003eb50:·7465·7374·202d·7a20·2224·6d61·7463·6869··test·-z·"$matchi | |||
| 0003eb60:·6e67·5f6c·6973·7422·3b20·7468·656e·0a20··ng_list";·then.· | |||
| 0003eb70:·2020·2077·6869·6c65·2049·4653·3d20·7265·····while·IFS=·re | |||
| 0003eb80:·6164·202d·7220·656e·7472·793b·2064·6f0a··ad·-r·entry;·do. | |||
| 0003eb90:·2020·2020·2020·2320·636f·6d6d·656e·7420········#·comment· | |||
| 0003eba0:·6f75·7420·2221·6175·7468·656e·7469·6361··out·"!authentica | |||
| 0003ebb0:·7465·2220·6d61·7463·6865·7320·746f·2070··te"·matches·to·p | |||
| 0003ebc0:·7265·7365·7276·6520·7573·6572·2064·6174··reserve·user·dat | |||
| 0003ebd0:·610a·2020·2020·2020·7365·6420·2d69·2022··a.······sed·-i·" | |||
| 0003ebe0:·732f·5e24·7b65·6e74·7279·7d24·2f23·2026··s/^${entry}$/#·& | |||
| 0003ebf0:·616d·703b·2f67·2220·2466·0a20·2020·2064··amp;/g"·$f.····d | |||
| 0003ec00:·6f6e·6520·266c·743b·266c·743b·266c·743b··one·<<< | |||
| 0003ec10:·2022·246d·6174·6368·696e·675f·6c69·7374···"$matching_list | |||
| 0003ec20:·220a·0a20·2020·202f·7573·722f·7362·696e··"..····/usr/sbin | |||
| 0003ec30:·2f76·6973·7564·6f20·2d63·6620·2466·2026··/visudo·-cf·$f·& | |||
| 0003ec40:·616d·703b·2667·743b·202f·6465·762f·6e75··amp;>·/dev/nu | |||
| 0003ec50:·6c6c·207c·7c20·6563·686f·2022·4661·696c··ll·||·echo·"Fail | |||
| 0003ec60:·2074·6f20·7661·6c69·6461·7465·2024·6620···to·validate·$f· | |||
| 0003ec70:·7769·7468·2076·6973·7564·6f22·0a20·2066··with·visudo".··f | |||
| 0003ec80:·690a·646f·6e65·0a3c·2f63·6f64·653e·3c2f··i.done.</code></ | |||
| 0003ec90:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003eca0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ecb0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003ecc0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003ecd0:·2d74·6172·6765·743d·2223·6964·6d34·3033··-target="#idm403 | |||
| 0003ece0:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003ecf0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003ed00:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003ed10:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003ed20:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003ed30:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003e | 0003ed40:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003e | 0003ed50:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003e | 0003ed60:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003e | 0003ed70:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003e | 0003ed80:·7073·6522·2069·643d·2269·646d·3430·3332··pse"·id="idm4032 | ||
| 0003e | 0003ed90:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003e9c0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003e9d0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003e9e0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003e9f0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003ea00:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003ea10:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ea20:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003ea30:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ea40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003ea50:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003ea60:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003ea70:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003ea80:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | |||
| 0003ea90:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003eaa0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003eab0:·6d65·3a20·4669·6e64·202f·6574·632f·7375··me:·Find·/etc/su | |||
| 0003eac0:·646f·6572·732e·642f·2066·696c·6573·0a20··doers.d/·files.· | |||
| 0003ead0:·2061·6e73·6962·6c65·2e62·7569·6c74·696e···ansible.builtin | |||
| 0003eae0:·2e66·696e·643a·0a20·2020·2070·6174·6873··.find:.····paths | |||
| 0003eaf0:·3a0a·2020·2020·2d20·2f65·7463·2f73·7564··:.····-·/etc/sud | |||
| 0003eb00:·6f65·7273·2e64·2f0a·2020·7265·6769·7374··oers.d/.··regist | |||
| 0003eb10:·6572·3a20·7375·646f·6572·730a·2020·7461··er:·sudoers.··ta | |||
| 0003eb20:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | |||
| 0003eb30:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003eb40:·4e49·5354·2d38·3030·2d35·332d·4941·2d31··NIST-800-53-IA-1 | |||
| 0003eb50:·310a·2020·2d20·6c6f·775f·636f·6d70·6c65··1.··-·low_comple | |||
| 0003eb60:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003eb70:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003eb80:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003eb90:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003eba0:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | |||
| 0003ebb0:·7261·7465·6779·0a20·202d·2073·7564·6f5f··rategy.··-·sudo_ | |||
| 0003ebc0:·7265·6d6f·7665·5f6e·6f5f·6175·7468·656e··remove_no_authen | |||
| 0003ebd0:·7469·6361·7465·0a0a·2d20·6e61·6d65·3a20··ticate..-·name:· | |||
| 0003ebe0:·5265·6d6f·7665·206c·696e·6573·2063·6f6e··Remove·lines·con | |||
| 0003ebf0:·7461·696e·696e·6720·2161·7574·6865·6e74··taining·!authent | |||
| 0003ec00:·6963·6174·6520·6672·6f6d·2073·7564·6f65··icate·from·sudoe | |||
| 0003ec10:·7273·2066·696c·6573·0a20·2061·6e73·6962··rs·files.··ansib | |||
| 0003ec20:·6c65·2e62·7569·6c74·696e·2e72·6570·6c61··le.builtin.repla | |||
| 0003ec30:·6365·3a0a·2020·2020·7265·6765·7870·3a20··ce:.····regexp:· | |||
| 0003ec40:·285e·283f·2123·292e·2a5b·5c73·5d2b·5c21··(^(?!#).*[\s]+\! | |||
| 0003ec50:·6175·7468·656e·7469·6361·7465·2e2a·2429··authenticate.*$) | |||
| 0003ec60:·0a20·2020·2072·6570·6c61·6365·3a20·2723··.····replace:·'# | |||
| 0003ec70:·205c·6726·6c74·3b31·2667·743b·270a·2020···\g<1>'.·· | |||
| 0003ec80:·2020·7061·7468·3a20·277b·7b20·6974·656d····path:·'{{·item | |||
| 0003ec90:·2e70·6174·6820·7d7d·270a·2020·2020·7661··.path·}}'.····va | |||
| 0003eca0:·6c69·6461·7465·3a20·2f75·7372·2f73·6269··lidate:·/usr/sbi | |||
| 0003ecb0:·6e2f·7669·7375·646f·202d·6366·2025·730a··n/visudo·-cf·%s. | |||
| 0003ecc0:·2020·7769·7468·5f69·7465·6d73·3a0a·2020····with_items:.·· | |||
| 0003ecd0:·2d20·7061·7468·3a20·2f65·7463·2f73·7564··-·path:·/etc/sud | |||
| 0003ece0:·6f65·7273·0a20·202d·2027·7b7b·2073·7564··oers.··-·'{{·sud | |||
| 0003ecf0:·6f65·7273·2e66·696c·6573·207d·7d27·0a20··oers.files·}}'.· | |||
| Max diff block lines reached; 1243728/1262524 bytes (98.51%) of diff not shown. | |||
| Offset 231, 14 lines modified | Offset 231, 35 lines modified | ||
| 231 | ···························1.7,·SR·1.8,·SR·1.9 | 231 | ···························1.7,·SR·1.8,·SR·1.9 |
| 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 237 | ···························SRG-OS-000373-GPOS-00158 | 237 | ···························SRG-OS-000373-GPOS-00158 |
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 243 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 244 | ··if·[·!·-e·"$f"·]·;·then | ||
| 245 | ····continue | ||
| 246 | ··fi | ||
| 247 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 248 | ··if·!·test·-z·"$matching_list";·then | ||
| 249 | ····while·IFS=·read·-r·entry;·do | ||
| 250 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 251 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 252 | ····done·<<<·"$matching_list" | ||
| 253 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 254 | visudo" | ||
| 255 | ··fi | ||
| 256 | done | ||
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 258 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 259 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 260 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 261 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 243 | -·name:·Find·/etc/sudoers.d/·files | 262 | -·name:·Find·/etc/sudoers.d/·files |
| 244 | ··ansible.builtin.find: | 263 | ··ansible.builtin.find: |
| Offset 269, 35 lines modified | Offset 290, 14 lines modified | ||
| 269 | ··-·NIST-800-53-IA-11 | 290 | ··-·NIST-800-53-IA-11 |
| 270 | ··-·low_complexity | 291 | ··-·low_complexity |
| 271 | ··-·low_disruption | 292 | ··-·low_disruption |
| 272 | ··-·medium_severity | 293 | ··-·medium_severity |
| 273 | ··-·no_reboot_needed | 294 | ··-·no_reboot_needed |
| 274 | ··-·restrict_strategy | 295 | ··-·restrict_strategy |
| 275 | ··-·sudo_remove_no_authenticate | 296 | ··-·sudo_remove_no_authenticate |
| 276 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 277 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 278 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 279 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 280 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 281 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 282 | ··if·[·!·-e·"$f"·]·;·then | ||
| 283 | ····continue | ||
| 284 | ··fi | ||
| 285 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 286 | ··if·!·test·-z·"$matching_list";·then | ||
| 287 | ····while·IFS=·read·-r·entry;·do | ||
| 288 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 289 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 290 | ····done·<<<·"$matching_list" | ||
| 291 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 292 | visudo" | ||
| 293 | ··fi | ||
| 294 | done | ||
| 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 298 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 299 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 300 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 301 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 302 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 301 | ············Without·re-authentication,·users·may·access·resources·or·perform | 303 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 318, 14 lines modified | Offset 318, 35 lines modified | ||
| 318 | ···························1.7,·SR·1.8,·SR·1.9 | 318 | ···························1.7,·SR·1.8,·SR·1.9 |
| 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 324 | ···························SRG-OS-000373-GPOS-00158 | 324 | ···························SRG-OS-000373-GPOS-00158 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 330 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 331 | ··if·[·!·-e·"$f"·]·;·then | ||
| 332 | ····continue | ||
| 333 | ··fi | ||
| 334 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 335 | ··if·!·test·-z·"$matching_list";·then | ||
| 336 | ····while·IFS=·read·-r·entry;·do | ||
| 337 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 338 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 339 | ····done·<<<·"$matching_list" | ||
| 340 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 341 | visudo" | ||
| 342 | ··fi | ||
| 343 | done | ||
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 330 | -·name:·Find·/etc/sudoers.d/·files | 349 | -·name:·Find·/etc/sudoers.d/·files |
| 331 | ··ansible.builtin.find: | 350 | ··ansible.builtin.find: |
| Offset 356, 35 lines modified | Offset 377, 14 lines modified | ||
| 356 | ··-·NIST-800-53-IA-11 | 377 | ··-·NIST-800-53-IA-11 |
| 357 | ··-·low_complexity | 378 | ··-·low_complexity |
| 358 | ··-·low_disruption | 379 | ··-·low_disruption |
| 359 | ··-·medium_severity | 380 | ··-·medium_severity |
| 360 | ··-·no_reboot_needed | 381 | ··-·no_reboot_needed |
| 361 | ··-·restrict_strategy | 382 | ··-·restrict_strategy |
| 362 | ··-·sudo_remove_nopasswd | 383 | ··-·sudo_remove_nopasswd |
| 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 364 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 365 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 366 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 367 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 368 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 369 | ··if·[·!·-e·"$f"·]·;·then | ||
| 370 | ····continue | ||
| 371 | ··fi | ||
| 372 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 373 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 146364/151812 bytes (96.41%) of diff not shown. | |||
| Offset 14776, 146 lines modified | Offset 14776, 146 lines modified | ||
| 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | ||
| 00039b80:·3033·3122·2074·6162·696e·6465·783d·2230··031"·tabindex="0 | 00039b80:·3033·3122·2074·6162·696e·6465·783d·2230··031"·tabindex="0 | ||
| 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00039be0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 00039bf0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00039c00:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039c10:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039c20:·7365·2220·6964·3d22·6964·6d34·3033·3122··se"·id="idm4031" | |||
| 00039c30:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039c40:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039c50:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00039c60:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00039c70:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00039c80:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00039c90:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039ca0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00039cb0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039cc0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00039cd0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039ce0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039cf0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039d00:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 00039d10:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00039d20:·3c70·7265·3e3c·636f·6465·3e0a·666f·7220··<pre><code>.for· | |||
| 00039d30:·6620·696e·202f·6574·632f·7375·646f·6572··f·in·/etc/sudoer | |||
| 00039d40:·7320·2f65·7463·2f73·7564·6f65·7273·2e64··s·/etc/sudoers.d | |||
| 00039d50:·2f2a·203b·2064·6f0a·2020·6966·205b·2021··/*·;·do.··if·[·! | |||
| 00039d60:·202d·6520·2224·6622·205d·203b·2074·6865···-e·"$f"·]·;·the | |||
| 00039d70:·6e0a·2020·2020·636f·6e74·696e·7565·0a20··n.····continue.· | |||
| 00039d80:·2066·690a·2020·6d61·7463·6869·6e67·5f6c···fi.··matching_l | |||
| 00039d90:·6973·743d·2428·6772·6570·202d·5020·275e··ist=$(grep·-P·'^ | |||
| 00039da0:·283f·2123·292e·2a5b·5c73·5d2b·5c21·6175··(?!#).*[\s]+\!au | |||
| 00039db0:·7468·656e·7469·6361·7465·2e2a·2427·2024··thenticate.*$'·$ | |||
| 00039dc0:·6620·7c20·756e·6971·2029·0a20·2069·6620··f·|·uniq·).··if· | |||
| 00039dd0:·2120·7465·7374·202d·7a20·2224·6d61·7463··!·test·-z·"$matc | |||
| 00039de0:·6869·6e67·5f6c·6973·7422·3b20·7468·656e··hing_list";·then | |||
| 00039df0:·0a20·2020·2077·6869·6c65·2049·4653·3d20··.····while·IFS=· | |||
| 00039e00:·7265·6164·202d·7220·656e·7472·793b·2064··read·-r·entry;·d | |||
| 00039e10:·6f0a·2020·2020·2020·2320·636f·6d6d·656e··o.······#·commen | |||
| 00039e20:·7420·6f75·7420·2221·6175·7468·656e·7469··t·out·"!authenti | |||
| 00039e30:·6361·7465·2220·6d61·7463·6865·7320·746f··cate"·matches·to | |||
| 00039e40:·2070·7265·7365·7276·6520·7573·6572·2064···preserve·user·d | |||
| 00039e50:·6174·610a·2020·2020·2020·7365·6420·2d69··ata.······sed·-i | |||
| 00039e60:·2022·732f·5e24·7b65·6e74·7279·7d24·2f23···"s/^${entry}$/# | |||
| 00039e70:·2026·616d·703b·2f67·2220·2466·0a20·2020···&/g"·$f.··· | |||
| 00039e80:·2064·6f6e·6520·266c·743b·266c·743b·266c···done·<<&l | |||
| 00039e90:·743b·2022·246d·6174·6368·696e·675f·6c69··t;·"$matching_li | |||
| 00039ea0:·7374·220a·0a20·2020·202f·7573·722f·7362··st"..····/usr/sb | |||
| 00039eb0:·696e·2f76·6973·7564·6f20·2d63·6620·2466··in/visudo·-cf·$f | |||
| 00039ec0:·2026·616d·703b·2667·743b·202f·6465·762f···&>·/dev/ | |||
| 00039ed0:·6e75·6c6c·207c·7c20·6563·686f·2022·4661··null·||·echo·"Fa | |||
| 00039ee0:·696c·2074·6f20·7661·6c69·6461·7465·2024··il·to·validate·$ | |||
| 00039ef0:·6620·7769·7468·2076·6973·7564·6f22·0a20··f·with·visudo".· | |||
| 00039f00:·2066·690a·646f·6e65·0a3c·2f63·6f64·653e···fi.done.</code> | |||
| 00039f10:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00039f20:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00039f30:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00039f40:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00039f50:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | |||
| 00039f60:·3033·3222·2074·6162·696e·6465·783d·2230··032"·tabindex="0 | |||
| 00039f70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00039f80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00039f90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00039fa0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00039fb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00039 | 00039fc0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 00039 | 00039fd0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 00039 | 00039fe0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 00039 | 00039ff0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 00039c20:·6c61·7073·6522·2069·643d·2269·646d·3430··lapse"·id="idm40 | |||
| 00039c30:·3331·223e·3c74·6162·6c65·2063·6c61·7373··31"><table·class | |||
| 00039c40:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00039c50:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00039c60:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00039c70:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00039c80:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00039c90:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00039ca0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00039cb0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00039cc0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039cd0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00039ce0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00039cf0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00039d00:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 00039d10:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 00039d20:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 00039d30:·6e61·6d65·3a20·4669·6e64·202f·6574·632f··name:·Find·/etc/ | |||
| 00039d40:·7375·646f·6572·732e·642f·2066·696c·6573··sudoers.d/·files | |||
| 00039d50:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | |||
| 00039d60:·696e·2e66·696e·643a·0a20·2020·2070·6174··in.find:.····pat | |||
| 00039d70:·6873·3a0a·2020·2020·2d20·2f65·7463·2f73··hs:.····-·/etc/s | |||
| 00039d80:·7564·6f65·7273·2e64·2f0a·2020·7265·6769··udoers.d/.··regi | |||
| 00039d90:·7374·6572·3a20·7375·646f·6572·730a·2020··ster:·sudoers.·· | |||
| 00039da0:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 00039db0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 00039dc0:·2d20·4e49·5354·2d38·3030·2d35·332d·4941··-·NIST-800-53-IA | |||
| 00039dd0:·2d31·310a·2020·2d20·6c6f·775f·636f·6d70··-11.··-·low_comp | |||
| 00039de0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 00039df0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 00039e00:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 00039e10:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 00039e20:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | |||
| 00039e30:·7374·7261·7465·6779·0a20·202d·2073·7564··strategy.··-·sud | |||
| 00039e40:·6f5f·7265·6d6f·7665·5f6e·6f5f·6175·7468··o_remove_no_auth | |||
| 00039e50:·656e·7469·6361·7465·0a0a·2d20·6e61·6d65··enticate..-·name | |||
| 00039e60:·3a20·5265·6d6f·7665·206c·696e·6573·2063··:·Remove·lines·c | |||
| 00039e70:·6f6e·7461·696e·696e·6720·2161·7574·6865··ontaining·!authe | |||
| 00039e80:·6e74·6963·6174·6520·6672·6f6d·2073·7564··nticate·from·sud | |||
| 00039e90:·6f65·7273·2066·696c·6573·0a20·2061·6e73··oers·files.··ans | |||
| 00039ea0:·6962·6c65·2e62·7569·6c74·696e·2e72·6570··ible.builtin.rep | |||
| 00039eb0:·6c61·6365·3a0a·2020·2020·7265·6765·7870··lace:.····regexp | |||
| 00039ec0:·3a20·285e·283f·2123·292e·2a5b·5c73·5d2b··:·(^(?!#).*[\s]+ | |||
| 00039ed0:·5c21·6175·7468·656e·7469·6361·7465·2e2a··\!authenticate.* | |||
| 00039ee0:·2429·0a20·2020·2072·6570·6c61·6365·3a20··$).····replace:· | |||
| 00039ef0:·2723·205c·6726·6c74·3b31·2667·743b·270a··'#·\g<1>'. | |||
| 00039f00:·2020·2020·7061·7468·3a20·277b·7b20·6974······path:·'{{·it | |||
| 00039f10:·656d·2e70·6174·6820·7d7d·270a·2020·2020··em.path·}}'.···· | |||
| 00039f20:·7661·6c69·6461·7465·3a20·2f75·7372·2f73··validate:·/usr/s | |||
| 00039f30:·6269·6e2f·7669·7375·646f·202d·6366·2025··bin/visudo·-cf·% | |||
| 00039f40:·730a·2020·7769·7468·5f69·7465·6d73·3a0a··s.··with_items:. | |||
| 00039f50:·2020·2d20·7061·7468·3a20·2f65·7463·2f73····-·path:·/etc/s | |||
| 00039f60:·7564·6f65·7273·0a20·202d·2027·7b7b·2073··udoers.··-·'{{·s | |||
| 00039f70:·7564·6f65·7273·2e66·696c·6573·207d·7d27··udoers.files·}}' | |||
| Max diff block lines reached; 361872/380668 bytes (95.06%) of diff not shown. | |||
| Offset 91, 14 lines modified | Offset 91, 35 lines modified | ||
| 91 | ···························1.7,·SR·1.8,·SR·1.9 | 91 | ···························1.7,·SR·1.8,·SR·1.9 |
| 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 97 | ···························SRG-OS-000373-GPOS-00158 | 97 | ···························SRG-OS-000373-GPOS-00158 |
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 103 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 104 | ··if·[·!·-e·"$f"·]·;·then | ||
| 105 | ····continue | ||
| 106 | ··fi | ||
| 107 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 108 | ··if·!·test·-z·"$matching_list";·then | ||
| 109 | ····while·IFS=·read·-r·entry;·do | ||
| 110 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 111 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 112 | ····done·<<<·"$matching_list" | ||
| 113 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 114 | visudo" | ||
| 115 | ··fi | ||
| 116 | done | ||
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 103 | -·name:·Find·/etc/sudoers.d/·files | 122 | -·name:·Find·/etc/sudoers.d/·files |
| 104 | ··ansible.builtin.find: | 123 | ··ansible.builtin.find: |
| Offset 129, 35 lines modified | Offset 150, 14 lines modified | ||
| 129 | ··-·NIST-800-53-IA-11 | 150 | ··-·NIST-800-53-IA-11 |
| 130 | ··-·low_complexity | 151 | ··-·low_complexity |
| 131 | ··-·low_disruption | 152 | ··-·low_disruption |
| 132 | ··-·medium_severity | 153 | ··-·medium_severity |
| 133 | ··-·no_reboot_needed | 154 | ··-·no_reboot_needed |
| 134 | ··-·restrict_strategy | 155 | ··-·restrict_strategy |
| 135 | ··-·sudo_remove_no_authenticate | 156 | ··-·sudo_remove_no_authenticate |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 141 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 142 | ··if·[·!·-e·"$f"·]·;·then | ||
| 143 | ····continue | ||
| 144 | ··fi | ||
| 145 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 146 | ··if·!·test·-z·"$matching_list";·then | ||
| 147 | ····while·IFS=·read·-r·entry;·do | ||
| 148 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 149 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 150 | ····done·<<<·"$matching_list" | ||
| 151 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 152 | visudo" | ||
| 153 | ··fi | ||
| 154 | done | ||
| 155 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 156 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 158 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 157 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 159 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 158 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 160 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 159 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 161 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 160 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 162 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 161 | ············Without·re-authentication,·users·may·access·resources·or·perform | 163 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 178, 14 lines modified | Offset 178, 35 lines modified | ||
| 178 | ···························1.7,·SR·1.8,·SR·1.9 | 178 | ···························1.7,·SR·1.8,·SR·1.9 |
| 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 184 | ···························SRG-OS-000373-GPOS-00158 | 184 | ···························SRG-OS-000373-GPOS-00158 |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 190 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 191 | ··if·[·!·-e·"$f"·]·;·then | ||
| 192 | ····continue | ||
| 193 | ··fi | ||
| 194 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 195 | ··if·!·test·-z·"$matching_list";·then | ||
| 196 | ····while·IFS=·read·-r·entry;·do | ||
| 197 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 198 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 199 | ····done·<<<·"$matching_list" | ||
| 200 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 201 | visudo" | ||
| 202 | ··fi | ||
| 203 | done | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 190 | -·name:·Find·/etc/sudoers.d/·files | 209 | -·name:·Find·/etc/sudoers.d/·files |
| 191 | ··ansible.builtin.find: | 210 | ··ansible.builtin.find: |
| Offset 216, 35 lines modified | Offset 237, 14 lines modified | ||
| 216 | ··-·NIST-800-53-IA-11 | 237 | ··-·NIST-800-53-IA-11 |
| 217 | ··-·low_complexity | 238 | ··-·low_complexity |
| 218 | ··-·low_disruption | 239 | ··-·low_disruption |
| 219 | ··-·medium_severity | 240 | ··-·medium_severity |
| 220 | ··-·no_reboot_needed | 241 | ··-·no_reboot_needed |
| 221 | ··-·restrict_strategy | 242 | ··-·restrict_strategy |
| 222 | ··-·sudo_remove_nopasswd | 243 | ··-·sudo_remove_nopasswd |
| 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 228 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 229 | ··if·[·!·-e·"$f"·]·;·then | ||
| 230 | ····continue | ||
| 231 | ··fi | ||
| 232 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 233 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 46299/51744 bytes (89.48%) of diff not shown. | |||
| Offset 16006, 146 lines modified | Offset 16006, 146 lines modified | ||
| 0003e850:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003e850:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003e860:·2223·6964·6d34·3033·3122·2074·6162·696e··"#idm4031"·tabin | 0003e860:·2223·6964·6d34·3033·3122·2074·6162·696e··"#idm4031"·tabin | ||
| 0003e870:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003e870:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003e880:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003e880:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003e890:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003e890:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003e8a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003e8a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003e8b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003e8b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003e8c0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003e8d0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003e8e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003e8f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003e900:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003e910:·6d34·3033·3122·3e3c·7461·626c·6520·636c··m4031"><table·cl | |||
| 0003e920:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003e930:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003e940:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003e950:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003e960:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003e970:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003e980:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003e990:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003e9a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003e9b0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003e9c0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003e9d0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003e9e0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003e9f0:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003ea00:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003ea10:·3e0a·666f·7220·6620·696e·202f·6574·632f··>.for·f·in·/etc/ | |||
| 0003ea20:·7375·646f·6572·7320·2f65·7463·2f73·7564··sudoers·/etc/sud | |||
| 0003ea30:·6f65·7273·2e64·2f2a·203b·2064·6f0a·2020··oers.d/*·;·do.·· | |||
| 0003ea40:·6966·205b·2021·202d·6520·2224·6622·205d··if·[·!·-e·"$f"·] | |||
| 0003ea50:·203b·2074·6865·6e0a·2020·2020·636f·6e74···;·then.····cont | |||
| 0003ea60:·696e·7565·0a20·2066·690a·2020·6d61·7463··inue.··fi.··matc | |||
| 0003ea70:·6869·6e67·5f6c·6973·743d·2428·6772·6570··hing_list=$(grep | |||
| 0003ea80:·202d·5020·275e·283f·2123·292e·2a5b·5c73···-P·'^(?!#).*[\s | |||
| 0003ea90:·5d2b·5c21·6175·7468·656e·7469·6361·7465··]+\!authenticate | |||
| 0003eaa0:·2e2a·2427·2024·6620·7c20·756e·6971·2029··.*$'·$f·|·uniq·) | |||
| 0003eab0:·0a20·2069·6620·2120·7465·7374·202d·7a20··.··if·!·test·-z· | |||
| 0003eac0:·2224·6d61·7463·6869·6e67·5f6c·6973·7422··"$matching_list" | |||
| 0003ead0:·3b20·7468·656e·0a20·2020·2077·6869·6c65··;·then.····while | |||
| 0003eae0:·2049·4653·3d20·7265·6164·202d·7220·656e···IFS=·read·-r·en | |||
| 0003eaf0:·7472·793b·2064·6f0a·2020·2020·2020·2320··try;·do.······#· | |||
| 0003eb00:·636f·6d6d·656e·7420·6f75·7420·2221·6175··comment·out·"!au | |||
| 0003eb10:·7468·656e·7469·6361·7465·2220·6d61·7463··thenticate"·matc | |||
| 0003eb20:·6865·7320·746f·2070·7265·7365·7276·6520··hes·to·preserve· | |||
| 0003eb30:·7573·6572·2064·6174·610a·2020·2020·2020··user·data.······ | |||
| 0003eb40:·7365·6420·2d69·2022·732f·5e24·7b65·6e74··sed·-i·"s/^${ent | |||
| 0003eb50:·7279·7d24·2f23·2026·616d·703b·2f67·2220··ry}$/#·&/g"· | |||
| 0003eb60:·2466·0a20·2020·2064·6f6e·6520·266c·743b··$f.····done·< | |||
| 0003eb70:·266c·743b·266c·743b·2022·246d·6174·6368··<<·"$match | |||
| 0003eb80:·696e·675f·6c69·7374·220a·0a20·2020·202f··ing_list"..····/ | |||
| 0003eb90:·7573·722f·7362·696e·2f76·6973·7564·6f20··usr/sbin/visudo· | |||
| 0003eba0:·2d63·6620·2466·2026·616d·703b·2667·743b··-cf·$f·&> | |||
| 0003ebb0:·202f·6465·762f·6e75·6c6c·207c·7c20·6563···/dev/null·||·ec | |||
| 0003ebc0:·686f·2022·4661·696c·2074·6f20·7661·6c69··ho·"Fail·to·vali | |||
| 0003ebd0:·6461·7465·2024·6620·7769·7468·2076·6973··date·$f·with·vis | |||
| 0003ebe0:·7564·6f22·0a20·2066·690a·646f·6e65·0a3c··udo".··fi.done.< | |||
| 0003ebf0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003ec00:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003ec10:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003ec20:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003ec30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003ec40:·2223·6964·6d34·3033·3222·2074·6162·696e··"#idm4032"·tabin | |||
| 0003ec50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003ec60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003ec70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003ec80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003ec90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003e | 0003eca0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003e | 0003ecb0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003e | 0003ecc0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003e | 0003ecd0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003e900:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003e910:·2269·646d·3430·3331·223e·3c74·6162·6c65··"idm4031"><table | |||
| 0003e920:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003e930:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003e940:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003e950:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003e960:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003e970:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003e980:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003e990:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003e9a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003e9b0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003e9c0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003e9d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003e9e0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003e9f0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003ea00:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003ea10:·6f64·653e·2d20·6e61·6d65·3a20·4669·6e64··ode>-·name:·Find | |||
| 0003ea20:·202f·6574·632f·7375·646f·6572·732e·642f···/etc/sudoers.d/ | |||
| 0003ea30:·2066·696c·6573·0a20·2061·6e73·6962·6c65···files.··ansible | |||
| 0003ea40:·2e62·7569·6c74·696e·2e66·696e·643a·0a20··.builtin.find:.· | |||
| 0003ea50:·2020·2070·6174·6873·3a0a·2020·2020·2d20·····paths:.····-· | |||
| 0003ea60:·2f65·7463·2f73·7564·6f65·7273·2e64·2f0a··/etc/sudoers.d/. | |||
| 0003ea70:·2020·7265·6769·7374·6572·3a20·7375·646f····register:·sudo | |||
| 0003ea80:·6572·730a·2020·7461·6773·3a0a·2020·2d20··ers.··tags:.··-· | |||
| 0003ea90:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003eaa0:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | |||
| 0003eab0:·2d35·332d·4941·2d31·310a·2020·2d20·6c6f··-53-IA-11.··-·lo | |||
| 0003eac0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003ead0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003eae0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003eaf0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003eb00:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | |||
| 0003eb10:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | |||
| 0003eb20:·202d·2073·7564·6f5f·7265·6d6f·7665·5f6e···-·sudo_remove_n | |||
| 0003eb30:·6f5f·6175·7468·656e·7469·6361·7465·0a0a··o_authenticate.. | |||
| 0003eb40:·2d20·6e61·6d65·3a20·5265·6d6f·7665·206c··-·name:·Remove·l | |||
| 0003eb50:·696e·6573·2063·6f6e·7461·696e·696e·6720··ines·containing· | |||
| 0003eb60:·2161·7574·6865·6e74·6963·6174·6520·6672··!authenticate·fr | |||
| 0003eb70:·6f6d·2073·7564·6f65·7273·2066·696c·6573··om·sudoers·files | |||
| 0003eb80:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | |||
| 0003eb90:·696e·2e72·6570·6c61·6365·3a0a·2020·2020··in.replace:.···· | |||
| 0003eba0:·7265·6765·7870·3a20·285e·283f·2123·292e··regexp:·(^(?!#). | |||
| 0003ebb0:·2a5b·5c73·5d2b·5c21·6175·7468·656e·7469··*[\s]+\!authenti | |||
| 0003ebc0:·6361·7465·2e2a·2429·0a20·2020·2072·6570··cate.*$).····rep | |||
| 0003ebd0:·6c61·6365·3a20·2723·205c·6726·6c74·3b31··lace:·'#·\g<1 | |||
| 0003ebe0:·2667·743b·270a·2020·2020·7061·7468·3a20··>'.····path:· | |||
| 0003ebf0:·277b·7b20·6974·656d·2e70·6174·6820·7d7d··'{{·item.path·}} | |||
| 0003ec00:·270a·2020·2020·7661·6c69·6461·7465·3a20··'.····validate:· | |||
| 0003ec10:·2f75·7372·2f73·6269·6e2f·7669·7375·646f··/usr/sbin/visudo | |||
| 0003ec20:·202d·6366·2025·730a·2020·7769·7468·5f69···-cf·%s.··with_i | |||
| 0003ec30:·7465·6d73·3a0a·2020·2d20·7061·7468·3a20··tems:.··-·path:· | |||
| 0003ec40:·2f65·7463·2f73·7564·6f65·7273·0a20·202d··/etc/sudoers.··- | |||
| 0003ec50:·2027·7b7b·2073·7564·6f65·7273·2e66·696c···'{{·sudoers.fil | |||
| Max diff block lines reached; 1200368/1219164 bytes (98.46%) of diff not shown. | |||
| Offset 229, 14 lines modified | Offset 229, 35 lines modified | ||
| 229 | ···························1.7,·SR·1.8,·SR·1.9 | 229 | ···························1.7,·SR·1.8,·SR·1.9 |
| 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 235 | ···························SRG-OS-000373-GPOS-00158 | 235 | ···························SRG-OS-000373-GPOS-00158 |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 241 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 242 | ··if·[·!·-e·"$f"·]·;·then | ||
| 243 | ····continue | ||
| 244 | ··fi | ||
| 245 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 246 | ··if·!·test·-z·"$matching_list";·then | ||
| 247 | ····while·IFS=·read·-r·entry;·do | ||
| 248 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 249 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 250 | ····done·<<<·"$matching_list" | ||
| 251 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 252 | visudo" | ||
| 253 | ··fi | ||
| 254 | done | ||
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 255 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 256 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 257 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 258 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 259 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 241 | -·name:·Find·/etc/sudoers.d/·files | 260 | -·name:·Find·/etc/sudoers.d/·files |
| 242 | ··ansible.builtin.find: | 261 | ··ansible.builtin.find: |
| Offset 267, 35 lines modified | Offset 288, 14 lines modified | ||
| 267 | ··-·NIST-800-53-IA-11 | 288 | ··-·NIST-800-53-IA-11 |
| 268 | ··-·low_complexity | 289 | ··-·low_complexity |
| 269 | ··-·low_disruption | 290 | ··-·low_disruption |
| 270 | ··-·medium_severity | 291 | ··-·medium_severity |
| 271 | ··-·no_reboot_needed | 292 | ··-·no_reboot_needed |
| 272 | ··-·restrict_strategy | 293 | ··-·restrict_strategy |
| 273 | ··-·sudo_remove_no_authenticate | 294 | ··-·sudo_remove_no_authenticate |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 279 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 280 | ··if·[·!·-e·"$f"·]·;·then | ||
| 281 | ····continue | ||
| 282 | ··fi | ||
| 283 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 284 | ··if·!·test·-z·"$matching_list";·then | ||
| 285 | ····while·IFS=·read·-r·entry;·do | ||
| 286 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 287 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 288 | ····done·<<<·"$matching_list" | ||
| 289 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 290 | visudo" | ||
| 291 | ··fi | ||
| 292 | done | ||
| 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 299 | ············Without·re-authentication,·users·may·access·resources·or·perform | 301 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 316, 14 lines modified | Offset 316, 35 lines modified | ||
| 316 | ···························1.7,·SR·1.8,·SR·1.9 | 316 | ···························1.7,·SR·1.8,·SR·1.9 |
| 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 322 | ···························SRG-OS-000373-GPOS-00158 | 322 | ···························SRG-OS-000373-GPOS-00158 |
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 328 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 329 | ··if·[·!·-e·"$f"·]·;·then | ||
| 330 | ····continue | ||
| 331 | ··fi | ||
| 332 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 333 | ··if·!·test·-z·"$matching_list";·then | ||
| 334 | ····while·IFS=·read·-r·entry;·do | ||
| 335 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 336 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 337 | ····done·<<<·"$matching_list" | ||
| 338 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 339 | visudo" | ||
| 340 | ··fi | ||
| 341 | done | ||
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 328 | -·name:·Find·/etc/sudoers.d/·files | 347 | -·name:·Find·/etc/sudoers.d/·files |
| 329 | ··ansible.builtin.find: | 348 | ··ansible.builtin.find: |
| Offset 354, 35 lines modified | Offset 375, 14 lines modified | ||
| 354 | ··-·NIST-800-53-IA-11 | 375 | ··-·NIST-800-53-IA-11 |
| 355 | ··-·low_complexity | 376 | ··-·low_complexity |
| 356 | ··-·low_disruption | 377 | ··-·low_disruption |
| 357 | ··-·medium_severity | 378 | ··-·medium_severity |
| 358 | ··-·no_reboot_needed | 379 | ··-·no_reboot_needed |
| 359 | ··-·restrict_strategy | 380 | ··-·restrict_strategy |
| 360 | ··-·sudo_remove_nopasswd | 381 | ··-·sudo_remove_nopasswd |
| 361 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 362 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 363 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 364 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 365 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 366 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 367 | ··if·[·!·-e·"$f"·]·;·then | ||
| 368 | ····continue | ||
| 369 | ··fi | ||
| 370 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 371 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 141644/147092 bytes (96.30%) of diff not shown. | |||
| Offset 16213, 778 lines modified | Offset 16213, 778 lines modified | ||
| 0003f540:·7461·7267·6574·3d22·2369·646d·3130·3334··target="#idm1034 | 0003f540:·7461·7267·6574·3d22·2369·646d·3130·3334··target="#idm1034 | ||
| 0003f550:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | 0003f550:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | ||
| 0003f560:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003f560:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003f570:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003f570:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003f580:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003f580:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003f590:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003f590:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | Diff chunk too large, falling back to line-by-line diff (764 lines added, 764 lines removed) | |
| 0003f5a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003f5a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003f5b0:·7469·6f6e·20 | 0003f5b0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | ||
| 0003f5c0:·7 | 0003f5c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003f5d0:· | 0003f5d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003f5e0:·6 | 0003f5e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003f5f0:· | 0003f5f0:·2220·6964·3d22·6964·6d31·3033·3437·223e··"·id="idm10347"> | ||
| 0003f600:·372 | 0003f600:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 0003f610:· | 0003f610:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 0003f620:·69 | 0003f620:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | ||
| 0003f630:· | 0003f630:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | ||
| 0003f640:· | 0003f640:·0a69·6620·6470·6b67·2d71·7565·7279·202d··.if·dpkg-query·- | ||
| 0003f650:· | 0003f650:·2d73·686f·7720·2d2d·7368·6f77·666f·726d··-show·--showform | ||
| 0003f660:· | 0003f660:·6174·3d27·247b·6462·3a53·7461·7475·732d··at='${db:Status- | ||
| 0003f670:· | 0003f670:·5374·6174·7573·7d0a·2720·276c·696e·7578··Status}.'·'linux | ||
| 0003f680:· | 0003f680:·2d62·6173·6527·2032·2667·743b·2f64·6576··-base'·2>/dev | ||
| 0003f690:· | 0003f690:·2f6e·756c·6c20·7c20·6772·6570·202d·7120··/null·|·grep·-q· | ||
| 0003f6a0:· | 0003f6a0:·5e69·6e73·7461·6c6c·6564·2026·616d·703b··^installed·& | ||
| 0003f6b0:· | 0003f6b0:·2661·6d70·3b20·6470·6b67·2d71·7565·7279··&·dpkg-query | ||
| 0003f6c0:· | 0003f6c0:·202d·2d73·686f·7720·2d2d·7368·6f77·666f···--show·--showfo | ||
| 0003f6d0:·7 | 0003f6d0:·726d·6174·3d27·247b·6462·3a53·7461·7475··rmat='${db:Statu | ||
| 0003f6e0:· | 0003f6e0:·732d·5374·6174·7573·7d5c·6e27·2027·7273··s-Status}\n'·'rs | ||
| 0003f6f0:·7 | 0003f6f0:·7973·6c6f·6727·2032·2667·743b·2f64·6576··yslog'·2>/dev | ||
| 0003f700:· | 0003f700:·2f6e·756c·6c20·7c20·6772·6570·202d·7120··/null·|·grep·-q· | ||
| 0003f710:· | 0003f710:·275e·696e·7374·616c·6c65·6427·3b20·7468··'^installed';·th | ||
| 0003f720:· | 0003f720:·656e·0a0a·2320·4c69·7374·206f·6620·6c6f··en..#·List·of·lo | ||
| 0003f730:· | 0003f730:·6720·6669·6c65·2070·6174·6873·2074·6f20··g·file·paths·to· | ||
| 0003f740:·6 | 0003f740:·6265·2069·6e73·7065·6374·6564·2066·6f72··be·inspected·for | ||
| 0003f750:·20 | 0003f750:·2063·6f72·7265·6374·2070·6572·6d69·7373···correct·permiss | ||
| 0003f760:· | 0003f760:·696f·6e73·0a23·202a·2050·7269·6d61·7269··ions.#·*·Primari | ||
| 0003f770:· | 0003f770:·6c79·2069·6e73·7065·6374·206c·6f67·2066··ly·inspect·log·f | ||
| 0003f780:· | 0003f780:·696c·6520·7061·7468·7320·6c69·7374·6564··ile·paths·listed | ||
| 0003f790:· | 0003f790:·2069·6e20·2f65·7463·2f72·7379·736c·6f67···in·/etc/rsyslog | ||
| 0003f7a0:· | 0003f7a0:·2e63·6f6e·660a·5253·5953·4c4f·475f·4554··.conf.RSYSLOG_ET | ||
| 0003f7b0:·43 | 0003f7b0:·435f·434f·4e46·4947·3d22·2f65·7463·2f72··C_CONFIG="/etc/r | ||
| 0003f7c0:· | 0003f7c0:·7379·736c·6f67·2e63·6f6e·6622·0a23·202a··syslog.conf".#·* | ||
| 0003f7d0:·2 | 0003f7d0:·2041·6e64·2061·6c73·6f20·7468·6520·6c6f···And·also·the·lo | ||
| 0003f7e0:· | 0003f7e0:·6720·6669·6c65·2070·6174·6873·206c·6973··g·file·paths·lis | ||
| 0003f7f0:·7 | 0003f7f0:·7465·6420·6166·7465·7220·7273·7973·6c6f··ted·after·rsyslo | ||
| 0003f800:· | 0003f800:·6727·7320·2449·6e63·6c75·6465·436f·6e66··g's·$IncludeConf | ||
| 0003f810:·6 | 0003f810:·6967·2064·6972·6563·7469·7665·0a23·2020··ig·directive.#·· | ||
| 0003f820:· | 0003f820:·2028·7374·6f72·6520·7468·6520·7265·7375···(store·the·resu | ||
| 0003f830:·6 | 0003f830:·6c74·2069·6e74·6f20·6172·7261·7920·666f··lt·into·array·fo | ||
| 0003f840:·72 | 0003f840:·7220·7468·6520·6361·7365·2074·6865·7265··r·the·case·there | ||
| 0003f850:· | 0003f850:·2773·2073·6865·6c6c·2067·6c6f·6220·7573··'s·shell·glob·us | ||
| 0003f860:·6 | 0003f860:·6564·2061·7320·7661·6c75·6520·6f66·2049··ed·as·value·of·I | ||
| 0003f870:· | 0003f870:·6e63·6c75·6465·436f·6e66·6967·290a·7265··ncludeConfig).re | ||
| 0003f880:· | 0003f880:·6164·6172·7261·7920·2d74·204f·4c44·5f49··adarray·-t·OLD_I | ||
| 0003f890:·4 | 0003f890:·4e43·2026·6c74·3b20·266c·743b·2867·7265··NC·<·<(gre | ||
| 0003f8a0:· | 0003f8a0:·7020·2d65·2022·5c24·496e·636c·7564·6543··p·-e·"\$IncludeC | ||
| 0003f8b0:·6 | 0003f8b0:·6f6e·6669·675b·5b3a·7370·6163·653a·5d5d··onfig[[:space:]] | ||
| 0003f8c0:· | 0003f8c0:·5c2b·5b5e·5b3a·7370·6163·653a·5d3b·5d5c··\+[^[:space:];]\ | ||
| 0003f8d0:· | 0003f8d0:·2b22·202f·6574·632f·7273·7973·6c6f·672e··+"·/etc/rsyslog. | ||
| 0003f8e0:· | 0003f8e0:·636f·6e66·207c·2063·7574·202d·6420·2720··conf·|·cut·-d·'· | ||
| 0003f8f0:· | 0003f8f0:·2720·2d66·2032·290a·7265·6164·6172·7261··'·-f·2).readarra | ||
| 0003f900:·7 | 0003f900:·7920·2d74·2052·5359·534c·4f47·5f49·4e43··y·-t·RSYSLOG_INC | ||
| 0003f910:· | 0003f910:·4c55·4445·5f43·4f4e·4649·4720·266c·743b··LUDE_CONFIG·< | ||
| 0003f920:· | 0003f920:·2026·6c74·3b28·666f·7220·494e·4350·4154···<(for·INCPAT | ||
| 0003f930:· | 0003f930:·4820·696e·2022·247b·4f4c·445f·494e·435b··H·in·"${OLD_INC[ | ||
| 0003f940:· | 0003f940:·405d·7d22·3b20·646f·2065·7661·6c20·7072··@]}";·do·eval·pr | ||
| 0003f950:· | 0003f950:·696e·7466·2027·2573·5c5c·6e27·2022·247b··intf·'%s\\n'·"${ | ||
| 0003f960:· | 0003f960:·494e·4350·4154·487d·223b·2064·6f6e·6529··INCPATH}";·done) | ||
| 0003f970:·0a | 0003f970:·0a72·6561·6461·7272·6179·202d·7420·4e45··.readarray·-t·NE | ||
| 0003f980:· | 0003f980:·575f·494e·4320·266c·743b·2026·6c74·3b28··W_INC·<·<( | ||
| 0003f990:· | 0003f990:·7365·6420·2d6e·2027·2f5e·5c73·2a69·6e63··sed·-n·'/^\s*inc | ||
| 0003f9a0:· | 0003f9a0:·6c75·6465·282f·2c2f·292f·4970·2720·2f65··lude(/,/)/Ip'·/e | ||
| 0003f9b0:· | 0003f9b0:·7463·2f72·7379·736c·6f67·2e63·6f6e·6620··tc/rsyslog.conf· | ||
| 0003f9c0:· | 0003f9c0:·7c20·7365·6420·2d6e·2027·7340·2e2a·6669··|·sed·-n·'s@.*fi | ||
| 0003f9d0:· | 0003f9d0:·6c65·5c73·2a3d·5c73·2a22·5c28·5b2f·5b3a··le\s*=\s*"\([/[: | ||
| 0003f9e0:· | 0003f9e0:·616c·6e75·6d3a·5d5b·3a70·756e·6374·3a5d··alnum:][:punct:] | ||
| 0003f9f0:· | 0003f9f0:·5d2a·5c29·222e·2a40·5c31·4049·7027·290a··]*\)".*@\1@Ip'). | ||
| 0003fa00:· | 0003fa00:·7265·6164·6172·7261·7920·2d74·2052·5359··readarray·-t·RSY | ||
| 0003fa10:· | 0003fa10:·534c·4f47·5f49·4e43·4c55·4445·2026·6c74··SLOG_INCLUDE·< | ||
| 0003fa20:· | 0003fa20:·3b20·266c·743b·2866·6f72·2049·4e43·5041··;·<(for·INCPA | ||
| 0003fa30:· | 0003fa30:·5448·2069·6e20·2224·7b4e·4557·5f49·4e43··TH·in·"${NEW_INC | ||
| 0003fa40:· | 0003fa40:·5b40·5d7d·223b·2064·6f20·6576·616c·2070··[@]}";·do·eval·p | ||
| 0003fa50:· | 0003fa50:·7269·6e74·6620·2725·735c·5c6e·2720·2224··rintf·'%s\\n'·"$ | ||
| 0003fa60:· | 0003fa60:·7b49·4e43·5041·5448·7d22·3b20·646f·6e65··{INCPATH}";·done | ||
| 0003fa70:· | 0003fa70:·290a·0a23·2044·6563·6c61·7265·2061·6e20··)..#·Declare·an· | ||
| 0003fa80:· | 0003fa80:·6172·7261·7920·746f·2068·6f6c·6420·7468··array·to·hold·th | ||
| 0003fa90:·20 | 0003fa90:·6520·6669·6e61·6c20·6c69·7374·206f·6620··e·final·list·of· | ||
| 0003faa0:· | 0003faa0:·6469·6666·6572·656e·7420·6c6f·6720·6669··different·log·fi | ||
| 0003fab0:·6 | 0003fab0:·6c65·2070·6174·6873·0a64·6563·6c61·7265··le·paths.declare | ||
| 0003fac0:· | 0003fac0:·202d·6120·4c4f·475f·4649·4c45·5f50·4154···-a·LOG_FILE_PAT | ||
| 0003fad0:· | 0003fad0:·4853·0a0a·2320·4172·7261·7920·746f·2068··HS..#·Array·to·h | ||
| 0003fae0:·6 | 0003fae0:·6f6c·6420·616c·6c20·7273·7973·6c6f·6720··old·all·rsyslog· | ||
| 0003faf0:· | 0003faf0:·636f·6e66·6967·2065·6e74·7269·6573·0a52··config·entries.R | ||
| 0003fb00:· | 0003fb00:·5359·534c·4f47·5f43·4f4e·4649·4753·3d28··SYSLOG_CONFIGS=( | ||
| 0003fb10:· | 0003fb10:·290a·5253·5953·4c4f·475f·434f·4e46·4947··).RSYSLOG_CONFIG | ||
| 0003fb20:· | 0003fb20:·533d·2822·247b·5253·5953·4c4f·475f·4554··S=("${RSYSLOG_ET | ||
| 0003fb30:· | 0003fb30:·435f·434f·4e46·4947·7d22·2022·247b·5253··C_CONFIG}"·"${RS | ||
| 0003fb40:· | 0003fb40:·5953·4c4f·475f·494e·434c·5544·455f·434f··YSLOG_INCLUDE_CO | ||
| 0003fb50:· | 0003fb50:·4e46·4947·5b40·5d7d·2220·2224·7b52·5359··NFIG[@]}"·"${RSY | ||
| 0003fb60:· | 0003fb60:·534c·4f47·5f49·4e43·4c55·4445·5b40·5d7d··SLOG_INCLUDE[@]} | ||
| 0003fb70:· | 0003fb70:·2229·0a0a·2320·4765·7420·6675·6c6c·206c··")..#·Get·full·l | ||
| 0003fb80:· | 0003fb80:·6973·7420·6f66·2066·696c·6573·2074·6f20··ist·of·files·to· | ||
| 0003fb90:·6 | 0003fb90:·6265·2063·6865·636b·6564·0a23·2052·5359··be·checked.#·RSY | ||
| 0003fba0:· | 0003fba0:·534c·4f47·5f43·4f4e·4649·4753·206d·6179··SLOG_CONFIGS·may | ||
| 0003fbb0:· | 0003fbb0:·2063·6f6e·7461·696e·2067·6c6f·6273·2073···contain·globs·s | ||
| 0003fbc0:· | 0003fbc0:·7563·6820·6173·0a23·202f·6574·632f·7273··uch·as.#·/etc/rs | ||
| 0003fbd0:· | 0003fbd0:·7973·6c6f·672e·642f·2a2e·636f·6e66·202f··yslog.d/*.conf·/ | ||
| 0003fbe0:· | 0003fbe0:·6574·632f·7273·7973·6c6f·672e·642f·2a2e··etc/rsyslog.d/*. | ||
| 0003fbf0:· | 0003fbf0:·6672·756c·650a·2320·536f·2c20·6c6f·6f70··frule.#·So,·loop | ||
| 0003fc00:·2 | 0003fc00:·206f·7665·7220·7468·6520·656e·7472·6965···over·the·entrie | ||
| 0003fc10:· | 0003fc10:·7320·696e·2052·5359·534c·4f47·5f43·4f4e··s·in·RSYSLOG_CON | ||
| 0003fc20:· | 0003fc20:·4649·4753·2061·6e64·2075·7365·2066·696e··FIGS·and·use·fin | ||
| 0003fc30:·6 | 0003fc30:·6420·746f·2067·6574·2074·6865·206c·6973··d·to·get·the·lis | ||
| 0003fc40:· | 0003fc40:·7420·6f66·2069·6e63·6c75·6465·6420·6669··t·of·included·fi | ||
| 0003fc50:· | 0003fc50:·6c65·732e·0a52·5359·534c·4f47·5f43·4f4e··les..RSYSLOG_CON | ||
| 0003fc60:· | 0003fc60:·4649·475f·4649·4c45·533d·2829·0a66·6f72··FIG_FILES=().for | ||
| 0003fc70:· | 0003fc70:·2045·4e54·5259·2069·6e20·2224·7b52·5359···ENTRY·in·"${RSY | ||
| 0003fc80:·5 | 0003fc80:·534c·4f47·5f43·4f4e·4649·4753·5b40·5d7d··SLOG_CONFIGS[@]} | ||
| 0003fc90:· | 0003fc90:·220a·646f·0a09·2320·4966·2064·6972·6563··".do..#·If·direc | ||
| 0003fca0:· | 0003fca0:·746f·7279·2c20·7273·7973·6c6f·6720·7769··tory,·rsyslog·wi | ||
| 0003fcb0:·6 | 0003fcb0:·6c6c·2073·6561·7263·6820·666f·7220·636f··ll·search·for·co | ||
| 0003fcc0:·6 | 0003fcc0:·6e66·6967·2066·696c·6573·2069·6e20·7265··nfig·files·in·re | ||
| 0003fcd0:· | 0003fcd0:·6375·7273·6976·656c·792e·0a09·2320·486f··cursively...#·Ho | ||
| 0003fce0:·7 | 0003fce0:·7765·7665·722c·2066·696c·6573·2069·6e20··wever,·files·in· | ||
| 0003fcf0:·6 | 0003fcf0:·6869·6464·656e·2073·7562·2d64·6972·6563··hidden·sub-direc | ||
| 0003fd00:·46 | 0003fd00:·746f·7269·6573·206f·7220·6869·6464·656e··tories·or·hidden | ||
| 0003fd10:· | 0003fd10:·2066·696c·6573·2077·696c·6c20·6265·2069···files·will·be·i | ||
| Max diff block lines reached; 1054280/1160292 bytes (90.86%) of diff not shown. | |||
| Offset 258, 14 lines modified | Offset 258, 142 lines modified | ||
| 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 | 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 |
| 265 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 266 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 267 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 268 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed·&&·dpkg-query·--show·-- | ||
| 269 | showformat='${db:Status-Status}\n'·'rsyslog'·2>/dev/null·|·grep·- | ||
| 270 | q·'^installed';·then | ||
| 271 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 272 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 273 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 274 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 275 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 276 | of·IncludeConfig) | ||
| 277 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 278 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 279 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 280 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 281 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 282 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 283 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 284 | '%s\\n'·"${INCPATH}";·done) | ||
| 285 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 286 | declare·-a·LOG_FILE_PATHS | ||
| 287 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 288 | RSYSLOG_CONFIGS=() | ||
| 289 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 290 | {RSYSLOG_INCLUDE[@]}") | ||
| 291 | #·Get·full·list·of·files·to·be·checked | ||
| 292 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 293 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 294 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 295 | included·files. | ||
| 296 | RSYSLOG_CONFIG_FILES=() | ||
| 297 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 298 | do | ||
| 299 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 300 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 301 | » if·[·-d·"${ENTRY}"·] | ||
| 302 | » then | ||
| 303 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 304 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 305 | » elif·[·-f·"${ENTRY}"·] | ||
| 306 | » then | ||
| 307 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 308 | » else | ||
| 309 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 310 | » fi | ||
| 311 | done | ||
| 312 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 313 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 314 | configuration) | ||
| 315 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 316 | do | ||
| 317 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 318 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 319 | ('$')·characters, | ||
| 320 | » #·*·Ignore·empty·lines, | ||
| 321 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 322 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 323 | not·log·files | ||
| 324 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 325 | path | ||
| 326 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 327 | all·of·the | ||
| 328 | » #·following·are·met: | ||
| 329 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 330 | » #·*·it·is·preceded·by·space | ||
| 331 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 332 | characters | ||
| 333 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 334 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 335 | » then | ||
| 336 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 337 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 338 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 339 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 340 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 341 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 342 | {FILTERED_PATHS}") | ||
| 343 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 344 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 345 | newline),·split | ||
| 346 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 347 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 348 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 349 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 350 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 351 | » » #·Delete·the·temporary·array | ||
| 352 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 353 | » fi | ||
| 354 | done | ||
| 355 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 356 | grep·regex·is·a·bit | ||
| 357 | #·curly: | ||
| 358 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 359 | #·extract·File="logfile"·expression | ||
| 360 | #·match·only·"logfile"·expression | ||
| 361 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 362 | do | ||
| 363 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 364 | "${LOG_FILE}") | ||
| 365 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 366 | alnum:][:punct:]]*)\"\s*\)") | ||
| 367 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| 368 | ]]*)\""|tr·-d·"\"")") | ||
| 369 | done | ||
| 370 | #·Ensure·the·correct·attribute·if·file·exists | ||
| 371 | FILE_CMD="chgrp" | ||
| 372 | for·LOG_FILE_PATH·in·"${LOG_FILE_PATHS[@]}" | ||
| 373 | do | ||
| 374 | » #·Sanity·check·-·if·particular·$LOG_FILE_PATH·is·empty·string,·skip·it·from | ||
| 375 | further·processing | ||
| 376 | » if·[·-z·"$LOG_FILE_PATH"·] | ||
| 377 | » then | ||
| Max diff block lines reached; 132315/137966 bytes (95.90%) of diff not shown. | |||
| Offset 3, 2939 lines modified | Offset 3, 2939 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_unlink_ocil:questionnaire:1"> | ||
| 11 | ···· | 10 | ····<ocil:questionnaire·id="ocil:ssg-disallow_bypass_password_sudo_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Disallow·Configuration·to·Bypass·Password·Requirements·for·Privilege·Escalation</ocil:title> | ||
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-disallow_bypass_password_sudo_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_passwd_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Verify·Permissions·on·passwd·File</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_fs_suid_dumpable_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Disable·Core·Dumps·for·SUID·programs</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-sysctl_fs_suid_dumpable_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_le | 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_force_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Require·modules·to·be·validly·signed</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_le | 31 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_force_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_open_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-directory_permissions_var_log_audit_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>System·Audit·Logs·Must·Have·Mode·0750·or·Less·Permissive</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-directory_permissions_var_log_audit_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_var_log_messages_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-service_auditd_enabled_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Enable·auditd·Service</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-service_auditd_enabled_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_systemmap_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_credentials_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Enable·checks·on·credential·management</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_debug_credentials_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_space_left_action_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-no_all_squash_exports_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Ensure·All-Squashing·Disabled·On·All·Exports</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-no_all_squash_exports_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_immutable_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Make·the·auditd·Configuration·Immutable</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_immutable_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-a | 64 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_srv_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Ensure·/srv·Located·On·Separate·Partition</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-a | 67 | ········<ocil:test_action_ref>ocil:ssg-partition_for_srv_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_umount_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-grub2_spec_store_bypass_disable_argument_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Configure·Speculative·Store·Bypass·Mitigation</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-grub2_spec_store_bypass_disable_argument_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-grub2_nosmap_argument_absent_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Ensure·SMAP·is·not·disabled·during·boot</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-grub2_nosmap_argument_absent_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-sudo_vdsm_nopasswd_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Only·the·VDSM·User·Can·Use·sudo·NOPASSWD</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-sudo_vdsm_nopasswd_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_passwd_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Verify·Group·Who·Owns·passwd·File</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_shadow_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Verify·Group·Who·Owns·shadow·File</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_compat_brk_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Disable· | 101 | ······<ocil:title>Disable·compatibility·with·brk()</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_ | 103 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_compat_brk_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-s | 106 | ····<ocil:questionnaire·id="ocil:ssg-securetty_root_login_console_only_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Restrict·Virtual·Console·Root·Logins</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-s | 109 | ········<ocil:test_action_ref>ocil:ssg-securetty_root_login_console_only_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-snmpd_not_default_password_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Ensure·Default·SNMP·Password·Is·Not·Used</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-snmpd_not_default_password_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_default_mmap_min_addr_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Configure·Low·Address·Space·To·Protect·From·User·Allocation</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_default_mmap_min_addr_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| Max diff block lines reached; 702214/714739 bytes (98.25%) of diff not shown. | |||
| Offset 3, 4057 lines modified | Offset 3, 4057 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-no_empty_passwords_etc_shadow_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Ensure·There·Are·No·Accounts·With·Blank·or·Null·Passwords</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-no_empty_passwords_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_arm64_sw_ttbr0_pan_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-service_iptables_enabled_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Verify·iptables·Enabled</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-service_iptables_enabled_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_yama_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-accounts_users_home_files_groupownership_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>All·User·Files·and·Directories·In·The·Home·Directory·Must·Be·Group-Owned·By·The·Primary·Group</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-accounts_users_home_files_groupownership_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_gcc_plugin_stackleak_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_tcp_forwarding_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Disable·SSH·TCP·Forwarding</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_tcp_forwarding_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-file_per | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_ipsec_secrets_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Verify· | 35 | ······<ocil:title>Verify·Group·Who·Owns·/etc/ipsec.secrets·File</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-file_per | 37 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_ipsec_secrets_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_sysadmin_actions_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Ensure·auditd·Collects·System·Administrator·Actions</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_sysadmin_actions_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_mac_modification_usr_share_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Record·Events·that·Modify·the·System's·Mandatory·Access·Controls·in·usr/share</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_mac_modification_usr_share_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_disk_error_action_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_shadow_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Verify·User·Who·Owns·Backup·shadow·File</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_backup_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-package_ypserv_removed_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Uninstall·ypserv·Package</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-package_ypserv_removed_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_chmod_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_systemmap_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Verify·User·Who·Owns·System.map·Files</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_owner_systemmap_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_unauthorized_world_writable_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_kernel_module_loading_delete_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Ensure·auditd·Collects·Information·on·Kernel·Module·Unloading·-·delete_module</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_kernel_module_loading_delete_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_accept_redirects_ocil:questionnaire:1"> | ||
| 77 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_kerb_auth_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Disable·Kerberos·Authentication</ocil:title> | ||
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-s | 79 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_kerb_auth_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_fs_protected_hardlinks_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Enable·Kernel·Pa | 83 | ······<ocil:title>Enable·Kernel·Parameter·to·Enforce·DAC·on·Hardlinks</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-sysctl_fs_protected_hardlinks_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_router_solicitations_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_efi_user_cfg_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Verify·/boot/grub2/user.cfg·Group·Ownership</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_efi_user_cfg_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_files_ownership_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure· | 95 | ······<ocil:title>Ensure·Log·Files·Are·Owned·By·Appropriate·User</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_files_ownership_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_page_poisoning_zero_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Use·zero·for·poisoning·instead·of·debugging·value</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_page_poisoning_zero_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 106 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_efi_user_cfg_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Verify· | 107 | ······<ocil:title>Verify·/boot/grub2/user.cfg·Permissions</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-file_ | 109 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_efi_user_cfg_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_stackprotector_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Stack·Protector·buffer·overlow·detection</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_stackprotector_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_gshadow_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Verify·User·Who·Owns·Backup·gshadow·File</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-file_owner_backup_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 1179722/1192430 bytes (98.93%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0····18168·2025-03-01·08:08:00.000000·control.tar.xz | 2 | -rw-r--r--···0········0········0····18168·2025-03-01·08:08:00.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0·370 | 3 | -rw-r--r--···0········0········0·37078396·2025-03-01·08:08:00.000000·data.tar.xz |
| Offset 15111, 213 lines modified | Offset 15111, 213 lines modified | ||
| 0003b060:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b060:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b070:·2369·646d·3133·3339·2220·7461·6269·6e64··#idm1339"·tabind | 0003b070:·2369·646d·3133·3339·2220·7461·6269·6e64··#idm1339"·tabind | ||
| 0003b080:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b080:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b090:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b090:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b0a0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b0a0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b0b0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b0b0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b0c0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b0c0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b0d0:·5265·6d65·6469·6174·696f·6e20· | 0003b0d0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b0e0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b0f0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b100:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b110:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b120:·6170·7365·2220·6964·3d22·6964·6d31·3333··apse"·id="idm133 | |||
| 0003b0e0:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003b0f0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b100:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b110:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b120:·646d·3133·3339·223e·3c74·6162·6c65·2063··dm1339"><table·c | |||
| 0003b130:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b140:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b150:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b160:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b170:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b180:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b190:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b1a0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b1b0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b1c0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b1d0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b1e0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b1f0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b200:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b | 0003b130:·3922·3e3c·7072·653e·3c63·6f64·653e·0a5b··9"><pre><code>.[ | ||
| 0003b220:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003b230:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003b240:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003b250:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003b260:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003b270:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003b280:·0a7d·0a3c·2f63·6f64·653e·3c2f·7072·653e··.}.</code></pre> | |||
| 0003b290:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b2a0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b2b0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b2c0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b2d0:·6765·743d·2223·6964·6d31·3334·3022·2074··get="#idm1340"·t | |||
| 0003b2e0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b2f0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b300:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b310:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b320:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b330:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b340:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b350:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b360:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b370:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b380:·2069·643d·2269·646d·3133·3430·223e·3c74···id="idm1340"><t | |||
| 0003b390:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b3a0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b3b0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b3c0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b3d0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b3e0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b3f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b400:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b410:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b420:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b430:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b440:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b450:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b460:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b470:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b480:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003b490:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003b4a0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003b4b0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003b4c0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003b4d0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b4e0:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003b4f0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b500:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b510:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b520:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b530:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b540:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b550:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b560:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b570:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b580:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b590:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b5a0:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003b5b0:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b5c0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b5d0:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b5e0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b5f0:·6e74·0a20·2077·6865·6e3a·2027·226b·6572··nt.··when:·'"ker | |||
| 0003b600:·6e65·6c22·2069·6e20·616e·7369·626c·655f··nel"·in·ansible_ | |||
| 0003b610:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 0003b620:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003b630:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 0003b640:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b650:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b660:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b670:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b680:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b690:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b6a0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b6b0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b6c0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b6d0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b6e0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b6f0:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003b700:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b710:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b720:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b730:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b740:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b750:·3133·3431·2220·7461·6269·6e64·6578·3d22··1341"·tabindex=" | |||
| 0003b760:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b770:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b780:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b790:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b7a0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b7b0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003b7c0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b7d0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b7e0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b7f0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| Max diff block lines reached; 21883315/21911357 bytes (99.87%) of diff not shown. | |||
| Offset 15077, 213 lines modified | Offset 15077, 213 lines modified | ||
| 0003ae40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ae40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ae50:·6964·6d31·3333·3922·2074·6162·696e·6465··idm1339"·tabinde | 0003ae50:·6964·6d31·3333·3922·2074·6162·696e·6465··idm1339"·tabinde | ||
| 0003ae60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ae60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003ae70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003ae70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003ae80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003ae80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003ae90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003ae90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003aea0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003aea0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003aeb0:·656d·6564·6961·7469·6f6e·20 | 0003aeb0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003aec0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003aed0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003aee0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003aef0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003af00:·7073·6522·2069·643d·2269·646d·3133·3339··pse"·id="idm1339 | |||
| 0003aec0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003aed0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003aee0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003aef0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003af00:·6d31·3333·3922·3e3c·7461·626c·6520·636c··m1339"><table·cl | |||
| 0003af10:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003af20:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003af30:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003af40:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003af50:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003af60:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003af70:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003af80:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003af90:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003afa0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003afb0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003afc0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003afd0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003afe0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003af | 0003af10:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 0003b000:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b010:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b020:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b030:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003 | 0003af20:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | ||
| 0003af30:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003af40:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003af50:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003af60:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003af70:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003af80:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003af90:·2d74·6172·6765·743d·2223·6964·6d31·3334··-target="#idm134 | |||
| 0003afa0:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | |||
| 0003afb0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003afc0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003afd0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003afe0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003aff0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b000:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003b010:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b020:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b030:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b040:·2220·6964·3d22·6964·6d31·3334·3022·3e3c··"·id="idm1340">< | |||
| 0003b050:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b060:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b070:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b080:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b090:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b0a0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b0b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b0c0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b0d0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b0e0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b0f0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b100:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b110:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b120:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b130:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b140:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | |||
| 0003b150:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0003b160:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0003b170:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0003b180:·7270·6d20·2d2d·7175·6965·7420·2d71·206b··rpm·--quiet·-q·k | |||
| 0003b190:·6572·6e65·6c3b·2074·6865·6e0a·0a69·6620··ernel;·then..if· | |||
| 0003b1a0:·2120·7270·6d20·2d71·202d·2d71·7569·6574··!·rpm·-q·--quiet | |||
| 0003b1b0:·2022·6169·6465·2220·3b20·7468·656e·0a20···"aide"·;·then.· | |||
| 0003b1c0:·2020·2064·6e66·2069·6e73·7461·6c6c·202d·····dnf·install·- | |||
| 0003b1d0:·7920·2261·6964·6522·0a66·690a·0a65·6c73··y·"aide".fi..els | |||
| 0003b1e0:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0003b1f0:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0003b200:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0003b210:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0003b220:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0003b230:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b240:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b250:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b260:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b270:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b280:·6d31·3334·3122·2074·6162·696e·6465·783d··m1341"·tabindex= | |||
| 0003b290:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b2a0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b2b0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b2c0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b2d0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b2e0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b2f0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b300:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b310:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b320:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b330:·3133·3431·223e·3c74·6162·6c65·2063·6c61··1341"><table·cla | |||
| 0003b340:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b350:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b360:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b370:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b380:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b390:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b3a0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b3b0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b3c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b3d0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b3e0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b3f0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b400:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b410:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b420:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b430:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003b440:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003b450:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003b460:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003b470:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | |||
| 0003b480:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b490:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b4a0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b4b0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| Max diff block lines reached; 9197804/9225846 bytes (99.70%) of diff not shown. | |||
| Offset 118, 26 lines modified | Offset 118, 34 lines modified | ||
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ············_\x8c_\x8i_\x8s············1.3.1 | 123 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | incl | 134 | #·Remediation·is·applicable·only·in·certain·platforms |
| 135 | if·rpm·--quiet·-q·kernel;·then | ||
| 131 | class·install_aide·{ | ||
| 132 | ··package·{·'aide': | ||
| 133 | ····ensure·=>·'installed', | ||
| 134 | ··} | ||
| 135 | 136 | if·!·rpm·-q·--quiet·"aide"·;·then | |
| 137 | ····dnf·install·-y·"aide" | ||
| 138 | fi | ||
| 139 | else | ||
| 140 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 141 | fi | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 141 | -·name:·Gather·the·package·facts | 147 | -·name:·Gather·the·package·facts |
| 142 | ··package_facts: | 148 | ··package_facts: |
| Offset 166, 41 lines modified | Offset 174, 33 lines modified | ||
| 166 | ··-·PCI-DSSv4-11.5.2 | 174 | ··-·PCI-DSSv4-11.5.2 |
| 167 | ··-·enable_strategy | 175 | ··-·enable_strategy |
| 168 | ··-·low_complexity | 176 | ··-·low_complexity |
| 169 | ··-·low_disruption | 177 | ··-·low_disruption |
| 170 | ··-·medium_severity | 178 | ··-·medium_severity |
| 171 | ··-·no_reboot_needed | 179 | ··-·no_reboot_needed |
| 172 | ··-·package_aide_installed | 180 | ··-·package_aide_installed |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | [[packages]] | ||
| 175 | name·=·"aide" | ||
| 176 | version·=·"*" | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 182 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 183 | if·rpm·--quiet·-q·kernel;·then | ||
| 184 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 185 | ····dnf·install·-y·"aide" | ||
| 186 | fi | ||
| 186 | package·--add=aide | ||
| 187 | else | ||
| 188 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 189 | fi | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 192 | include·install_aide | ||
| 195 | 193 | class·install_aide·{ | |
| 194 | ··package·{·'aide': | ||
| 195 | ····ensure·=>·'installed', | ||
| 196 | ··} | ||
| 197 | } | ||
| 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 197 | Run·the·following·command·to·generate·a·new·database: | 199 | Run·the·following·command·to·generate·a·new·database: |
| 198 | $·sudo·/usr/sbin/aide·--init | 200 | $·sudo·/usr/sbin/aide·--init |
| 199 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database, | 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database, |
| 200 | the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a | 202 | the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a |
| 201 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The | 203 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The |
| 202 | newly-generated·database·can·be·installed·as·follows: | 204 | newly-generated·database·can·be·installed·as·follows: |
| Offset 549, 14 lines modified | Offset 549, 33 lines modified | ||
| 549 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 549 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 550 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 550 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 551 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 551 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 552 | ·····················FCS_TLSC_EXT.1 | 552 | ·····················FCS_TLSC_EXT.1 |
| 553 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 553 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 554 | ············_\x8c_\x8i_\x8s······1.9 | 554 | ············_\x8c_\x8i_\x8s······1.9 |
| 555 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 555 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 557 | var_system_crypto_policy='DEFAULT' | ||
| 558 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 559 | rc=$? | ||
| 560 | if·test·"$rc"·=·127;·then | ||
| 561 | » echo·"$stderr_of_call"·>&2 | ||
| 562 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 563 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 564 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 565 | » false··#·end·with·an·error·code | ||
| 566 | elif·test·"$rc"·!=·0;·then | ||
| 567 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 568 | » false··#·end·with·an·error·code | ||
| 569 | fi | ||
| 556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 570 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 557 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 571 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 558 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 572 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 559 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 573 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 560 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 574 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 561 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 575 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 562 | ··set_fact: | 576 | ··set_fact: |
| Offset 601, 33 lines modified | Offset 620, 14 lines modified | ||
| 601 | ··-·PCI-DSSv4-2.2.7 | 620 | ··-·PCI-DSSv4-2.2.7 |
| 602 | ··-·configure_crypto_policy | 621 | ··-·configure_crypto_policy |
| 603 | ··-·high_severity | 622 | ··-·high_severity |
| 604 | ··-·low_complexity | 623 | ··-·low_complexity |
| 605 | ··-·low_disruption | 624 | ··-·low_disruption |
| 606 | ··-·no_reboot_needed | 625 | ··-·no_reboot_needed |
| Max diff block lines reached; 1001628/1006813 bytes (99.49%) of diff not shown. | |||
| Offset 15467, 133 lines modified | Offset 15467, 133 lines modified | ||
| 0003c6a0:·612d·7461·7267·6574·3d22·2369·646d·3132··a-target="#idm12 | 0003c6a0:·612d·7461·7267·6574·3d22·2369·646d·3132··a-target="#idm12 | ||
| 0003c6b0:·3134·2220·7461·6269·6e64·6578·3d22·3022··14"·tabindex="0" | 0003c6b0:·3134·2220·7461·6269·6e64·6578·3d22·3022··14"·tabindex="0" | ||
| 0003c6c0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003c6c0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003c6d0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003c6d0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003c6e0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003c6e0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003c6f0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003c6f0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003c700:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003c700:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003c710:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003c720:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003c730:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c740:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c750:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003c760:·6964·3d22·6964·6d31·3231·3422·3e3c·7072··id="idm1214"><pr | |||
| 0003c770:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003c780:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003c790:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003c710:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003c720:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003c730:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003c740:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003c750:·7073·6522·2069·643d·2269·646d·3132·3134··pse"·id="idm1214 | |||
| 0003c760:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003c770:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003c780:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003c790:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003c7a0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003c7b0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003c7c0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003c7d0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003c7e0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c7f0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003c800:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003c810:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003c820:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003c830:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003c840:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003c850:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003c860:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003c870:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003c880:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003c890:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003c8a0:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003c8b0:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003c8c0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003c8d0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003c8e0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003c8f0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003c900:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003c910:·6964·6d31·3231·3522·2074·6162·696e·6465··idm1215"·tabinde | |||
| 0003c920:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003c930:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003c940:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003c950:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003c960:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003c970:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003c980:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003c990:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c9a0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c9b0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003c9c0:·646d·3132·3135·223e·3c74·6162·6c65·2063··dm1215"><table·c | |||
| 0003c9d0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003c9e0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003c9f0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003ca00:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003ca10:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003ca20:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ca30:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003ca40:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003ca50:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ca60:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003ca70:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003ca80:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003ca90:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003caa0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003cab0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003cac0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003cad0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003cae0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003caf0:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003cb00:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003cb10:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003cb20:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003cb30:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003cb40:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003cb50:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003cb60:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003cb70:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003cb80:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003cb90:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003cba0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003cbb0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003cbc0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003cbd0:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003cbe0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003cbf0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003cc00:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003cc10:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003cc20:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003cc30:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003cc40:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003cc50:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003cc60:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003cc70:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003cc80:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003cc90:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003cca0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003ccb0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003ccc0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003ccd0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003cce0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003ccf0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003cd00:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003cd10:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003cd20:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003c | 0003c7a0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | ||
| 0003c | 0003c7b0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003c | 0003c7c0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003c | 0003c7d0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003c | 0003c7e0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003c | 0003c7f0:·6574·3d22·2369·646d·3132·3135·2220·7461··et="#idm1215"·ta | ||
| 0003c | 0003c800:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003c | 0003c810:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003c | 0003c820:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003c | 0003c830:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003c | 0003c840:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003c | 0003c850:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003c860:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| Max diff block lines reached; 2707304/2724306 bytes (99.38%) of diff not shown. | |||
| Offset 160, 26 lines modified | Offset 160, 19 lines modified | ||
| 160 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 160 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 161 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 161 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 162 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 162 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 163 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 163 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 164 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 164 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 165 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 165 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 166 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 166 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 172 | include·install_aide | ||
| 168 | [[packages]] | ||
| 169 | name·=·"aide" | ||
| 170 | version·=·"*" | ||
| 173 | class·install_aide·{ | ||
| 174 | ··package·{·'aide': | ||
| 175 | ····ensure·=>·'installed', | ||
| 176 | ··} | ||
| 177 | } | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 183 | -·name:·Gather·the·package·facts | 176 | -·name:·Gather·the·package·facts |
| 184 | ··package_facts: | 177 | ··package_facts: |
| Offset 208, 19 lines modified | Offset 201, 26 lines modified | ||
| 208 | ··-·PCI-DSSv4-11.5.2 | 201 | ··-·PCI-DSSv4-11.5.2 |
| 209 | ··-·enable_strategy | 202 | ··-·enable_strategy |
| 210 | ··-·low_complexity | 203 | ··-·low_complexity |
| 211 | ··-·low_disruption | 204 | ··-·low_disruption |
| 212 | ··-·medium_severity | 205 | ··-·medium_severity |
| 213 | ··-·no_reboot_needed | 206 | ··-·no_reboot_needed |
| 214 | ··-·package_aide_installed | 207 | ··-·package_aide_installed |
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 209 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 210 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 211 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 212 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 213 | include·install_aide | ||
| 216 | [[packages]] | ||
| 217 | name·=·"aide" | ||
| 218 | 214 | class·install_aide·{ | |
| 215 | ··package·{·'aide': | ||
| 216 | ····ensure·=>·'installed', | ||
| 217 | ··} | ||
| 218 | } | ||
| 219 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 219 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 220 | Run·the·following·command·to·generate·a·new·database: | 220 | Run·the·following·command·to·generate·a·new·database: |
| 221 | $·sudo·/usr/sbin/aide·--init | 221 | $·sudo·/usr/sbin/aide·--init |
| 222 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 222 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 223 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 223 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 224 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 224 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 225 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 225 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 556, 14 lines modified | Offset 556, 33 lines modified | ||
| 556 | ············_\x8i_\x8s_\x8m······1446 | 556 | ············_\x8i_\x8s_\x8m······1446 |
| 557 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 557 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 558 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 558 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 559 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 559 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 560 | ·····················FCS_TLSC_EXT.1 | 560 | ·····················FCS_TLSC_EXT.1 |
| 561 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 561 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 562 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 562 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 563 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 564 | var_system_crypto_policy='DEFAULT' | ||
| 565 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 566 | rc=$? | ||
| 567 | if·test·"$rc"·=·127;·then | ||
| 568 | » echo·"$stderr_of_call"·>&2 | ||
| 569 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 570 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 571 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 572 | » false··#·end·with·an·error·code | ||
| 573 | elif·test·"$rc"·!=·0;·then | ||
| 574 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 575 | » false··#·end·with·an·error·code | ||
| 576 | fi | ||
| 563 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 577 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 564 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 578 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 565 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 579 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 566 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 580 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 567 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 581 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 568 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 582 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 569 | ··set_fact: | 583 | ··set_fact: |
| Offset 608, 33 lines modified | Offset 627, 14 lines modified | ||
| 608 | ··-·PCI-DSSv4-2.2.7 | 627 | ··-·PCI-DSSv4-2.2.7 |
| 609 | ··-·configure_crypto_policy | 628 | ··-·configure_crypto_policy |
| 610 | ··-·high_severity | 629 | ··-·high_severity |
| 611 | ··-·low_complexity | 630 | ··-·low_complexity |
| 612 | ··-·low_disruption | 631 | ··-·low_disruption |
| 613 | ··-·no_reboot_needed | 632 | ··-·no_reboot_needed |
| 614 | ··-·restrict_strategy | 633 | ··-·restrict_strategy |
| 615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 616 | var_system_crypto_policy='DEFAULT' | ||
| 617 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 618 | rc=$? | ||
| 619 | if·test·"$rc"·=·127;·then | ||
| 620 | » echo·"$stderr_of_call"·>&2 | ||
| 621 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 622 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 623 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 624 | » false··#·end·with·an·error·code | ||
| 625 | elif·test·"$rc"·!=·0;·then | ||
| 626 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 627 | » false··#·end·with·an·error·code | ||
| 628 | fi | ||
| 629 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 634 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 630 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 635 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 631 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that | 636 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that |
| 632 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either | 637 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either |
| 633 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 638 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 634 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate | 639 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate |
| 635 | ············expectations,·and·makes·system·configuration·more·fragmented. | 640 | ············expectations,·and·makes·system·configuration·more·fragmented. |
| Offset 645, 14 lines modified | Offset 645, 19 lines modified | ||
| Max diff block lines reached; 314816/320457 bytes (98.24%) of diff not shown. | |||
| Offset 16285, 195 lines modified | Offset 16285, 195 lines modified | ||
| 0003f9c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003f9c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003f9d0:·646d·3134·3432·2220·7461·6269·6e64·6578··dm1442"·tabindex | 0003f9d0:·646d·3134·3432·2220·7461·6269·6e64·6578··dm1442"·tabindex | ||
| 0003f9e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003f9e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003f9f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003f9f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003fa00:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003fa00:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003fa10:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003fa10:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003fa20:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003fa20:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003fa30:·6d65·6469·6174·696f·6e20· | 0003fa30:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | ||
| 0003fa40:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003fa50:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003fa60:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003fa70:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003fa80:·6d31·3434·3222·3e3c·7461·626c·6520·636c··m1442"><table·cl | |||
| 0003fa90:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003faa0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003fab0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003fac0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003fa | 0003fa40:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 0003fa50:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003fa60:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003fa70:·6c61·7073·6522·2069·643d·2269·646d·3134··lapse"·id="idm14 | |||
| 0003fa80:·3432·223e·3c70·7265·3e3c·636f·6465·3e23··42"><pre><code># | |||
| 0003fa90:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003faa0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003fab0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003fac0:·6f72·6d73·0a69·6620·7270·6d20·2d2d·7175··orms.if·rpm·--qu | |||
| 0003fad0:·6965·7420·2d71·2062·696e·643b·2074·6865··iet·-q·bind;·the | |||
| 0003fae0:·6e0a·0a66·756e·6374·696f·6e20·7265·6d65··n..function·reme | |||
| 0003faf0:·6469·6174·655f·6269·6e64·5f63·7279·7074··diate_bind_crypt | |||
| 0003fb00:·6f5f·706f·6c69·6379·2829·207b·0a09·434f··o_policy()·{..CO | |||
| 0003fb10:·4e46·4947·5f46·494c·453d·222f·6574·632f··NFIG_FILE="/etc/ | |||
| 0003fb20:·6e61·6d65·642e·636f·6e66·220a·0969·6620··named.conf"..if· | |||
| 0003fb30:·7465·7374·202d·6620·2224·434f·4e46·4947··test·-f·"$CONFIG | |||
| 0003fb40:·5f46·494c·4522·3b20·7468·656e·0a09·0973··_FILE";·then...s | |||
| 0003fb50:·6564·202d·6920·2773·7c6f·7074·696f·6e73··ed·-i·'s|options | |||
| 0003fb60:·207b·7c26·616d·703b·5c6e·5c74·696e·636c···{|&\n\tincl | |||
| 0003fb70:·7564·6520·222f·6574·632f·6372·7970·746f··ude·"/etc/crypto | |||
| 0003fb80:·2d70·6f6c·6963·6965·732f·6261·636b·2d65··-policies/back-e | |||
| 0003fb90:·6e64·732f·6269·6e64·2e63·6f6e·6669·6722··nds/bind.config" | |||
| 0003fba0:·3b7c·2720·2224·434f·4e46·4947·5f46·494c··;|'·"$CONFIG_FIL | |||
| 0003fbb0:·4522·0a09·0972·6574·7572·6e20·300a·0965··E"...return·0..e | |||
| 0003fbc0:·6c73·650a·0909·6563·686f·2022·4162·6f72··lse...echo·"Abor | |||
| 0003fbd0:·7469·6e67·2072·656d·6564·6961·7469·6f6e··ting·remediation | |||
| 0003fbe0:·2061·7320·2724·434f·4e46·4947·5f46·494c···as·'$CONFIG_FIL | |||
| 0003fbf0:·4527·2077·6173·206e·6f74·2065·7665·6e20··E'·was·not·even· | |||
| 0003fc00:·666f·756e·642e·2220·2667·743b·2661·6d70··found."·>& | |||
| 0003fc10:·3b32·0a09·0972·6574·7572·6e20·310a·0966··;2...return·1..f | |||
| 0003fc20:·690a·7d0a·0a72·656d·6564·6961·7465·5f62··i.}..remediate_b | |||
| 0003fc30:·696e·645f·6372·7970·746f·5f70·6f6c·6963··ind_crypto_polic | |||
| 0003fc40:·790a·0a65·6c73·650a·2020·2020·2667·743b··y..else.····> | |||
| 0003fc50:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003fc60:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003fc70:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003fc80:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003fc90:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003fca0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003fcb0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003fcc0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003fcd0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003fce0:·743d·2223·6964·6d31·3434·3322·2074·6162··t="#idm1443"·tab | |||
| 0003fcf0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003fd00:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003fd10:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003fd20:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003fd30:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003fd40:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003fd50:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003fd60:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003fd70:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003fd80:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003fd90:·643d·2269·646d·3134·3433·223e·3c74·6162··d="idm1443"><tab | |||
| 0003fda0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003fdb0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003fdc0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003fdd0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003fde0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003fdf0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003fe00:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003fe10:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003f | 0003fe20:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003faf0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003f | 0003fe30:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003fe40:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003f | 0003fe50:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003fe60:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003fe70:·3e63·6f6e·6669·6775·7265·3c2f·7464·3e3c··>configure</td>< | |||
| 0003fe80:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003fe90:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | |||
| 0003fea0:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | |||
| 0003fb20:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003fb30:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003fb40:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003fb50:·6779·3a3c·2f74·683e·3c74·643e·636f·6e66··gy:</th><td>conf | |||
| 0003fb60:·6967·7572·653c·2f74·643e·3c2f·7472·3e3c··igure</td></tr>< | |||
| 0003fb70:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003fb80:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003fb90:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003fba0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003fbb0:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003fbc0:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003fbd0:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 0003fbe0:·2d31·3228·3229·0a20·202d·204e·4953·542d··-12(2).··-·NIST- | |||
| 0003fbf0:·3830·302d·3533·2d53·432d·3132·2833·290a··800-53-SC-12(3). | |||
| 0003fc00:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003fc10:·5343·2d31·330a·2020·2d20·636f·6e66·6967··SC-13.··-·config | |||
| 0003fc20:·7572·655f·6269·6e64·5f63·7279·7074·6f5f··ure_bind_crypto_ | |||
| 0003fc30:·706f·6c69·6379·0a20·202d·2063·6f6e·6669··policy.··-·confi | |||
| 0003fc40:·6775·7265·5f73·7472·6174·6567·790a·2020··gure_strategy.·· | |||
| 0003fc50:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | |||
| 0003fc60:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003fc70:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003fc80:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | |||
| 0003fc90:·6f6f·745f·6e65·6564·6564·0a0a·2d20·6e61··oot_needed..-·na | |||
| 0003fca0:·6d65·3a20·436f·6e66·6967·7572·6520·4249··me:·Configure·BI | |||
| 0003fcb0:·4e44·2074·6f20·7573·6520·5379·7374·656d··ND·to·use·System | |||
| 0003fcc0:·2043·7279·7074·6f20·506f·6c69·6379·202d···Crypto·Policy·- | |||
| 0003fcd0:·2043·6865·636b·2042·494e·4420·636f·6e66···Check·BIND·conf | |||
| 0003fce0:·6967·7572·6174·696f·6e20·6669·6c65·0a20··iguration·file.· | |||
| 0003fcf0:·2020·2065·7869·7374·730a·2020·616e·7369·····exists.··ansi | |||
| 0003fd00:·626c·652e·6275·696c·7469·6e2e·7374·6174··ble.builtin.stat | |||
| 0003fd10:·3a0a·2020·2020·7061·7468·3a20·2f65·7463··:.····path:·/etc | |||
| 0003fd20:·2f6e·616d·6564·2e63·6f6e·660a·2020·7265··/named.conf.··re | |||
| 0003fd30:·6769·7374·6572·3a20·6269·6e64·5f63·6f6e··gister:·bind_con | |||
| 0003fd40:·6669·675f·6669·6c65·0a20·2077·6865·6e3a··fig_file.··when: | |||
| 0003fd50:·2027·2262·696e·6422·2069·6e20·616e·7369···'"bind"·in·ansi | |||
| 0003f | 0003feb0:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | ||
| 0003f | 0003fec0:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | ||
| Max diff block lines reached; 371472/397030 bytes (93.56%) of diff not shown. | |||
| Offset 343, 14 lines modified | Offset 343, 35 lines modified | ||
| 343 | ············violate·expectations,·and·makes·system·configuration·more·fragmented. | 343 | ············violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 344 | Severity: ··high | 344 | Severity: ··high |
| 345 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_bind_crypto_policy | 345 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_bind_crypto_policy |
| 346 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002418,·CCI-002422 | 346 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002418,·CCI-002422 |
| 347 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 347 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 348 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) | 348 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) |
| 349 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000423-GPOS-00187,·SRG-OS-000426-GPOS-00190 | 349 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000423-GPOS-00187,·SRG-OS-000426-GPOS-00190 |
| 350 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 351 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 352 | if·rpm·--quiet·-q·bind;·then | ||
| 353 | function·remediate_bind_crypto_policy()·{ | ||
| 354 | » CONFIG_FILE="/etc/named.conf" | ||
| 355 | » if·test·-f·"$CONFIG_FILE";·then | ||
| 356 | » » sed·-i·'s|options·{|&\n\tinclude·"/etc/crypto-policies/back-ends/bind.config";|' | ||
| 357 | "$CONFIG_FILE" | ||
| 358 | » » return·0 | ||
| 359 | » else | ||
| 360 | » » echo·"Aborting·remediation·as·'$CONFIG_FILE'·was·not·even·found."·>&2 | ||
| 361 | » » return·1 | ||
| 362 | » fi | ||
| 363 | } | ||
| 364 | remediate_bind_crypto_policy | ||
| 365 | else | ||
| 366 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 367 | fi | ||
| 350 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 368 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 351 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 369 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 352 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 370 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 353 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 371 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 354 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 372 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 355 | -·name:·Gather·the·package·facts | 373 | -·name:·Gather·the·package·facts |
| 356 | ··package_facts: | 374 | ··package_facts: |
| Offset 417, 35 lines modified | Offset 438, 14 lines modified | ||
| 417 | ··-·NIST-800-53-SC-13 | 438 | ··-·NIST-800-53-SC-13 |
| 418 | ··-·configure_bind_crypto_policy | 439 | ··-·configure_bind_crypto_policy |
| 419 | ··-·configure_strategy | 440 | ··-·configure_strategy |
| 420 | ··-·high_severity | 441 | ··-·high_severity |
| 421 | ··-·low_complexity | 442 | ··-·low_complexity |
| 422 | ··-·low_disruption | 443 | ··-·low_disruption |
| 423 | ··-·no_reboot_needed | 444 | ··-·no_reboot_needed |
| 424 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 425 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 426 | if·rpm·--quiet·-q·bind;·then | ||
| 427 | function·remediate_bind_crypto_policy()·{ | ||
| 428 | » CONFIG_FILE="/etc/named.conf" | ||
| 429 | » if·test·-f·"$CONFIG_FILE";·then | ||
| 430 | » » sed·-i·'s|options·{|&\n\tinclude·"/etc/crypto-policies/back-ends/bind.config";|' | ||
| 431 | "$CONFIG_FILE" | ||
| 432 | » » return·0 | ||
| 433 | » else | ||
| 434 | » » echo·"Aborting·remediation·as·'$CONFIG_FILE'·was·not·even·found."·>&2 | ||
| 435 | » » return·1 | ||
| 436 | » fi | ||
| 437 | } | ||
| 438 | remediate_bind_crypto_policy | ||
| 439 | else | ||
| 440 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 441 | fi | ||
| 442 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 445 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 443 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·DEFAULT | 446 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·DEFAULT |
| 444 | policy,·run·the·following·command: | 447 | policy,·run·the·following·command: |
| 445 | $·sudo·update-crypto-policies·--set·DEFAULT | 448 | $·sudo·update-crypto-policies·--set·DEFAULT |
| 446 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected. | 449 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected. |
| 447 | Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to | 450 | Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to |
| 448 | correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case | 451 | correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case |
| Offset 478, 14 lines modified | Offset 478, 34 lines modified | ||
| 478 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 478 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 479 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 479 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 480 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, | 480 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, |
| 481 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 | 481 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 482 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- | 482 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- |
| 483 | ·····················GPOS-00174 | 483 | ·····················GPOS-00174 |
| 484 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 484 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 485 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 486 | var_system_crypto_policy='DEFAULT' | ||
| 487 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 488 | null) | ||
| 489 | rc=$? | ||
| 490 | if·test·"$rc"·=·127;·then | ||
| 491 | » echo·"$stderr_of_call"·>&2 | ||
| 492 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 493 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 494 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 495 | » false··#·end·with·an·error·code | ||
| 496 | elif·test·"$rc"·!=·0;·then | ||
| 497 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 498 | » false··#·end·with·an·error·code | ||
| 499 | fi | ||
| 485 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 500 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 486 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 501 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 487 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 502 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 488 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 503 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 489 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 504 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 490 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 505 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 491 | ··set_fact: | 506 | ··set_fact: |
| Offset 530, 34 lines modified | Offset 550, 14 lines modified | ||
| 530 | ··-·PCI-DSSv4-2.2.7 | 550 | ··-·PCI-DSSv4-2.2.7 |
| 531 | ··-·configure_crypto_policy | 551 | ··-·configure_crypto_policy |
| 532 | ··-·high_severity | 552 | ··-·high_severity |
| 533 | ··-·low_complexity | 553 | ··-·low_complexity |
| 534 | ··-·low_disruption | 554 | ··-·low_disruption |
| 535 | ··-·no_reboot_needed | 555 | ··-·no_reboot_needed |
| 536 | ··-·restrict_strategy | 556 | ··-·restrict_strategy |
| 537 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 538 | var_system_crypto_policy='DEFAULT' | ||
| 539 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 540 | null) | ||
| 541 | rc=$? | ||
| 542 | if·test·"$rc"·=·127;·then | ||
| 543 | » echo·"$stderr_of_call"·>&2 | ||
| 544 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 545 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| Max diff block lines reached; 35205/40480 bytes (86.97%) of diff not shown. | |||
| Offset 15823, 134 lines modified | Offset 15823, 134 lines modified | ||
| 0003dce0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003dce0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003dcf0:·6964·6d31·3330·3822·2074·6162·696e·6465··idm1308"·tabinde | 0003dcf0:·6964·6d31·3330·3822·2074·6162·696e·6465··idm1308"·tabinde | ||
| 0003dd00:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003dd00:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003dd10:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003dd10:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003dd20:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003dd20:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003dd30:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003dd30:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003dd40:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003dd40:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003dd50:·656d·6564·6961·7469·6f6e·20 | 0003dd50:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003dd60:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003dd70:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003dd80:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003dd90:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003dda0:·7073·6522·2069·643d·2269·646d·3133·3038··pse"·id="idm1308 | |||
| 0003dd60:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003dd70:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003dd80:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003dd90:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003dda0:·6d31·3330·3822·3e3c·7461·626c·6520·636c··m1308"><table·cl | |||
| 0003ddb0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003ddc0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003ddd0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003dde0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ddf0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003de00:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003de10:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003de20:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003de30:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003de40:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003de50:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003de60:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003de70:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003de80:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003d | 0003ddb0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 0003ddc0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003ddd0:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003dde0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003dea0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003deb0:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003dec0:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003ded0:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003dee0:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003def0:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003df00:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003df10:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003df20:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003df30:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003df40:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003df50:·6574·3d22·2369·646d·3133·3039·2220·7461··et="#idm1309"·ta | |||
| 0003df60:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003df70:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003df80:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003df90:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003dfa0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003dfb0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003dfc0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003dfd0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003dfe0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003dff0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003e000:·6964·3d22·6964·6d31·3330·3922·3e3c·7461··id="idm1309"><ta | |||
| 0003e010:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003e020:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003e030:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003e040:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003e050:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003e060:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003e070:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003e080:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003e090:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003e0a0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003e0b0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003e0c0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003e0d0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003e0e0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003e0f0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003e100:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003e110:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003e120:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003e130:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003e140:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003e150:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003e160:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003e170:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003e180:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003e190:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003e1a0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003e1b0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003e1c0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003e1d0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003e1e0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003e1f0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003e200:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003e210:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003e220:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003e230:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003e240:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003e250:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003e260:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003e270:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003e280:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003e290:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003e2a0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003e2b0:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003e2c0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003e2d0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003e2e0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003e2f0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003e300:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003e310:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003e320:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003e330:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003e340:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003e350:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003e360:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003e370:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003 | 0003ddf0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | ||
| 0003 | 0003de00:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | ||
| 0003 | 0003de10:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | ||
| 0003 | 0003de20:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | ||
| 0003e3 | 0003de30:·2d74·6172·6765·743d·2223·6964·6d31·3330··-target="#idm130 | ||
| 0003 | 0003de40:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | ||
| 0003 | 0003de50:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003 | 0003de60:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003 | 0003de70:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003 | 0003de80:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003 | 0003de90:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003dea0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003e430:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| Max diff block lines reached; 2635805/2652945 bytes (99.35%) of diff not shown. | |||
| Offset 202, 26 lines modified | Offset 202, 19 lines modified | ||
| 202 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 202 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 203 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 203 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 204 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 204 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 205 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 205 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 207 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 207 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 214 | include·install_aide | ||
| 210 | [[packages]] | ||
| 211 | name·=·"aide" | ||
| 212 | version·=·"*" | ||
| 215 | class·install_aide·{ | ||
| 216 | ··package·{·'aide': | ||
| 217 | ····ensure·=>·'installed', | ||
| 218 | ··} | ||
| 219 | } | ||
| 220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 221 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 222 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 223 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 224 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 225 | -·name:·Gather·the·package·facts | 218 | -·name:·Gather·the·package·facts |
| 226 | ··package_facts: | 219 | ··package_facts: |
| Offset 250, 19 lines modified | Offset 243, 26 lines modified | ||
| 250 | ··-·PCI-DSSv4-11.5.2 | 243 | ··-·PCI-DSSv4-11.5.2 |
| 251 | ··-·enable_strategy | 244 | ··-·enable_strategy |
| 252 | ··-·low_complexity | 245 | ··-·low_complexity |
| 253 | ··-·low_disruption | 246 | ··-·low_disruption |
| 254 | ··-·medium_severity | 247 | ··-·medium_severity |
| 255 | ··-·no_reboot_needed | 248 | ··-·no_reboot_needed |
| 256 | ··-·package_aide_installed | 249 | ··-·package_aide_installed |
| 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 250 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 251 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 252 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 253 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 254 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 255 | include·install_aide | ||
| 258 | [[packages]] | ||
| 259 | name·=·"aide" | ||
| 260 | 256 | class·install_aide·{ | |
| 257 | ··package·{·'aide': | ||
| 258 | ····ensure·=>·'installed', | ||
| 259 | ··} | ||
| 260 | } | ||
| 261 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 261 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 262 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 262 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 263 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 263 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 264 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 264 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 265 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 265 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 266 | crontab: | 266 | crontab: |
| 267 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 267 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 475, 14 lines modified | Offset 475, 33 lines modified | ||
| 475 | ············_\x8i_\x8s_\x8m······1446 | 475 | ············_\x8i_\x8s_\x8m······1446 |
| 476 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 476 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 477 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 477 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 478 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 478 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 479 | ·····················FCS_TLSC_EXT.1 | 479 | ·····················FCS_TLSC_EXT.1 |
| 480 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 480 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 481 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 481 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 483 | var_system_crypto_policy='DEFAULT' | ||
| 484 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 485 | rc=$? | ||
| 486 | if·test·"$rc"·=·127;·then | ||
| 487 | » echo·"$stderr_of_call"·>&2 | ||
| 488 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 489 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 490 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 491 | » false··#·end·with·an·error·code | ||
| 492 | elif·test·"$rc"·!=·0;·then | ||
| 493 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 494 | » false··#·end·with·an·error·code | ||
| 495 | fi | ||
| 482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 496 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 483 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 497 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 484 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 498 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 485 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 499 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 486 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 500 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 487 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 501 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 488 | ··set_fact: | 502 | ··set_fact: |
| Offset 527, 33 lines modified | Offset 546, 14 lines modified | ||
| 527 | ··-·PCI-DSSv4-2.2.7 | 546 | ··-·PCI-DSSv4-2.2.7 |
| 528 | ··-·configure_crypto_policy | 547 | ··-·configure_crypto_policy |
| 529 | ··-·high_severity | 548 | ··-·high_severity |
| 530 | ··-·low_complexity | 549 | ··-·low_complexity |
| 531 | ··-·low_disruption | 550 | ··-·low_disruption |
| 532 | ··-·no_reboot_needed | 551 | ··-·no_reboot_needed |
| 533 | ··-·restrict_strategy | 552 | ··-·restrict_strategy |
| 534 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 535 | var_system_crypto_policy='DEFAULT' | ||
| 536 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 537 | rc=$? | ||
| 538 | if·test·"$rc"·=·127;·then | ||
| 539 | » echo·"$stderr_of_call"·>&2 | ||
| 540 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 541 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 542 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 543 | » false··#·end·with·an·error·code | ||
| 544 | elif·test·"$rc"·!=·0;·then | ||
| 545 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 546 | » false··#·end·with·an·error·code | ||
| 547 | fi | ||
| 548 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 553 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 549 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 554 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 550 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that | 555 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that |
| 551 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either | 556 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either |
| 552 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 557 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 553 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate | 558 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate |
| 554 | ············expectations,·and·makes·system·configuration·more·fragmented. | 559 | ············expectations,·and·makes·system·configuration·more·fragmented. |
| Offset 564, 14 lines modified | Offset 564, 19 lines modified | ||
| Max diff block lines reached; 294974/300537 bytes (98.15%) of diff not shown. | |||
| Offset 15755, 195 lines modified | Offset 15755, 195 lines modified | ||
| 0003d8a0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003d8a0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003d8b0:·3134·3530·2220·7461·6269·6e64·6578·3d22··1450"·tabindex=" | 0003d8b0:·3134·3530·2220·7461·6269·6e64·6578·3d22··1450"·tabindex=" | ||
| 0003d8c0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003d8c0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003d8d0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003d8d0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003d8e0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003d8e0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003d8f0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003d8f0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003d900:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003d900:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003d910:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003d920:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003d930:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003d940:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003d950:·7073·6522·2069·643d·2269·646d·3134·3530··pse"·id="idm1450 | |||
| 0003d960:·223e·3c70·7265·3e3c·636f·6465·3e23·2052··"><pre><code>#·R | |||
| 0003d970:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003d980:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003d990:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003d9a0:·6d73·0a69·6620·7270·6d20·2d2d·7175·6965··ms.if·rpm·--quie | |||
| 0003d9b0:·7420·2d71·2062·696e·643b·2074·6865·6e0a··t·-q·bind;·then. | |||
| 0003d9c0:·0a66·756e·6374·696f·6e20·7265·6d65·6469··.function·remedi | |||
| 0003d910:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003d920:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003d930:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003d940:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003d950:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003d960:·3435·3022·3e3c·7461·626c·6520·636c·6173··450"><table·clas | |||
| 0003d970:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003d980:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003d990:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003d9a0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003d9b0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003d9c0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003d9d0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003d9e0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003d9f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003da00:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003da10:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003da20:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003da30:·3a3c·2f74·683e·3c74·643e·636f·6e66·6967··:</th><td>config | |||
| 0003da40:·7572·653c·2f74·643e·3c2f·7472·3e3c·2f74··ure</td></tr></t | |||
| 0003da50:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003da60:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003da70:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003da80:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003da90:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003daa0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003dab0:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003dac0:·3228·3229·0a20·202d·204e·4953·542d·3830··2(2).··-·NIST-80 | |||
| 0003dad0:·302d·3533·2d53·432d·3132·2833·290a·2020··0-53-SC-12(3).·· | |||
| 0003dae0:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 0003daf0:·2d31·330a·2020·2d20·636f·6e66·6967·7572··-13.··-·configur | |||
| 0003d | 0003d9d0:·6174·655f·6269·6e64·5f63·7279·7074·6f5f··ate_bind_crypto_ | ||
| 0003db10:·6c69·6379·0a20·202d·2063·6f6e·6669·6775··licy.··-·configu | |||
| 0003db20:·7265·5f73·7472·6174·6567·790a·2020·2d20··re_strategy.··-· | |||
| 0003db30:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | |||
| 0003db40:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003db50:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003db60:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | |||
| 0003db70:·745f·6e65·6564·6564·0a0a·2d20·6e61·6d65··t_needed..-·name | |||
| 0003db80:·3a20·436f·6e66·6967·7572·6520·4249·4e44··:·Configure·BIND | |||
| 0003db90:·2074·6f20·7573·6520·5379·7374·656d·2043···to·use·System·C | |||
| 0003dba0:·7279·7074·6f20·506f·6c69·6379·202d·2043··rypto·Policy·-·C | |||
| 0003dbb0:·6865·636b·2042·494e·4420·636f·6e66·6967··heck·BIND·config | |||
| 0003dbc0:·7572·6174·696f·6e20·6669·6c65·0a20·2020··uration·file.··· | |||
| 0003dbd0:·2065·7869·7374·730a·2020·616e·7369·626c···exists.··ansibl | |||
| 0003dbe0:·652e·6275·696c·7469·6e2e·7374·6174·3a0a··e.builtin.stat:. | |||
| 0003dbf0:·2020·2020·7061·7468·3a20·2f65·7463·2f6e······path:·/etc/n | |||
| 0003dc00:·616d·6564·2e63·6f6e·660a·2020·7265·6769··amed.conf.··regi | |||
| 0003dc10:·7374·6572·3a20·6269·6e64·5f63·6f6e·6669··ster:·bind_confi | |||
| 0003dc20:·675f·6669·6c65·0a20·2077·6865·6e3a·2027··g_file.··when:·' | |||
| 0003d | 0003d9e0:·706f·6c69·6379·2829·207b·0a09·434f·4e46··policy()·{..CONF | ||
| 0003d9f0:·4947·5f46·494c·453d·222f·6574·632f·6e61··IG_FILE="/etc/na | |||
| 0003da00:·6d65·642e·636f·6e66·220a·0969·6620·7465··med.conf"..if·te | |||
| 0003da10:·7374·202d·6620·2224·434f·4e46·4947·5f46··st·-f·"$CONFIG_F | |||
| 0003da20:·494c·4522·3b20·7468·656e·0a09·0973·6564··ILE";·then...sed | |||
| 0003da30:·202d·6920·2773·7c6f·7074·696f·6e73·207b···-i·'s|options·{ | |||
| 0003da40:·7c26·616d·703b·5c6e·5c74·696e·636c·7564··|&\n\tinclud | |||
| 0003da50:·6520·222f·6574·632f·6372·7970·746f·2d70··e·"/etc/crypto-p | |||
| 0003da60:·6f6c·6963·6965·732f·6261·636b·2d65·6e64··olicies/back-end | |||
| 0003da70:·732f·6269·6e64·2e63·6f6e·6669·6722·3b7c··s/bind.config";| | |||
| 0003da80:·2720·2224·434f·4e46·4947·5f46·494c·4522··'·"$CONFIG_FILE" | |||
| 0003da90:·0a09·0972·6574·7572·6e20·300a·0965·6c73··...return·0..els | |||
| 0003daa0:·650a·0909·6563·686f·2022·4162·6f72·7469··e...echo·"Aborti | |||
| 0003dab0:·6e67·2072·656d·6564·6961·7469·6f6e·2061··ng·remediation·a | |||
| 0003dac0:·7320·2724·434f·4e46·4947·5f46·494c·4527··s·'$CONFIG_FILE' | |||
| 0003dad0:·2077·6173·206e·6f74·2065·7665·6e20·666f···was·not·even·fo | |||
| 0003dae0:·756e·642e·2220·2667·743b·2661·6d70·3b32··und."·>&2 | |||
| 0003daf0:·0a09·0972·6574·7572·6e20·310a·0966·690a··...return·1..fi. | |||
| 0003db00:·7d0a·0a72·656d·6564·6961·7465·5f62·696e··}..remediate_bin | |||
| 0003db10:·645f·6372·7970·746f·5f70·6f6c·6963·790a··d_crypto_policy. | |||
| 0003db20:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003db30:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003db40:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003db50:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003db60:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003db70:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003db80:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003db90:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003dba0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003dbb0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003dbc0:·2223·6964·6d31·3435·3122·2074·6162·696e··"#idm1451"·tabin | |||
| 0003dbd0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003dbe0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003dbf0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003dc00:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003dc10:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003dc20:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003dc30:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003dc40:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003dc50:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003dc60:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003dc70:·2269·646d·3134·3531·223e·3c74·6162·6c65··"idm1451"><table | |||
| 0003dc80:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003dc90:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003dca0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003dcb0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003dcc0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003dcd0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003dce0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003dcf0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003dd00:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003dd10:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003dd20:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003dd30:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003dd40:·6174·6567·793a·3c2f·7468·3e3c·7464·3e63··ategy:</th><td>c | |||
| 0003dd50:·6f6e·6669·6775·7265·3c2f·7464·3e3c·2f74··onfigure</td></t | |||
| 0003dd60:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003dd70:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| Max diff block lines reached; 329186/354744 bytes (92.80%) of diff not shown. | |||
| Offset 208, 14 lines modified | Offset 208, 35 lines modified | ||
| 208 | ············violate·expectations,·and·makes·system·configuration·more·fragmented. | 208 | ············violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 209 | Severity: ··high | 209 | Severity: ··high |
| 210 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_bind_crypto_policy | 210 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_bind_crypto_policy |
| 211 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002418,·CCI-002422 | 211 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002418,·CCI-002422 |
| 212 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 212 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 213 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) | 213 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) |
| 214 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000423-GPOS-00187,·SRG-OS-000426-GPOS-00190 | 214 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000423-GPOS-00187,·SRG-OS-000426-GPOS-00190 |
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 216 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 217 | if·rpm·--quiet·-q·bind;·then | ||
| 218 | function·remediate_bind_crypto_policy()·{ | ||
| 219 | » CONFIG_FILE="/etc/named.conf" | ||
| 220 | » if·test·-f·"$CONFIG_FILE";·then | ||
| 221 | » » sed·-i·'s|options·{|&\n\tinclude·"/etc/crypto-policies/back-ends/bind.config";|' | ||
| 222 | "$CONFIG_FILE" | ||
| 223 | » » return·0 | ||
| 224 | » else | ||
| 225 | » » echo·"Aborting·remediation·as·'$CONFIG_FILE'·was·not·even·found."·>&2 | ||
| 226 | » » return·1 | ||
| 227 | » fi | ||
| 228 | } | ||
| 229 | remediate_bind_crypto_policy | ||
| 230 | else | ||
| 231 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 232 | fi | ||
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 237 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 220 | -·name:·Gather·the·package·facts | 238 | -·name:·Gather·the·package·facts |
| 221 | ··package_facts: | 239 | ··package_facts: |
| Offset 282, 35 lines modified | Offset 303, 14 lines modified | ||
| 282 | ··-·NIST-800-53-SC-13 | 303 | ··-·NIST-800-53-SC-13 |
| 283 | ··-·configure_bind_crypto_policy | 304 | ··-·configure_bind_crypto_policy |
| 284 | ··-·configure_strategy | 305 | ··-·configure_strategy |
| 285 | ··-·high_severity | 306 | ··-·high_severity |
| 286 | ··-·low_complexity | 307 | ··-·low_complexity |
| 287 | ··-·low_disruption | 308 | ··-·low_disruption |
| 288 | ··-·no_reboot_needed | 309 | ··-·no_reboot_needed |
| 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 290 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 291 | if·rpm·--quiet·-q·bind;·then | ||
| 292 | function·remediate_bind_crypto_policy()·{ | ||
| 293 | » CONFIG_FILE="/etc/named.conf" | ||
| 294 | » if·test·-f·"$CONFIG_FILE";·then | ||
| 295 | » » sed·-i·'s|options·{|&\n\tinclude·"/etc/crypto-policies/back-ends/bind.config";|' | ||
| 296 | "$CONFIG_FILE" | ||
| 297 | » » return·0 | ||
| 298 | » else | ||
| 299 | » » echo·"Aborting·remediation·as·'$CONFIG_FILE'·was·not·even·found."·>&2 | ||
| 300 | » » return·1 | ||
| 301 | » fi | ||
| 302 | } | ||
| 303 | remediate_bind_crypto_policy | ||
| 304 | else | ||
| 305 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 306 | fi | ||
| 307 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 310 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 308 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·DEFAULT | 311 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·DEFAULT |
| 309 | policy,·run·the·following·command: | 312 | policy,·run·the·following·command: |
| 310 | $·sudo·update-crypto-policies·--set·DEFAULT | 313 | $·sudo·update-crypto-policies·--set·DEFAULT |
| 311 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected. | 314 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected. |
| 312 | Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to | 315 | Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to |
| 313 | correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case | 316 | correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case |
| Offset 343, 14 lines modified | Offset 343, 34 lines modified | ||
| 343 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 343 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 344 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 344 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 345 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, | 345 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, |
| 346 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 | 346 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 347 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- | 347 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- |
| 348 | ·····················GPOS-00174 | 348 | ·····················GPOS-00174 |
| 349 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 349 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 350 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 351 | var_system_crypto_policy='DEFAULT' | ||
| 352 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 353 | null) | ||
| 354 | rc=$? | ||
| 355 | if·test·"$rc"·=·127;·then | ||
| 356 | » echo·"$stderr_of_call"·>&2 | ||
| 357 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 358 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 359 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 360 | » false··#·end·with·an·error·code | ||
| 361 | elif·test·"$rc"·!=·0;·then | ||
| 362 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 363 | » false··#·end·with·an·error·code | ||
| 364 | fi | ||
| 350 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 351 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 352 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 353 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 354 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 355 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 370 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 356 | ··set_fact: | 371 | ··set_fact: |
| Offset 395, 34 lines modified | Offset 415, 14 lines modified | ||
| 395 | ··-·PCI-DSSv4-2.2.7 | 415 | ··-·PCI-DSSv4-2.2.7 |
| 396 | ··-·configure_crypto_policy | 416 | ··-·configure_crypto_policy |
| 397 | ··-·high_severity | 417 | ··-·high_severity |
| 398 | ··-·low_complexity | 418 | ··-·low_complexity |
| 399 | ··-·low_disruption | 419 | ··-·low_disruption |
| 400 | ··-·no_reboot_needed | 420 | ··-·no_reboot_needed |
| 401 | ··-·restrict_strategy | 421 | ··-·restrict_strategy |
| 402 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 403 | var_system_crypto_policy='DEFAULT' | ||
| 404 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 405 | null) | ||
| 406 | rc=$? | ||
| 407 | if·test·"$rc"·=·127;·then | ||
| 408 | » echo·"$stderr_of_call"·>&2 | ||
| 409 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 410 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| Max diff block lines reached; 29547/34822 bytes (84.85%) of diff not shown. | |||
| Offset 15111, 213 lines modified | Offset 15111, 213 lines modified | ||
| 0003b060:·2d74·6172·6765·743d·2223·6964·6d33·3138··-target="#idm318 | 0003b060:·2d74·6172·6765·743d·2223·6964·6d33·3138··-target="#idm318 | ||
| 0003b070:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | 0003b070:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | ||
| 0003b080:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b080:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b090:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b090:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b0a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b0a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b0b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b0b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b0c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b0c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b0d0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b0e0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b0f0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b100:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b110:·7365·2220·6964·3d22·6964·6d33·3138·3722··se"·id="idm3187" | |||
| 0003b120:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b130:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b | 0003b0d0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0003b0e0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b0f0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b100:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b110:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b120:·643d·2269·646d·3331·3837·223e·3c70·7265··d="idm3187"><pre | |||
| 0003b130:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b140:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b150:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b160:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b170:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b180:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b190:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b1a0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b1b0:·743d·2223·6964·6d33·3138·3822·2074·6162··t="#idm3188"·tab | |||
| 0003b1c0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b1d0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b1e0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b1f0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b200:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b210:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003b220:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003b230:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b240:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b250:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b260:·6964·6d33·3138·3822·3e3c·7461·626c·6520··idm3188"><table· | |||
| 0003b270:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b280:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b290:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b2a0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b2b0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b2c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b2d0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b2e0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b2f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b300:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b310:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b320:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b330:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b340:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b350:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b360:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003b370:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003b380:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003b390:·7466·6f72·6d73·0a69·6620·7270·6d20·2d2d··tforms.if·rpm·-- | |||
| 0003b3a0:·7175·6965·7420·2d71·206b·6572·6e65·6c3b··quiet·-q·kernel; | |||
| 0003b3b0:·2074·6865·6e0a·0a69·6620·2120·7270·6d20···then..if·!·rpm· | |||
| 0003b3c0:·2d71·202d·2d71·7569·6574·2022·6169·6465··-q·--quiet·"aide | |||
| 0003b3d0:·2220·3b20·7468·656e·0a20·2020·2064·6e66··"·;·then.····dnf | |||
| 0003b3e0:·2069·6e73·7461·6c6c·202d·7920·2261·6964···install·-y·"aid | |||
| 0003b3f0:·6522·0a66·690a·0a65·6c73·650a·2020·2020··e".fi..else.···· | |||
| 0003b400:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | |||
| 0003b410:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | |||
| 0003b420:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | |||
| 0003b430:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | |||
| 0003b440:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | |||
| 0003b450:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b460:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b470:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b480:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b490:·6172·6765·743d·2223·6964·6d33·3138·3922··arget="#idm3189" | |||
| 0003b4a0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b4b0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b4c0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b4d0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b4e0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b4f0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b500:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b510:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b520:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b530:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b540:·6522·2069·643d·2269·646d·3331·3839·223e··e"·id="idm3189"> | |||
| 0003b550:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b560:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b | 0003b570:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003b160:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b170:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b180:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b190:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b1a0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b1b0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b1c0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b1d0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b1e0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b1f0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b200:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b210:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b220:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b230:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003b240:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b250:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b260:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b | 0003b580:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003b590:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b5a0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b5b0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b5c0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b5d0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b5e0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b5f0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b600:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b610:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b620:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b630:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b640:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b650:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b660:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b670:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b680:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b690:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b6a0:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003b6b0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b6c0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| Max diff block lines reached; 22126269/22154311 bytes (99.87%) of diff not shown. | |||
| Offset 15073, 213 lines modified | Offset 15073, 213 lines modified | ||
| 0003ae00:·6574·3d22·2369·646d·3331·3837·2220·7461··et="#idm3187"·ta | 0003ae00:·6574·3d22·2369·646d·3331·3837·2220·7461··et="#idm3187"·ta | ||
| 0003ae10:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003ae10:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003ae20:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003ae20:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003ae30:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003ae30:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003ae40:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003ae40:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003ae50:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003ae50:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003ae60:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003ae60:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003ae70:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003ae80:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003ae | 0003ae70:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0003ae80:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003ae90:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003aea0:· | 0003aea0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003aeb0:·643d·2269·646d·3331·3837·223e·3c74·6162··d="idm3187"><tab | |||
| 0003aec0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003aed0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003aee0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003aef0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003af00:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003af10:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003af20:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003af30:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003af40:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003af50:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003af60:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003af70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003a | 0003aeb0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003aec0:·6d33·3138·3722·3e3c·7072·653e·3c63·6f64··m3187"><pre><cod | |||
| 0003aed0:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003aee0:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003aef0:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003af00:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003af10:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003af20:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003af30:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003af40:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003af50:·646d·3331·3838·2220·7461·6269·6e64·6578··dm3188"·tabindex | |||
| 0003af60:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003af70:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003af80:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003af90:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003afa0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003afb0:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003afc0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003afd0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003afe0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003aff0:·6c61·7073·6522·2069·643d·2269·646d·3331··lapse"·id="idm31 | |||
| 0003b000:·3838·223e·3c74·6162·6c65·2063·6c61·7373··88"><table·class | |||
| 0003b010:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b020:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b030:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b040:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b050:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b060:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b070:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b080:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b090:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b0a0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003 | 0003b0b0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003afa0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003afb0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003afc0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003afd0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003afe0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003aff0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b000:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b0 | 0003b0c0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003b0d0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b0e0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b0f0:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | |||
| 0003b100:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0003b110:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0003b120:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0003b130:·730a·6966·2072·706d·202d·2d71·7569·6574··s.if·rpm·--quiet | |||
| 0003b140:·202d·7120·6b65·726e·656c·3b20·7468·656e···-q·kernel;·then | |||
| 0003b150:·0a0a·6966·2021·2072·706d·202d·7120·2d2d··..if·!·rpm·-q·-- | |||
| 0003b160:·7175·6965·7420·2261·6964·6522·203b·2074··quiet·"aide"·;·t | |||
| 0003b170:·6865·6e0a·2020·2020·646e·6620·696e·7374··hen.····dnf·inst | |||
| 0003b180:·616c·6c20·2d79·2022·6169·6465·220a·6669··all·-y·"aide".fi | |||
| 0003b190:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003b1a0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003b1b0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003b1c0:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003b1d0:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003b1e0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b1f0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b200:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b210:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b220:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b230:·3d22·2369·646d·3331·3839·2220·7461·6269··="#idm3189"·tabi | |||
| 0003b240:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b250:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b260:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b270:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b280:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b290:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b2a0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b2b0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b2c0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b2d0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b2e0:·3d22·6964·6d33·3138·3922·3e3c·7461·626c··="idm3189"><tabl | |||
| 0003b2f0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b300:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b310:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b320:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b330:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b340:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b350:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b360:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b370:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b380:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b390:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b3a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b3b0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b3c0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b3d0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b3e0:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003b3f0:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003b400:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003b410:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003b420:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003b430:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b440:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b450:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b460:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b470:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b480:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| Max diff block lines reached; 9460809/9488851 bytes (99.70%) of diff not shown. | |||
| Offset 113, 26 lines modified | Offset 113, 34 lines modified | ||
| 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ············_\x8c_\x8i_\x8s············6.1.1 | 118 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | incl | 129 | #·Remediation·is·applicable·only·in·certain·platforms |
| 130 | if·rpm·--quiet·-q·kernel;·then | ||
| 126 | class·install_aide·{ | ||
| 127 | ··package·{·'aide': | ||
| 128 | ····ensure·=>·'installed', | ||
| 129 | ··} | ||
| 130 | 131 | if·!·rpm·-q·--quiet·"aide"·;·then | |
| 132 | ····dnf·install·-y·"aide" | ||
| 133 | fi | ||
| 134 | else | ||
| 135 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 136 | fi | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 136 | -·name:·Gather·the·package·facts | 142 | -·name:·Gather·the·package·facts |
| 137 | ··package_facts: | 143 | ··package_facts: |
| Offset 161, 41 lines modified | Offset 169, 33 lines modified | ||
| 161 | ··-·PCI-DSSv4-11.5.2 | 169 | ··-·PCI-DSSv4-11.5.2 |
| 162 | ··-·enable_strategy | 170 | ··-·enable_strategy |
| 163 | ··-·low_complexity | 171 | ··-·low_complexity |
| 164 | ··-·low_disruption | 172 | ··-·low_disruption |
| 165 | ··-·medium_severity | 173 | ··-·medium_severity |
| 166 | ··-·no_reboot_needed | 174 | ··-·no_reboot_needed |
| 167 | ··-·package_aide_installed | 175 | ··-·package_aide_installed |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | [[packages]] | ||
| 170 | name·=·"aide" | ||
| 171 | version·=·"*" | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 177 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 178 | if·rpm·--quiet·-q·kernel;·then | ||
| 179 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 180 | ····dnf·install·-y·"aide" | ||
| 181 | fi | ||
| 181 | package·--add=aide | ||
| 182 | else | ||
| 183 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 184 | fi | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | include·install_aide | ||
| 190 | 188 | class·install_aide·{ | |
| 189 | ··package·{·'aide': | ||
| 190 | ····ensure·=>·'installed', | ||
| 191 | ··} | ||
| 192 | } | ||
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 192 | Run·the·following·command·to·generate·a·new·database: | 194 | Run·the·following·command·to·generate·a·new·database: |
| 193 | $·sudo·/usr/sbin/aide·--init | 195 | $·sudo·/usr/sbin/aide·--init |
| 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration | 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration |
| 195 | file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only | 197 | file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only |
| 196 | media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 198 | media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 197 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 199 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| Offset 535, 14 lines modified | Offset 535, 33 lines modified | ||
| 535 | ············_\x8i_\x8s_\x8m······1446 | 535 | ············_\x8i_\x8s_\x8m······1446 |
| 536 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 536 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 537 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 537 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 538 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 538 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 539 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 539 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 540 | ············_\x8c_\x8i_\x8s······1.6.1 | 540 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 541 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 541 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 542 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 543 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 544 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 545 | rc=$? | ||
| 546 | if·test·"$rc"·=·127;·then | ||
| 547 | » echo·"$stderr_of_call"·>&2 | ||
| 548 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 549 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 550 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 551 | » false··#·end·with·an·error·code | ||
| 552 | elif·test·"$rc"·!=·0;·then | ||
| 553 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 554 | » false··#·end·with·an·error·code | ||
| 555 | fi | ||
| 542 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 543 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 557 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 544 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 558 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 545 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 559 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 546 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 560 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 547 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 561 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 548 | ··set_fact: | 562 | ··set_fact: |
| Offset 587, 33 lines modified | Offset 606, 14 lines modified | ||
| 587 | ··-·PCI-DSSv4-2.2.7 | 606 | ··-·PCI-DSSv4-2.2.7 |
| 588 | ··-·configure_crypto_policy | 607 | ··-·configure_crypto_policy |
| 589 | ··-·high_severity | 608 | ··-·high_severity |
| 590 | ··-·low_complexity | 609 | ··-·low_complexity |
| 591 | ··-·low_disruption | 610 | ··-·low_disruption |
| 592 | ··-·no_reboot_needed | 611 | ··-·no_reboot_needed |
| Max diff block lines reached; 1054873/1060143 bytes (99.50%) of diff not shown. | |||
| Offset 15064, 213 lines modified | Offset 15064, 213 lines modified | ||
| 0003ad70:·612d·7461·7267·6574·3d22·2369·646d·3331··a-target="#idm31 | 0003ad70:·612d·7461·7267·6574·3d22·2369·646d·3331··a-target="#idm31 | ||
| 0003ad80:·3837·2220·7461·6269·6e64·6578·3d22·3022··87"·tabindex="0" | 0003ad80:·3837·2220·7461·6269·6e64·6578·3d22·3022··87"·tabindex="0" | ||
| 0003ad90:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003ad90:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003ada0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003ada0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003adb0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003adb0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003adc0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003adc0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003add0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003add0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003ade0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003adf0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003ae00:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003ae10:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003ae20:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003ae30:·6964·3d22·6964·6d33·3138·3722·3e3c·7072··id="idm3187"><pr | |||
| 0003ae40:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003ae50:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003ae60:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003ae70:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003ae80:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003ae90:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003aea0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003aeb0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003aec0:·6574·3d22·2369·646d·3331·3838·2220·7461··et="#idm3188"·ta | |||
| 0003aed0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003aee0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003aef0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003af00:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003af10:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003af20:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003af30:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003ade0:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003adf0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ae00:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ae10:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ae20:·7073·6522·2069·643d·2269·646d·3331·3837··pse"·id="idm3187 | |||
| 0003ae30:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003ae40:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003ae50:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003ae60:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003ae70:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003ae80:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003ae90:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003aea0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003aeb0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003aec0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003aed0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003aee0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003aef0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003af00:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003af10:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003af20:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003af30:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003af40:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003af50:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003af60:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003af70:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003af80:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003af90:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003afa0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003afb0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003afc0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003afd0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003afe0:·6964·6d33·3138·3822·2074·6162·696e·6465··idm3188"·tabinde | |||
| 0003aff0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b000:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b010:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b020:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b030:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b040:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b050:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003 | 0003af40:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003 | 0003af50:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003 | 0003af60:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003 | 0003af70:·2269·646d·3331·3838·223e·3c74·6162·6c65··"idm3188"><table | ||
| 0003 | 0003af80:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003 | 0003af90:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003 | 0003afa0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b0d | 0003afb0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003 | 0003afc0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003 | 0003afd0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003 | 0003afe0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003 | 0003aff0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b000:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b010:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b020:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b030:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b040:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b050:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b060:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b070:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | |||
| 0003b080:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 0003b090:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 0003b0a0:·6174·666f·726d·730a·6966·2072·706d·202d··atforms.if·rpm·- | |||
| 0003b0b0:·2d71·7569·6574·202d·7120·6b65·726e·656c··-quiet·-q·kernel | |||
| 0003b0c0:·3b20·7468·656e·0a0a·6966·2021·2072·706d··;·then..if·!·rpm | |||
| 0003b0d0:·202d·7120·2d2d·7175·6965·7420·2261·6964···-q·--quiet·"aid | |||
| 0003b0e0:·6522·203b·2074·6865·6e0a·2020·2020·646e··e"·;·then.····dn | |||
| 0003b0f0:·6620·696e·7374·616c·6c20·2d79·2022·6169··f·install·-y·"ai | |||
| 0003b100:·6465·220a·6669·0a0a·656c·7365·0a20·2020··de".fi..else.··· | |||
| 0003b110:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 0003b120:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | |||
| 0003b130:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 0003b140:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 0003b150:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | |||
| 0003b160:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b170:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b180:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b190:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b1a0:·7461·7267·6574·3d22·2369·646d·3331·3839··target="#idm3189 | |||
| 0003b1b0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b1c0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b1d0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b1e0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b1f0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b200:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b210:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b220:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b230:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b240:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b250:·7365·2220·6964·3d22·6964·6d33·3138·3922··se"·id="idm3189" | |||
| 0003b260:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b270:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b280:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b290:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b2a0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b2b0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b | 0003b2c0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b130:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| Max diff block lines reached; 9217680/9245722 bytes (99.70%) of diff not shown. | |||
| Offset 112, 26 lines modified | Offset 112, 34 lines modified | ||
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 117 | ············_\x8c_\x8i_\x8s············6.1.1 | 117 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 120 | [[packages]] | ||
| 121 | name·=·"aide" | ||
| 122 | version·=·"*" | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 124 | incl | 128 | #·Remediation·is·applicable·only·in·certain·platforms |
| 129 | if·rpm·--quiet·-q·kernel;·then | ||
| 125 | class·install_aide·{ | ||
| 126 | ··package·{·'aide': | ||
| 127 | ····ensure·=>·'installed', | ||
| 128 | ··} | ||
| 129 | 130 | if·!·rpm·-q·--quiet·"aide"·;·then | |
| 131 | ····dnf·install·-y·"aide" | ||
| 132 | fi | ||
| 133 | else | ||
| 134 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 135 | fi | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | -·name:·Gather·the·package·facts | 141 | -·name:·Gather·the·package·facts |
| 136 | ··package_facts: | 142 | ··package_facts: |
| Offset 160, 41 lines modified | Offset 168, 33 lines modified | ||
| 160 | ··-·PCI-DSSv4-11.5.2 | 168 | ··-·PCI-DSSv4-11.5.2 |
| 161 | ··-·enable_strategy | 169 | ··-·enable_strategy |
| 162 | ··-·low_complexity | 170 | ··-·low_complexity |
| 163 | ··-·low_disruption | 171 | ··-·low_disruption |
| 164 | ··-·medium_severity | 172 | ··-·medium_severity |
| 165 | ··-·no_reboot_needed | 173 | ··-·no_reboot_needed |
| 166 | ··-·package_aide_installed | 174 | ··-·package_aide_installed |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | [[packages]] | ||
| 169 | name·=·"aide" | ||
| 170 | version·=·"*" | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 177 | if·rpm·--quiet·-q·kernel;·then | ||
| 178 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 179 | ····dnf·install·-y·"aide" | ||
| 180 | fi | ||
| 180 | package·--add=aide | ||
| 181 | else | ||
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 183 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 186 | include·install_aide | ||
| 189 | 187 | class·install_aide·{ | |
| 188 | ··package·{·'aide': | ||
| 189 | ····ensure·=>·'installed', | ||
| 190 | ··} | ||
| 191 | } | ||
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 191 | Run·the·following·command·to·generate·a·new·database: | 193 | Run·the·following·command·to·generate·a·new·database: |
| 192 | $·sudo·/usr/sbin/aide·--init | 194 | $·sudo·/usr/sbin/aide·--init |
| 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration | 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration |
| 194 | file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only | 196 | file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only |
| 195 | media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 197 | media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 198 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| Offset 534, 14 lines modified | Offset 534, 33 lines modified | ||
| 534 | ············_\x8i_\x8s_\x8m······1446 | 534 | ············_\x8i_\x8s_\x8m······1446 |
| 535 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 535 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 536 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 536 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 537 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 537 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 538 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 538 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 539 | ············_\x8c_\x8i_\x8s······1.6.1 | 539 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 540 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 540 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 541 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 542 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 543 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 544 | rc=$? | ||
| 545 | if·test·"$rc"·=·127;·then | ||
| 546 | » echo·"$stderr_of_call"·>&2 | ||
| 547 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 548 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 549 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 550 | » false··#·end·with·an·error·code | ||
| 551 | elif·test·"$rc"·!=·0;·then | ||
| 552 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 553 | » false··#·end·with·an·error·code | ||
| 554 | fi | ||
| 541 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 555 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 542 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 556 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 543 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 557 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 544 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 558 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 545 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 559 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 546 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 560 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 547 | ··set_fact: | 561 | ··set_fact: |
| Offset 586, 33 lines modified | Offset 605, 14 lines modified | ||
| 586 | ··-·PCI-DSSv4-2.2.7 | 605 | ··-·PCI-DSSv4-2.2.7 |
| 587 | ··-·configure_crypto_policy | 606 | ··-·configure_crypto_policy |
| 588 | ··-·high_severity | 607 | ··-·high_severity |
| 589 | ··-·low_complexity | 608 | ··-·low_complexity |
| 590 | ··-·low_disruption | 609 | ··-·low_disruption |
| 591 | ··-·no_reboot_needed | 610 | ··-·no_reboot_needed |
| Max diff block lines reached; 1028262/1033532 bytes (99.49%) of diff not shown. | |||
| Offset 15103, 213 lines modified | Offset 15103, 213 lines modified | ||
| 0003afe0:·7461·2d74·6172·6765·743d·2223·6964·6d33··ta-target="#idm3 | 0003afe0:·7461·2d74·6172·6765·743d·2223·6964·6d33··ta-target="#idm3 | ||
| 0003aff0:·3138·3722·2074·6162·696e·6465·783d·2230··187"·tabindex="0 | 0003aff0:·3138·3722·2074·6162·696e·6465·783d·2230··187"·tabindex="0 | ||
| 0003b000:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b000:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b010:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b010:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b020:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b020:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b030:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b030:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b040:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b040:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b050:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b060:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b070:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b080:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b090:·6170·7365·2220·6964·3d22·6964·6d33·3138··apse"·id="idm318 | |||
| 0003b0a0:·3722·3e3c·7461·626c·6520·636c·6173·733d··7"><table·class= | |||
| 0003b0b0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b0c0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b0d0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b0e0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b0f0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b100:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b110:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b120:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b130:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b140:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b150:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b160:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b170:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b180:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b190:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003b1a0:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003b1b0:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003b1c0:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003b1d0:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003b1e0:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003b1f0:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003b200:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b210:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b220:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b230:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b240:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b250:·2369·646d·3331·3838·2220·7461·6269·6e64··#idm3188"·tabind | |||
| 0003b260:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b270:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b280:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b290:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b2a0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b2b0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003b2c0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b2d0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b2e0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b2f0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b300:·6964·6d33·3138·3822·3e3c·7461·626c·6520··idm3188"><table· | |||
| 0003b310:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b320:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b330:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b340:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b350:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b360:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b370:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b380:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b390:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b3a0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b3b0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b3c0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b3d0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b3e0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b3f0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b400:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 0003b410:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 0003b420:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 0003b430:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 0003b440:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 0003b450:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b460:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b470:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b480:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b490:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b4a0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b4b0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b4c0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b4d0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b4e0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b4f0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b500:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b510:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003b520:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b530:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b540:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b550:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b560:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b570:·7768·656e·3a20·2722·6b65·726e·656c·2220··when:·'"kernel"· | |||
| 0003b580:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0003b590:·2e70·6163·6b61·6765·7327·0a20·2074·6167··.packages'.··tag | |||
| 0003b5a0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b5b0:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | |||
| 0003b5c0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b5d0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b5e0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b5f0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b600:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b610:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b620:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b630:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b640:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b650:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b660:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b670:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003b680:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b690:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b6a0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b6b0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b6c0:·6172·6765·743d·2223·6964·6d33·3138·3922··arget="#idm3189" | |||
| 0003b6d0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b6e0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b6f0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b700:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b710:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b720:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b | 0003b050:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003b | 0003b060:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | ||
| 0003b7 | 0003b070:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b | 0003b080:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b | 0003b090:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b | 0003b0a0:·2069·643d·2269·646d·3331·3837·223e·3c70···id="idm3187"><p | ||
| 0003b | 0003b0b0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | ||
| 0003b | 0003b0c0:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | ||
| 0003b | 0003b0d0:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | ||
| 0003b7c0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| Max diff block lines reached; 21956487/21984529 bytes (99.87%) of diff not shown. | |||
| Offset 16002, 176 lines modified | Offset 16002, 176 lines modified | ||
| 0003e810:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003e810:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003e820:·743d·2223·6964·6d33·3436·3622·2074·6162··t="#idm3466"·tab | 0003e820:·743d·2223·6964·6d33·3436·3622·2074·6162··t="#idm3466"·tab | ||
| 0003e830:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003e830:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003e840:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003e840:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003e850:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003e850:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003e860:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003e860:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003e870:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003e870:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003e880:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003e880:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | ||
| 0003e890:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003e8a0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003e8b0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003e8c0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003e8d0:·6964·6d33·3436·3622·3e3c·7072·653e·3c63··idm3466"><pre><c | |||
| 0003e8e0:·6f64·653e·0a76·6172·5f73·7973·7465·6d5f··ode>.var_system_ | |||
| 0003e8f0:·6372·7970·746f·5f70·6f6c·6963·793d·273c··crypto_policy='< | |||
| 0003e900:·6162·6272·2074·6974·6c65·3d22·6672·6f6d··abbr·title="from | |||
| 0003e910:·2050·726f·6669·6c65·2f72·6566·696e·652d···Profile/refine- | |||
| 0003e920:·7661·6c75·653a·2078·6363·6466·5f6f·7267··value:·xccdf_org | |||
| 0003e930:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | |||
| 0003e940:·656e·745f·7661·6c75·655f·7661·725f·7379··ent_value_var_sy | |||
| 0003e890:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003e8a0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003e8b0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003e8c0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003e8d0:·643d·2269·646d·3334·3636·223e·3c74·6162··d="idm3466"><tab | |||
| 0003e8e0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003e8f0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003e900:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003e910:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003e920:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003e930:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003e940:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003e950:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003e960:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003e970:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003e980:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003e990:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003e9a0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003e9b0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003e9c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003e9d0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·5843··<code>-·name:·XC | |||
| 0003e9e0:·4344·4620·5661·6c75·6520·7661·725f·7379··CDF·Value·var_sy | |||
| 0003e9 | 0003e950:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | ||
| 0003ea00:·6379·2023·2070·726f·6d6f·7465·2074·6f20··cy·#·promote·to· | |||
| 0003ea10:·7661·7269·6162·6c65·0a20·2073·6574·5f66··variable.··set_f | |||
| 0003e | 0003e960:·6379·223e·4649·5053·3c2f·6162·6272·3e27··cy">FIPS</abbr>' | ||
| 0003e970:·0a0a·0a73·7464·6572·725f·6f66·5f63·616c··...stderr_of_cal | |||
| 0003e980:·6c3d·2428·7570·6461·7465·2d63·7279·7074··l=$(update-crypt | |||
| 0003e990:·6f2d·706f·6c69·6369·6573·202d·2d73·6574··o-policies·--set | |||
| 0003e9a0:·2024·7b76·6172·5f73·7973·7465·6d5f·6372···${var_system_cr | |||
| 0003e9b0:·7970·746f·5f70·6f6c·6963·797d·2032·2667··ypto_policy}·2&g | |||
| 0003e9c0:·743b·2661·6d70·3b31·2026·6774·3b20·2f64··t;&1·>·/d | |||
| 0003e9d0:·6576·2f6e·756c·6c29·0a72·633d·243f·0a0a··ev/null).rc=$?.. | |||
| 0003e9e0:·6966·2074·6573·7420·2224·7263·2220·3d20··if·test·"$rc"·=· | |||
| 0003e9f0:·3132·373b·2074·6865·6e0a·0965·6368·6f20··127;·then..echo· | |||
| 0003ea00:·2224·7374·6465·7272·5f6f·665f·6361·6c6c··"$stderr_of_call | |||
| 0003ea10:·2220·2667·743b·2661·6d70·3b32·0a09·6563··"·>&2..ec | |||
| 0003ea20:·686f·2022·4d61·6b65·2073·7572·6520·7468··ho·"Make·sure·th | |||
| 0003ea30:·6174·2074·6865·2073·6372·6970·7420·6973··at·the·script·is | |||
| 0003ea40:·2069·6e73·7461·6c6c·6564·206f·6e20·7468···installed·on·th | |||
| 0003ea50:·6520·7265·6d65·6469·6174·6564·2073·7973··e·remediated·sys | |||
| 0003ea60:·7465·6d2e·2220·2667·743b·2661·6d70·3b32··tem."·>&2 | |||
| 0003ea70:·0a09·6563·686f·2022·5365·6520·6f75·7470··..echo·"See·outp | |||
| 0003ea80:·7574·206f·6620·7468·6520·2764·6e66·2070··ut·of·the·'dnf·p | |||
| 0003ea90:·726f·7669·6465·7320·7570·6461·7465·2d63··rovides·update-c | |||
| 0003eaa0:·7279·7074·6f2d·706f·6c69·6369·6573·2720··rypto-policies'· | |||
| 0003eab0:·636f·6d6d·616e·6422·2026·6774·3b26·616d··command"·>&am | |||
| 0003eac0:·703b·320a·0965·6368·6f20·2274·6f20·7365··p;2..echo·"to·se | |||
| 0003ead0:·6520·7768·6174·2070·6163·6b61·6765·2074··e·what·package·t | |||
| 0003eae0:·6f20·2872·6529·696e·7374·616c·6c22·2026··o·(re)install"·& | |||
| 0003eaf0:·6774·3b26·616d·703b·320a·0a09·6661·6c73··gt;&2...fals | |||
| 0003eb00:·6520·2023·2065·6e64·2077·6974·6820·616e··e··#·end·with·an | |||
| 0003eb10:·2065·7272·6f72·2063·6f64·650a·656c·6966···error·code.elif | |||
| 0003eb20:·2074·6573·7420·2224·7263·2220·213d·2030···test·"$rc"·!=·0 | |||
| 0003eb30:·3b20·7468·656e·0a09·6563·686f·2022·4572··;·then..echo·"Er | |||
| 0003eb40:·726f·7220·696e·766f·6b69·6e67·2074·6865··ror·invoking·the | |||
| 0003eb50:·2075·7064·6174·652d·6372·7970·746f·2d70···update-crypto-p | |||
| 0003eb60:·6f6c·6963·6965·7320·7363·7269·7074·3a20··olicies·script:· | |||
| 0003eb70:·2473·7464·6572·725f·6f66·5f63·616c·6c22··$stderr_of_call" | |||
| 0003eb80:·2026·6774·3b26·616d·703b·320a·0966·616c···>&2..fal | |||
| 0003eb90:·7365·2020·2320·656e·6420·7769·7468·2061··se··#·end·with·a | |||
| 0003eba0:·6e20·6572·726f·7220·636f·6465·0a66·690a··n·error·code.fi. | |||
| 0003ebb0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003ebc0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003ebd0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003ebe0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003ebf0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003ec00:·3d22·2369·646d·3334·3638·2220·7461·6269··="#idm3468"·tabi | |||
| 0003ec10:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003ec20:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003ec30:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003ec40:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003ec50:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003ec60:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003ec70:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ec80:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ec90:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003eca0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ecb0:·3d22·6964·6d33·3436·3822·3e3c·7461·626c··="idm3468"><tabl | |||
| 0003ecc0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ecd0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ece0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ecf0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ed00:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ed10:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ed20:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ed30:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ed40:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ed50:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ed60:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ed70:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003ed80:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ed90:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 0003eda0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003edb0:·636f·6465·3e2d·206e·616d·653a·2058·4343··code>-·name:·XCC | |||
| 0003edc0:·4446·2056·616c·7565·2076·6172·5f73·7973··DF·Value·var_sys | |||
| 0003e | 0003edd0:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 0003ede0:·7920·2320·7072·6f6d·6f74·6520·746f·2076··y·#·promote·to·v | |||
| 0003edf0:·6172·6961·626c·650a·2020·7365·745f·6661··ariable.··set_fa | |||
| 0003ea40:·793a·2021·2173·7472·203c·6162·6272·2074··y:·!!str·<abbr·t | |||
| 0003ea50:·6974·6c65·3d22·6672·6f6d·2050·726f·6669··itle="from·Profi | |||
| 0003ea60:·6c65·2f72·6566·696e·652d·7661·6c75·653a··le/refine-value: | |||
| 0003ea70:·2078·6363·6466·5f6f·7267·2e73·7367·7072···xccdf_org.ssgpr | |||
| 0003ea80:·6f6a·6563·742e·636f·6e74·656e·745f·7661··oject.content_va | |||
| 0003ea90:·6c75·655f·7661·725f·7379·7374·656d·5f63··lue_var_system_c | |||
| 0003eaa0:·7279·7074·6f5f·706f·6c69·6379·223e·4649··rypto_policy">FI | |||
| 0003eab0:·5053·3c2f·6162·6272·3e0a·2020·7461·6773··PS</abbr>.··tags | |||
| Max diff block lines reached; 15191763/15214699 bytes (99.85%) of diff not shown. | |||
| Offset 229, 14 lines modified | Offset 229, 33 lines modified | ||
| 229 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 229 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 230 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 230 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 231 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 231 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 232 | ·····················FCS_TLSC_EXT.1 | 232 | ·····················FCS_TLSC_EXT.1 |
| 233 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 233 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 234 | ············_\x8c_\x8i_\x8s······1.6.1 | 234 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 235 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 235 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 237 | var_system_crypto_policy='FIPS' | ||
| 238 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 239 | rc=$? | ||
| 240 | if·test·"$rc"·=·127;·then | ||
| 241 | » echo·"$stderr_of_call"·>&2 | ||
| 242 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 243 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 244 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 245 | » false··#·end·with·an·error·code | ||
| 246 | elif·test·"$rc"·!=·0;·then | ||
| 247 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 248 | » false··#·end·with·an·error·code | ||
| 249 | fi | ||
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 250 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 251 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 252 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 253 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 254 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 241 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 255 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 242 | ··set_fact: | 256 | ··set_fact: |
| Offset 281, 33 lines modified | Offset 300, 14 lines modified | ||
| 281 | ··-·PCI-DSSv4-2.2.7 | 300 | ··-·PCI-DSSv4-2.2.7 |
| 282 | ··-·configure_crypto_policy | 301 | ··-·configure_crypto_policy |
| 283 | ··-·high_severity | 302 | ··-·high_severity |
| 284 | ··-·low_complexity | 303 | ··-·low_complexity |
| 285 | ··-·low_disruption | 304 | ··-·low_disruption |
| 286 | ··-·no_reboot_needed | 305 | ··-·no_reboot_needed |
| 287 | ··-·restrict_strategy | 306 | ··-·restrict_strategy |
| 288 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 289 | var_system_crypto_policy='FIPS' | ||
| 290 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 291 | rc=$? | ||
| 292 | if·test·"$rc"·=·127;·then | ||
| 293 | » echo·"$stderr_of_call"·>&2 | ||
| 294 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 295 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 296 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 297 | » false··#·end·with·an·error·code | ||
| 298 | elif·test·"$rc"·!=·0;·then | ||
| 299 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 300 | » false··#·end·with·an·error·code | ||
| 301 | fi | ||
| 302 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 307 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 303 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 308 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 304 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto | 309 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto |
| 305 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or | 310 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or |
| 306 | not·set·at·all·in·the·/etc/sysconfig/sshd. | 311 | not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 307 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate | 312 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate |
| 308 | ············expectations,·and·makes·system·configuration·more·fragmented. | 313 | ············expectations,·and·makes·system·configuration·more·fragmented. |
| Offset 318, 14 lines modified | Offset 318, 19 lines modified | ||
| 318 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 318 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 319 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 319 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 320 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 320 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 321 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 321 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 322 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 322 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 323 | ············_\x8c_\x8i_\x8s······1.6.2 | 323 | ············_\x8c_\x8i_\x8s······1.6.2 |
| 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 327 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 330 | -·name:·Configure·SSH·to·use·System·Crypto·Policy | 333 | -·name:·Configure·SSH·to·use·System·Crypto·Policy |
| 331 | ··lineinfile: | 334 | ··lineinfile: |
| Offset 343, 19 lines modified | Offset 348, 14 lines modified | ||
| 343 | ··-·PCI-DSSv4-2.2.7 | 348 | ··-·PCI-DSSv4-2.2.7 |
| 344 | ··-·configure_ssh_crypto_policy | 349 | ··-·configure_ssh_crypto_policy |
| 345 | ··-·disable_strategy | 350 | ··-·disable_strategy |
| 346 | ··-·low_complexity | 351 | ··-·low_complexity |
| 347 | ··-·medium_disruption | 352 | ··-·medium_disruption |
| 348 | ··-·medium_severity | 353 | ··-·medium_severity |
| 349 | ··-·reboot_required | 354 | ··-·reboot_required |
| 350 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 351 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 352 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 353 | Group ·Disk·Partitioning· Group·contains·1·rule | 355 | Group ·Disk·Partitioning· Group·contains·1·rule |
| 354 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which·should | 356 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which·should |
| 355 | be·placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default·partitioning·scheme | 357 | be·placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default·partitioning·scheme |
| 356 | creates·separate·logical·volumes·for·/,·/boot,·and·swap. | 358 | creates·separate·logical·volumes·for·/,·/boot,·and·swap. |
| 357 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify·partitioning.\" | 359 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify·partitioning.\" |
| 358 | ······This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the·volume·group·already | 360 | ······This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the·volume·group·already |
| 359 | ······created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create·space.·In·general,·using | 361 | ······created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create·space.·In·general,·using |
| Offset 599, 14 lines modified | Offset 599, 23 lines modified | ||
| 599 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_db_up_to_date | 599 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_db_up_to_date |
| 600 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 600 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 601 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(5)(ii)(A) | 601 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(5)(ii)(A) |
| 602 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-6.2 | 602 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-6.2 |
| 603 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 | 603 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 |
| 604 | ············_\x8c_\x8i_\x8s·····reload_dconf_db | 604 | ············_\x8c_\x8i_\x8s·····reload_dconf_db |
| 605 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·8.2.8,·8.2 | 605 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·8.2.8,·8.2 |
| 606 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 607 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 608 | if·rpm·--quiet·-q·gdm·&&·{·rpm·--quiet·-q·kernel;·};·then | ||
| 609 | dconf·update | ||
| 610 | else | ||
| 611 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 612 | fi | ||
| 606 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 613 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 607 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 614 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 608 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 615 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| Max diff block lines reached; 1081616/1087460 bytes (99.46%) of diff not shown. | |||
| Offset 15847, 213 lines modified | Offset 15847, 213 lines modified | ||
| 0003de60:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003de60:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003de70:·646d·3331·3837·2220·7461·6269·6e64·6578··dm3187"·tabindex | 0003de70:·646d·3331·3837·2220·7461·6269·6e64·6578··dm3187"·tabindex | ||
| 0003de80:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003de80:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003de90:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003de90:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003dea0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003dea0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003deb0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003deb0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003dec0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003dec0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003ded0:·6d65·6469·6174·696f·6e20· | 0003ded0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003dee0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003def0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003df00:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003df10:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003df20:·3331·3837·223e·3c74·6162·6c65·2063·6c61··3187"><table·cla | |||
| 0003df30:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003d | 0003dee0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003def0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003df00:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003df10:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003df20:·7365·2220·6964·3d22·6964·6d33·3138·3722··se"·id="idm3187" | |||
| 0003df30:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003df40:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003df50:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003df60:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003df70:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003df80:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003df90:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003dfa0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003dfb0:·7461·7267·6574·3d22·2369·646d·3331·3838··target="#idm3188 | |||
| 0003dfc0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003dfd0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003dfe0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003dff0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003e000:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003e010:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003e020:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003e030:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003e040:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003e050:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003e060:·2069·643d·2269·646d·3331·3838·223e·3c74···id="idm3188"><t | |||
| 0003e070:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003e080:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003e090:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003e0a0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003e0b0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003e0c0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003e0d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003e0e0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003e0f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003e100:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003e110:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003e120:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003e130:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003e140:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003e150:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003e160:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003e170:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003e180:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003e190:·6e20·706c·6174·666f·726d·730a·6966·2072··n·platforms.if·r | |||
| 0003e1a0:·706d·202d·2d71·7569·6574·202d·7120·6b65··pm·--quiet·-q·ke | |||
| 0003e1b0:·726e·656c·3b20·7468·656e·0a0a·6966·2021··rnel;·then..if·! | |||
| 0003e1c0:·2072·706d·202d·7120·2d2d·7175·6965·7420···rpm·-q·--quiet· | |||
| 0003e1d0:·2261·6964·6522·203b·2074·6865·6e0a·2020··"aide"·;·then.·· | |||
| 0003e1e0:·2020·646e·6620·696e·7374·616c·6c20·2d79····dnf·install·-y | |||
| 0003e1f0:·2022·6169·6465·220a·6669·0a0a·656c·7365···"aide".fi..else | |||
| 0003e200:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003e210:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003e220:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003e230:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003e240:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003e250:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003e260:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003e270:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003e280:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003e290:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003e2a0:·3331·3839·2220·7461·6269·6e64·6578·3d22··3189"·tabindex=" | |||
| 0003e2b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003e2c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003e2d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003e2e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003e2f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003e300:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003e310:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003e320:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003e330:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003e340:·6c6c·6170·7365·2220·6964·3d22·6964·6d33··llapse"·id="idm3 | |||
| 0003e350:·3138·3922·3e3c·7461·626c·6520·636c·6173··189"><table·clas | |||
| 0003e360:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003 | 0003e370:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003df60:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003df70:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003df80:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003df90:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003 | 0003e380:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003e390:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003e3a0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003e3b0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003e3c0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003e3d0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003e3e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003e3f0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003e400:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003e410:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003e420:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003 | 0003e430:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003dfc0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003dfd0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003dfe0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003dff0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003e000:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003e010:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003e020:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003e030:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003e040:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003e050:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003e060:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003e | 0003e440:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003e450:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003e460:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003e470:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003e480:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003e490:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003e4a0:·532d·352e·3130·2e31·2e33·0a20·202d·204e··S-5.10.1.3.··-·N | |||
| 0003e4b0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003e4c0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003e4d0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003e4e0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003e4f0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| Max diff block lines reached; 14696422/14724464 bytes (99.81%) of diff not shown. | |||
| Offset 187, 26 lines modified | Offset 187, 34 lines modified | ||
| 187 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 187 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 188 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 188 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 189 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 189 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 190 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 190 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 191 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 191 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 192 | ············_\x8c_\x8i_\x8s············6.1.1 | 192 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 193 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 193 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 195 | [[packages]] | ||
| 196 | name·=·"aide" | ||
| 197 | version·=·"*" | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 199 | incl | 203 | #·Remediation·is·applicable·only·in·certain·platforms |
| 204 | if·rpm·--quiet·-q·kernel;·then | ||
| 200 | class·install_aide·{ | ||
| 201 | ··package·{·'aide': | ||
| 202 | ····ensure·=>·'installed', | ||
| 203 | ··} | ||
| 204 | 205 | if·!·rpm·-q·--quiet·"aide"·;·then | |
| 206 | ····dnf·install·-y·"aide" | ||
| 207 | fi | ||
| 208 | else | ||
| 209 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 210 | fi | ||
| 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 211 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 212 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 213 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 214 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 215 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 210 | -·name:·Gather·the·package·facts | 216 | -·name:·Gather·the·package·facts |
| 211 | ··package_facts: | 217 | ··package_facts: |
| Offset 235, 41 lines modified | Offset 243, 33 lines modified | ||
| 235 | ··-·PCI-DSSv4-11.5.2 | 243 | ··-·PCI-DSSv4-11.5.2 |
| 236 | ··-·enable_strategy | 244 | ··-·enable_strategy |
| 237 | ··-·low_complexity | 245 | ··-·low_complexity |
| 238 | ··-·low_disruption | 246 | ··-·low_disruption |
| 239 | ··-·medium_severity | 247 | ··-·medium_severity |
| 240 | ··-·no_reboot_needed | 248 | ··-·no_reboot_needed |
| 241 | ··-·package_aide_installed | 249 | ··-·package_aide_installed |
| 242 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 243 | [[packages]] | ||
| 244 | name·=·"aide" | ||
| 245 | version·=·"*" | ||
| 246 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 250 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 247 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 251 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 248 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 252 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 249 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 253 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 250 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 254 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 251 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 252 | if·rpm·--quiet·-q·kernel;·then | ||
| 253 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 254 | ····dnf·install·-y·"aide" | ||
| 255 | fi | ||
| 255 | package·--add=aide | ||
| 256 | else | ||
| 257 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 258 | fi | ||
| 259 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 256 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 260 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 257 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 261 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 258 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 262 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 259 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 263 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 260 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 261 | include·install_aide | ||
| 264 | 262 | class·install_aide·{ | |
| 263 | ··package·{·'aide': | ||
| 264 | ····ensure·=>·'installed', | ||
| 265 | ··} | ||
| 266 | } | ||
| 265 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 267 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 266 | Run·the·following·command·to·generate·a·new·database: | 268 | Run·the·following·command·to·generate·a·new·database: |
| 267 | $·sudo·/usr/sbin/aide·--init | 269 | $·sudo·/usr/sbin/aide·--init |
| 268 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/ | 270 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/ |
| 269 | aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides | 271 | aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides |
| 270 | additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 272 | additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 271 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 273 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| Offset 590, 14 lines modified | Offset 590, 33 lines modified | ||
| 590 | ············_\x8i_\x8s_\x8m······1446 | 590 | ············_\x8i_\x8s_\x8m······1446 |
| 591 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 591 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 592 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 592 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 593 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 593 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 594 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 594 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 595 | ············_\x8c_\x8i_\x8s······1.6.1 | 595 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 596 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 596 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 597 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 598 | var_system_crypto_policy='DEFAULT' | ||
| 599 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 600 | rc=$? | ||
| 601 | if·test·"$rc"·=·127;·then | ||
| 602 | » echo·"$stderr_of_call"·>&2 | ||
| 603 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 604 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 605 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 606 | » false··#·end·with·an·error·code | ||
| 607 | elif·test·"$rc"·!=·0;·then | ||
| 608 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 609 | » false··#·end·with·an·error·code | ||
| 610 | fi | ||
| 597 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 611 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 598 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 612 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 599 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 613 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 600 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 614 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 601 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 615 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 602 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 616 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 603 | ··set_fact: | 617 | ··set_fact: |
| Offset 642, 33 lines modified | Offset 661, 14 lines modified | ||
| 642 | ··-·PCI-DSSv4-2.2.7 | 661 | ··-·PCI-DSSv4-2.2.7 |
| 643 | ··-·configure_crypto_policy | 662 | ··-·configure_crypto_policy |
| 644 | ··-·high_severity | 663 | ··-·high_severity |
| 645 | ··-·low_complexity | 664 | ··-·low_complexity |
| 646 | ··-·low_disruption | 665 | ··-·low_disruption |
| 647 | ··-·no_reboot_needed | 666 | ··-·no_reboot_needed |
| Max diff block lines reached; 1358584/1363847 bytes (99.61%) of diff not shown. | |||
| Offset 15457, 134 lines modified | Offset 15457, 134 lines modified | ||
| 0003c600:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003c600:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003c610:·743d·2223·6964·6d31·3336·3522·2074·6162··t="#idm1365"·tab | 0003c610:·743d·2223·6964·6d31·3336·3522·2074·6162··t="#idm1365"·tab | ||
| 0003c620:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003c620:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003c630:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003c630:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003c640:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003c640:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003c650:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003c650:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003c660:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003c660:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003c670:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003c670:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003c680:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003c690:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003c6 | 0003c680:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 0003c690:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003c6a0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c6b0:·70 | 0003c6b0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003c6c0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c6d0:·3133·3635·223e·3c70·7265·3e3c·636f·6465··1365"><pre><code | |||
| 0003c6e0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003c6f0:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003c700:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003c6c0:·3d22·6964·6d31·3336·3522·3e3c·7461·626c··="idm1365"><tabl | |||
| 0003c6d0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003c6e0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003c6f0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003c700:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003c710:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003c720:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c730:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003c740:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003c750:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c760:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003c770:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003c780:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003c790:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003c7a0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003c7b0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003c7c0:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003c7d0:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003c7e0:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003c7f0:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003c800:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003c810:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003c820:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003c830:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003c840:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003c850:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003c860:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003c870:·7461·7267·6574·3d22·2369·646d·3133·3636··target="#idm1366 | |||
| 0003c880:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003c890:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003c8a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003c8b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003c8c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003c8d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003c8e0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003c8f0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003c900:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c910:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c920:·7365·2220·6964·3d22·6964·6d31·3336·3622··se"·id="idm1366" | |||
| 0003c930:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003c940:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003c950:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003c960:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003c970:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003c980:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003c990:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003c9a0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003c9b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c9c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003c9d0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003c9e0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003c9f0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003ca00:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003ca10:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003ca20:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003ca30:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003ca40:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003ca50:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003ca60:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003ca70:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003ca80:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | |||
| 0003ca90:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003caa0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003cab0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003cac0:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003cad0:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003cae0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003caf0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003cb00:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003cb10:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003cb20:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003cb30:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003cb40:·7461·6c6c·6564·0a0a·2d20·6e61·6d65·3a20··talled..-·name:· | |||
| 0003cb50:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003cb60:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003cb70:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003cb80:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003cb90:·6573·656e·740a·2020·7768·656e·3a20·2722··esent.··when:·'" | |||
| 0003cba0:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003cbb0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003cbc0:·7327·0a20·2074·6167·733a·0a20·202d·2043··s'.··tags:.··-·C | |||
| 0003cbd0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003cbe0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003cbf0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003cc00:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003cc10:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003cc20:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003cc30:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003cc40:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003cc50:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003cc60:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003cc70:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003cc80:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003cc90:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003c | 0003c710:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0003c | 0003c720:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0003c | 0003c730:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0003c | 0003c740:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0003c | 0003c750:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003c | 0003c760:·6d31·3336·3622·2074·6162·696e·6465·783d··m1366"·tabindex= | ||
| 0003c | 0003c770:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003c | 0003c780:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003c | 0003c790:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003c | 0003c7a0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003c | 0003c7b0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003c7c0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003cd50:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| 0003cd60:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| Max diff block lines reached; 2602166/2619306 bytes (99.35%) of diff not shown. | |||
| Offset 158, 26 lines modified | Offset 158, 19 lines modified | ||
| 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | include·install_aide | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 171 | class·install_aide·{ | ||
| 172 | ··package·{·'aide': | ||
| 173 | ····ensure·=>·'installed', | ||
| 174 | ··} | ||
| 175 | } | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 181 | -·name:·Gather·the·package·facts | 174 | -·name:·Gather·the·package·facts |
| 182 | ··package_facts: | 175 | ··package_facts: |
| Offset 206, 19 lines modified | Offset 199, 26 lines modified | ||
| 206 | ··-·PCI-DSSv4-11.5.2 | 199 | ··-·PCI-DSSv4-11.5.2 |
| 207 | ··-·enable_strategy | 200 | ··-·enable_strategy |
| 208 | ··-·low_complexity | 201 | ··-·low_complexity |
| 209 | ··-·low_disruption | 202 | ··-·low_disruption |
| 210 | ··-·medium_severity | 203 | ··-·medium_severity |
| 211 | ··-·no_reboot_needed | 204 | ··-·no_reboot_needed |
| 212 | ··-·package_aide_installed | 205 | ··-·package_aide_installed |
| 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 211 | include·install_aide | ||
| 214 | [[packages]] | ||
| 215 | name·=·"aide" | ||
| 216 | 212 | class·install_aide·{ | |
| 213 | ··package·{·'aide': | ||
| 214 | ····ensure·=>·'installed', | ||
| 215 | ··} | ||
| 216 | } | ||
| 217 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 217 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 218 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 218 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 219 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 219 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 220 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 220 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 221 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 221 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 222 | crontab: | 222 | crontab: |
| 223 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 223 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 431, 14 lines modified | Offset 431, 33 lines modified | ||
| 431 | ············_\x8i_\x8s_\x8m······1446 | 431 | ············_\x8i_\x8s_\x8m······1446 |
| 432 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 432 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 433 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 433 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 434 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 434 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 435 | ·····················FCS_TLSC_EXT.1 | 435 | ·····················FCS_TLSC_EXT.1 |
| 436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 437 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 437 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 438 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 439 | var_system_crypto_policy='DEFAULT' | ||
| 440 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 441 | rc=$? | ||
| 442 | if·test·"$rc"·=·127;·then | ||
| 443 | » echo·"$stderr_of_call"·>&2 | ||
| 444 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 445 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 446 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 447 | » false··#·end·with·an·error·code | ||
| 448 | elif·test·"$rc"·!=·0;·then | ||
| 449 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 450 | » false··#·end·with·an·error·code | ||
| 451 | fi | ||
| 438 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 439 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 440 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 441 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 442 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 443 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 457 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 444 | ··set_fact: | 458 | ··set_fact: |
| Offset 483, 33 lines modified | Offset 502, 14 lines modified | ||
| 483 | ··-·PCI-DSSv4-2.2.7 | 502 | ··-·PCI-DSSv4-2.2.7 |
| 484 | ··-·configure_crypto_policy | 503 | ··-·configure_crypto_policy |
| 485 | ··-·high_severity | 504 | ··-·high_severity |
| 486 | ··-·low_complexity | 505 | ··-·low_complexity |
| 487 | ··-·low_disruption | 506 | ··-·low_disruption |
| 488 | ··-·no_reboot_needed | 507 | ··-·no_reboot_needed |
| 489 | ··-·restrict_strategy | 508 | ··-·restrict_strategy |
| 490 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 491 | var_system_crypto_policy='DEFAULT' | ||
| 492 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 493 | rc=$? | ||
| 494 | if·test·"$rc"·=·127;·then | ||
| 495 | » echo·"$stderr_of_call"·>&2 | ||
| 496 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 497 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 498 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 499 | » false··#·end·with·an·error·code | ||
| 500 | elif·test·"$rc"·!=·0;·then | ||
| 501 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 502 | » false··#·end·with·an·error·code | ||
| 503 | fi | ||
| 504 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 509 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 505 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 510 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 506 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that | 511 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that |
| 507 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either | 512 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either |
| 508 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 513 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 509 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate | 514 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate |
| 510 | ············expectations,·and·makes·system·configuration·more·fragmented. | 515 | ············expectations,·and·makes·system·configuration·more·fragmented. |
| Offset 520, 14 lines modified | Offset 520, 19 lines modified | ||
| Max diff block lines reached; 285684/291247 bytes (98.09%) of diff not shown. | |||
| Offset 15048, 134 lines modified | Offset 15048, 134 lines modified | ||
| 0003ac70:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003ac70:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003ac80:·2369·646d·3133·3635·2220·7461·6269·6e64··#idm1365"·tabind | 0003ac80:·2369·646d·3133·3635·2220·7461·6269·6e64··#idm1365"·tabind | ||
| 0003ac90:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003ac90:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003aca0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003aca0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003acb0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003acb0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003acc0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003acc0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003acd0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003acd0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003ace0:·5265·6d65·6469·6174·696f·6e20· | 0003ace0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003acf0:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003ad00:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003a | 0003acf0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 0003ad00:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003ad10:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003ad20:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003ad30:·6170·7365·2220·6964·3d22·6964·6d31·3336··apse"·id="idm136 | |||
| 0003ad40:·3522·3e3c·7072·653e·3c63·6f64·653e·0a5b··5"><pre><code>.[ | |||
| 0003ad50:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003ad60:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003ad70:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003ad80:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003ad90:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003ada0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003ad | 0003adb0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003ad30:·646d·3133·3635·223e·3c74·6162·6c65·2063··dm1365"><table·c | |||
| 0003ad40:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003ad50:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003ad60:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003ad70:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003ad80:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003ad90:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ada0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003ad | 0003adc0:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | ||
| 0003add0:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | |||
| 0003ade0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003adf0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003ae00:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003ae10:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003ae20:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003ae30:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003ae40:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003ae50:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003ae60:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003ae70:·6170·7365·2220·6964·3d22·6964·6d31·3336··apse"·id="idm136 | |||
| 0003ae80:·3622·3e3c·7461·626c·6520·636c·6173·733d··6"><table·class= | |||
| 0003ae90:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003aea0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003aeb0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003aec0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003aed0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003a | 0003aee0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003aef0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003add0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003ade0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003adf0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003ae00:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003ae10:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003ae20:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003ae30:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003ae40:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003ae50:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003ae60:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003ae70:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003ae80:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003ae90:·0a7d·0a3c·2f63·6f64·653e·3c2f·7072·653e··.}.</code></pre> | |||
| 0003aea0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003aeb0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003aec0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003aed0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003aee0:·6765·743d·2223·6964·6d31·3336·3622·2074··get="#idm1366"·t | |||
| 0003aef0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003af00:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003af10:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003af20:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003af30:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003af40:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003af50:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003af60:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003af70:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003af80:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003af90:·2069·643d·2269·646d·3133·3636·223e·3c74···id="idm1366"><t | |||
| 0003afa0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003afb0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003afc0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003afd0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003afe0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003af | 0003af00:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003 | 0003af10:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003 | 0003af20:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003af30:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003af40:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003af50:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003af60:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003af70:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003af80:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003af90:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003afa0:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003afb0:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003afc0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003afd0:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003afe0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003aff0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b000:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b010:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b020:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b030:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b040:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b050:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b060:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b070:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b080:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b090:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003b0a0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b0b0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b0c0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b0d0:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b0e0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b0f0:·2722·6b65·726e·656c·2220·696e·2061·6e73··'"kernel"·in·ans | |||
| 0003b100:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003b110:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | |||
| 0003b120:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b130:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b140:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b150:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b160:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b170:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b180:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b190:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| Max diff block lines reached; 3112627/3129767 bytes (99.45%) of diff not shown. | |||
| Offset 114, 26 lines modified | Offset 114, 19 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 126 | include·install_aide | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 127 | class·install_aide·{ | ||
| 128 | ··package·{·'aide': | ||
| 129 | ····ensure·=>·'installed', | ||
| 130 | ··} | ||
| 131 | } | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Gather·the·package·facts | 130 | -·name:·Gather·the·package·facts |
| 138 | ··package_facts: | 131 | ··package_facts: |
| Offset 162, 19 lines modified | Offset 155, 26 lines modified | ||
| 162 | ··-·PCI-DSSv4-11.5.2 | 155 | ··-·PCI-DSSv4-11.5.2 |
| 163 | ··-·enable_strategy | 156 | ··-·enable_strategy |
| 164 | ··-·low_complexity | 157 | ··-·low_complexity |
| 165 | ··-·low_disruption | 158 | ··-·low_disruption |
| 166 | ··-·medium_severity | 159 | ··-·medium_severity |
| 167 | ··-·no_reboot_needed | 160 | ··-·no_reboot_needed |
| 168 | ··-·package_aide_installed | 161 | ··-·package_aide_installed |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 167 | include·install_aide | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | 168 | class·install_aide·{ | |
| 169 | ··package·{·'aide': | ||
| 170 | ····ensure·=>·'installed', | ||
| 171 | ··} | ||
| 172 | } | ||
| 173 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 173 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 174 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 174 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 175 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 175 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 176 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 176 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 177 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 177 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 178 | crontab: | 178 | crontab: |
| 179 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 179 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 387, 14 lines modified | Offset 387, 33 lines modified | ||
| 387 | ············_\x8i_\x8s_\x8m······1446 | 387 | ············_\x8i_\x8s_\x8m······1446 |
| 388 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 388 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 389 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 389 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 390 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 390 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 391 | ·····················FCS_TLSC_EXT.1 | 391 | ·····················FCS_TLSC_EXT.1 |
| 392 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 392 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 393 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 393 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 395 | var_system_crypto_policy='DEFAULT' | ||
| 396 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 397 | rc=$? | ||
| 398 | if·test·"$rc"·=·127;·then | ||
| 399 | » echo·"$stderr_of_call"·>&2 | ||
| 400 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 401 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 402 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 403 | » false··#·end·with·an·error·code | ||
| 404 | elif·test·"$rc"·!=·0;·then | ||
| 405 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 406 | » false··#·end·with·an·error·code | ||
| 407 | fi | ||
| 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 408 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 395 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 409 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 396 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 410 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 397 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 411 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 398 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 412 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 399 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 413 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 400 | ··set_fact: | 414 | ··set_fact: |
| Offset 439, 33 lines modified | Offset 458, 14 lines modified | ||
| 439 | ··-·PCI-DSSv4-2.2.7 | 458 | ··-·PCI-DSSv4-2.2.7 |
| 440 | ··-·configure_crypto_policy | 459 | ··-·configure_crypto_policy |
| 441 | ··-·high_severity | 460 | ··-·high_severity |
| 442 | ··-·low_complexity | 461 | ··-·low_complexity |
| 443 | ··-·low_disruption | 462 | ··-·low_disruption |
| 444 | ··-·no_reboot_needed | 463 | ··-·no_reboot_needed |
| 445 | ··-·restrict_strategy | 464 | ··-·restrict_strategy |
| 446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 447 | var_system_crypto_policy='DEFAULT' | ||
| 448 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 449 | rc=$? | ||
| 450 | if·test·"$rc"·=·127;·then | ||
| 451 | » echo·"$stderr_of_call"·>&2 | ||
| 452 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 453 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 454 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 455 | » false··#·end·with·an·error·code | ||
| 456 | elif·test·"$rc"·!=·0;·then | ||
| 457 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 458 | » false··#·end·with·an·error·code | ||
| 459 | fi | ||
| 460 | Group ·Updating·Software· Group·contains·1·rule | 465 | Group ·Updating·Software· Group·contains·1·rule |
| 461 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also | 466 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also |
| 462 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called | 467 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called |
| 463 | S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. | 468 | S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. |
| 464 | Anolis·OS·23·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records | 469 | Anolis·OS·23·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records |
| 465 | metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all | 470 | metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all |
| Offset 670, 14 lines modified | Offset 670, 20 lines modified | ||
| Max diff block lines reached; 339942/345369 bytes (98.43%) of diff not shown. | |||
| Offset 15457, 133 lines modified | Offset 15457, 133 lines modified | ||
| 0003c600:·6172·6765·743d·2223·6964·6d31·3336·3522··arget="#idm1365" | 0003c600:·6172·6765·743d·2223·6964·6d31·3336·3522··arget="#idm1365" | ||
| 0003c610:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003c610:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003c620:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003c620:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003c630:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003c630:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003c640:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003c640:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003c650:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003c650:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003c660:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003c660:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003c670:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003c680:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003c690:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c6a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c670:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003c680:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003c690:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003c6a0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003c6b0:·2220·6964·3d22·6964·6d31·3336·3522·3e3c··"·id="idm1365">< | |||
| 0003c6c0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003c6d0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003c6e0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003c6f0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003c700:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003c710:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003c720:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c730:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003c740:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c750:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003c760:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003c770:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c780:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003c790:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003c7a0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003c7b0:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003c7c0:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003c7d0:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003c7e0:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003c7f0:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003c800:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003c810:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003c820:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003c830:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003c840:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003c | 0003c6b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003c6c0:·2269·646d·3133·3635·223e·3c70·7265·3e3c··"idm1365"><pre>< | |||
| 0003c6d0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003c6e0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003c6f0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003c860:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003c870:·3133·3636·2220·7461·6269·6e64·6578·3d22··1366"·tabindex=" | |||
| 0003c880:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003c890:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003c8a0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003c8b0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003c8c0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003c8d0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003c8e0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003c8f0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c900:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003c910:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003c920:·3336·3622·3e3c·7461·626c·6520·636c·6173··366"><table·clas | |||
| 0003c930:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003c940:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003c950:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003c960:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003c970:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003c980:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c990:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003c9a0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003c9b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c9c0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003c9d0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003c9e0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003c9f0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003ca00:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003ca10:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003ca20:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003ca30:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003ca40:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003ca50:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003ca60:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003ca70:·532d·352e·3130·2e31·2e33·0a20·202d·204e··S-5.10.1.3.··-·N | |||
| 0003ca80:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003ca90:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003caa0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003cab0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003cac0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003cad0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003cae0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003caf0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003cb00:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003cb10:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003cb20:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003cb30:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003cb40:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003cb50:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003cb60:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003cb70:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003cb80:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003cb90:·3a20·2722·6b65·726e·656c·2220·696e·2061··:·'"kernel"·in·a | |||
| 0003cba0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003cbb0:·6b61·6765·7327·0a20·2074·6167·733a·0a20··kages'.··tags:.· | |||
| 0003cbc0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003cbd0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003cbe0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003cbf0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003cc00:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003cc10:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003cc20:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003cc30:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003cc40:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003cc50:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003cc60:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003cc70:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003cc80:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003c | 0003c700:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003c | 0003c710:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003c | 0003c720:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003c | 0003c730:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003c | 0003c740:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003c | 0003c750:·2223·6964·6d31·3336·3622·2074·6162·696e··"#idm1366"·tabin | ||
| 0003c | 0003c760:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003c | 0003c770:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003c | 0003c780:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003c | 0003c790:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003c | 0003c7a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003c | 0003c7b0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003cd50:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003c | 0003c7c0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| Max diff block lines reached; 2602718/2619720 bytes (99.35%) of diff not shown. | |||
| Offset 158, 26 lines modified | Offset 158, 19 lines modified | ||
| 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | include·install_aide | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 171 | class·install_aide·{ | ||
| 172 | ··package·{·'aide': | ||
| 173 | ····ensure·=>·'installed', | ||
| 174 | ··} | ||
| 175 | } | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 181 | -·name:·Gather·the·package·facts | 174 | -·name:·Gather·the·package·facts |
| 182 | ··package_facts: | 175 | ··package_facts: |
| Offset 206, 19 lines modified | Offset 199, 26 lines modified | ||
| 206 | ··-·PCI-DSSv4-11.5.2 | 199 | ··-·PCI-DSSv4-11.5.2 |
| 207 | ··-·enable_strategy | 200 | ··-·enable_strategy |
| 208 | ··-·low_complexity | 201 | ··-·low_complexity |
| 209 | ··-·low_disruption | 202 | ··-·low_disruption |
| 210 | ··-·medium_severity | 203 | ··-·medium_severity |
| 211 | ··-·no_reboot_needed | 204 | ··-·no_reboot_needed |
| 212 | ··-·package_aide_installed | 205 | ··-·package_aide_installed |
| 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 211 | include·install_aide | ||
| 214 | [[packages]] | ||
| 215 | name·=·"aide" | ||
| 216 | 212 | class·install_aide·{ | |
| 213 | ··package·{·'aide': | ||
| 214 | ····ensure·=>·'installed', | ||
| 215 | ··} | ||
| 216 | } | ||
| 217 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 217 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 218 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 218 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 219 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 219 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 220 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 220 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 221 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 221 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 222 | crontab: | 222 | crontab: |
| 223 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 223 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 431, 14 lines modified | Offset 431, 33 lines modified | ||
| 431 | ············_\x8i_\x8s_\x8m······1446 | 431 | ············_\x8i_\x8s_\x8m······1446 |
| 432 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 432 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 433 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 433 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 434 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 434 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 435 | ·····················FCS_TLSC_EXT.1 | 435 | ·····················FCS_TLSC_EXT.1 |
| 436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 437 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 437 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 438 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 439 | var_system_crypto_policy='DEFAULT' | ||
| 440 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 441 | rc=$? | ||
| 442 | if·test·"$rc"·=·127;·then | ||
| 443 | » echo·"$stderr_of_call"·>&2 | ||
| 444 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 445 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 446 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 447 | » false··#·end·with·an·error·code | ||
| 448 | elif·test·"$rc"·!=·0;·then | ||
| 449 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 450 | » false··#·end·with·an·error·code | ||
| 451 | fi | ||
| 438 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 439 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 440 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 441 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 442 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 443 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 457 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 444 | ··set_fact: | 458 | ··set_fact: |
| Offset 483, 33 lines modified | Offset 502, 14 lines modified | ||
| 483 | ··-·PCI-DSSv4-2.2.7 | 502 | ··-·PCI-DSSv4-2.2.7 |
| 484 | ··-·configure_crypto_policy | 503 | ··-·configure_crypto_policy |
| 485 | ··-·high_severity | 504 | ··-·high_severity |
| 486 | ··-·low_complexity | 505 | ··-·low_complexity |
| 487 | ··-·low_disruption | 506 | ··-·low_disruption |
| 488 | ··-·no_reboot_needed | 507 | ··-·no_reboot_needed |
| 489 | ··-·restrict_strategy | 508 | ··-·restrict_strategy |
| 490 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 491 | var_system_crypto_policy='DEFAULT' | ||
| 492 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 493 | rc=$? | ||
| 494 | if·test·"$rc"·=·127;·then | ||
| 495 | » echo·"$stderr_of_call"·>&2 | ||
| 496 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 497 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 498 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 499 | » false··#·end·with·an·error·code | ||
| 500 | elif·test·"$rc"·!=·0;·then | ||
| 501 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 502 | » false··#·end·with·an·error·code | ||
| 503 | fi | ||
| 504 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 509 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 505 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 510 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 506 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that | 511 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that |
| 507 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either | 512 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either |
| 508 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 513 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 509 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate | 514 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate |
| 510 | ············expectations,·and·makes·system·configuration·more·fragmented. | 515 | ············expectations,·and·makes·system·configuration·more·fragmented. |
| Offset 520, 14 lines modified | Offset 520, 19 lines modified | ||
| Max diff block lines reached; 285681/291244 bytes (98.09%) of diff not shown. | |||
| Offset 15047, 134 lines modified | Offset 15047, 134 lines modified | ||
| 0003ac60:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ac60:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ac70:·743d·2223·6964·6d31·3336·3522·2074·6162··t="#idm1365"·tab | 0003ac70:·743d·2223·6964·6d31·3336·3522·2074·6162··t="#idm1365"·tab | ||
| 0003ac80:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003ac80:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003ac90:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003ac90:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003aca0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003aca0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003acb0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003acb0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003acc0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003acc0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003acd0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003acd0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003ace0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003acf0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003a | 0003ace0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 0003acf0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003ad00:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ad10:·70 | 0003ad10:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003ad20:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ad30:·3133·3635·223e·3c70·7265·3e3c·636f·6465··1365"><pre><code | |||
| 0003ad40:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003ad50:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003ad60:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003ad20:·3d22·6964·6d31·3336·3522·3e3c·7461·626c··="idm1365"><tabl | |||
| 0003ad30:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ad40:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ad50:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ad60:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ad70:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ad80:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ad90:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ada0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003adb0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003adc0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003add0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ade0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003adf0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ae00:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003ae10:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ae20:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003ae30:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003ae40:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003ae50:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003ae60:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003ae70:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003ae80:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003ae90:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003aea0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003aeb0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003aec0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003aed0:·7461·7267·6574·3d22·2369·646d·3133·3636··target="#idm1366 | |||
| 0003aee0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003aef0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003af00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003af10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003af20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003af30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003af40:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003af50:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003af60:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003af70:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003af80:·7365·2220·6964·3d22·6964·6d31·3336·3622··se"·id="idm1366" | |||
| 0003af90:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003afa0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003afb0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003afc0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003afd0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003afe0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003aff0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b000:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b010:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b020:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b030:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b040:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b050:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b060:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b070:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b080:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b090:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003b0a0:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003b0b0:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003b0c0:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003b0d0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b0e0:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | |||
| 0003b0f0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b100:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b110:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b120:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b130:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b140:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b150:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b160:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b170:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b180:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b190:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b1a0:·7461·6c6c·6564·0a0a·2d20·6e61·6d65·3a20··talled..-·name:· | |||
| 0003b1b0:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003b1c0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003b1d0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003b1e0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003b1f0:·6573·656e·740a·2020·7768·656e·3a20·2722··esent.··when:·'" | |||
| 0003b200:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003b210:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003b220:·7327·0a20·2074·6167·733a·0a20·202d·2043··s'.··tags:.··-·C | |||
| 0003b230:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b240:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b250:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b260:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b270:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b280:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b290:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b2a0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b2b0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b2c0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b2d0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b2e0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b2f0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003 | 0003ad70:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0003 | 0003ad80:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0003 | 0003ad90:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0003 | 0003ada0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0003 | 0003adb0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003 | 0003adc0:·6d31·3336·3622·2074·6162·696e·6465·783d··m1366"·tabindex= | ||
| 0003 | 0003add0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003 | 0003ade0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003 | 0003adf0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003 | 0003ae00:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003 | 0003ae10:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003ae20:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b3b0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| 0003b3c0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| Max diff block lines reached; 3111523/3128663 bytes (99.45%) of diff not shown. | |||
| Offset 114, 26 lines modified | Offset 114, 19 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 126 | include·install_aide | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 127 | class·install_aide·{ | ||
| 128 | ··package·{·'aide': | ||
| 129 | ····ensure·=>·'installed', | ||
| 130 | ··} | ||
| 131 | } | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Gather·the·package·facts | 130 | -·name:·Gather·the·package·facts |
| 138 | ··package_facts: | 131 | ··package_facts: |
| Offset 162, 19 lines modified | Offset 155, 26 lines modified | ||
| 162 | ··-·PCI-DSSv4-11.5.2 | 155 | ··-·PCI-DSSv4-11.5.2 |
| 163 | ··-·enable_strategy | 156 | ··-·enable_strategy |
| 164 | ··-·low_complexity | 157 | ··-·low_complexity |
| 165 | ··-·low_disruption | 158 | ··-·low_disruption |
| 166 | ··-·medium_severity | 159 | ··-·medium_severity |
| 167 | ··-·no_reboot_needed | 160 | ··-·no_reboot_needed |
| 168 | ··-·package_aide_installed | 161 | ··-·package_aide_installed |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 167 | include·install_aide | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | 168 | class·install_aide·{ | |
| 169 | ··package·{·'aide': | ||
| 170 | ····ensure·=>·'installed', | ||
| 171 | ··} | ||
| 172 | } | ||
| 173 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 173 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 174 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 174 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 175 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 175 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 176 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 176 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 177 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 177 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 178 | crontab: | 178 | crontab: |
| 179 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 179 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 387, 14 lines modified | Offset 387, 33 lines modified | ||
| 387 | ············_\x8i_\x8s_\x8m······1446 | 387 | ············_\x8i_\x8s_\x8m······1446 |
| 388 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 388 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 389 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 389 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 390 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 390 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 391 | ·····················FCS_TLSC_EXT.1 | 391 | ·····················FCS_TLSC_EXT.1 |
| 392 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 392 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 393 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 393 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 395 | var_system_crypto_policy='DEFAULT' | ||
| 396 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 397 | rc=$? | ||
| 398 | if·test·"$rc"·=·127;·then | ||
| 399 | » echo·"$stderr_of_call"·>&2 | ||
| 400 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 401 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 402 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 403 | » false··#·end·with·an·error·code | ||
| 404 | elif·test·"$rc"·!=·0;·then | ||
| 405 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 406 | » false··#·end·with·an·error·code | ||
| 407 | fi | ||
| 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 408 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 395 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 409 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 396 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 410 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 397 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 411 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 398 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 412 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 399 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 413 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 400 | ··set_fact: | 414 | ··set_fact: |
| Offset 439, 33 lines modified | Offset 458, 14 lines modified | ||
| 439 | ··-·PCI-DSSv4-2.2.7 | 458 | ··-·PCI-DSSv4-2.2.7 |
| 440 | ··-·configure_crypto_policy | 459 | ··-·configure_crypto_policy |
| 441 | ··-·high_severity | 460 | ··-·high_severity |
| 442 | ··-·low_complexity | 461 | ··-·low_complexity |
| 443 | ··-·low_disruption | 462 | ··-·low_disruption |
| 444 | ··-·no_reboot_needed | 463 | ··-·no_reboot_needed |
| 445 | ··-·restrict_strategy | 464 | ··-·restrict_strategy |
| 446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 447 | var_system_crypto_policy='DEFAULT' | ||
| 448 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 449 | rc=$? | ||
| 450 | if·test·"$rc"·=·127;·then | ||
| 451 | » echo·"$stderr_of_call"·>&2 | ||
| 452 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 453 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 454 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 455 | » false··#·end·with·an·error·code | ||
| 456 | elif·test·"$rc"·!=·0;·then | ||
| 457 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 458 | » false··#·end·with·an·error·code | ||
| 459 | fi | ||
| 460 | Group ·Updating·Software· Group·contains·1·rule | 465 | Group ·Updating·Software· Group·contains·1·rule |
| 461 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also | 466 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also |
| 462 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called | 467 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called |
| 463 | S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. | 468 | S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. |
| 464 | Anolis·OS·8·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records | 469 | Anolis·OS·8·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records |
| 465 | metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all | 470 | metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all |
| Offset 670, 14 lines modified | Offset 670, 20 lines modified | ||
| Max diff block lines reached; 339937/345363 bytes (98.43%) of diff not shown. | |||
| Offset 15320, 283 lines modified | Offset 15320, 283 lines modified | ||
| 0003bd70:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003bd70:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003bd80:·743d·2223·6964·6d38·3031·3222·2074·6162··t="#idm8012"·tab | 0003bd80:·743d·2223·6964·6d38·3031·3222·2074·6162··t="#idm8012"·tab | ||
| 0003bd90:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003bd90:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003bda0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003bda0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003bdb0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003bdb0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003bdc0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003bdc0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003bdd0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003bdd0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003bde0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003bde0:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | ||
| 0003bdf0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003be00:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003be10:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003be20:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003be30:·3d22·6964·6d38·3031·3222·3e3c·7461·626c··="idm8012"><tabl | |||
| 0003be40:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003be50:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003be60:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003be70:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003be80:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003be90:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bea0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003beb0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003bec0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bed0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003bee0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003bef0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003bf00:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003bf10:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003bf20:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003bf30:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003bf40:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003bf50:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003bf60:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003bf70:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003bf80:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003bf90:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003bfa0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003bfb0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003bfc0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003bfd0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003bfe0:·7461·7267·6574·3d22·2369·646d·3830·3133··target="#idm8013 | |||
| 0003bff0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003c000:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003c010:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003c020:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003c030:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003c040:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003c050:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003c060:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003c070:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c080:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c090:·7365·2220·6964·3d22·6964·6d38·3031·3322··se"·id="idm8013" | |||
| 0003c0a0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003c0b0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003c0c0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003c0d0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003c0e0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003c0f0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003c100:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003c110:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003c120:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c130:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003c140:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003c150:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003c160:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003c170:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003c180:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003c190:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003c1a0:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003c1b0:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003c1c0:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003c1d0:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003c1e0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003c1f0:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003c200:·5354·4947·2d52·4845·4c2d·3038·2d30·3130··STIG-RHEL-08-010 | |||
| 0003c210:·3335·390a·2020·2d20·4e49·5354·2d38·3030··359.··-·NIST-800 | |||
| 0003c220:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003c230:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003c240:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003c250:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003c260:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003c270:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003c280:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003c290:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003c2a0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003c2b0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003c2c0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003c2d0:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003c2e0:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003c2f0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003c300:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003c310:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003c320:·6e74·0a20·2077·6865·6e3a·2027·226b·6572··nt.··when:·'"ker | |||
| 0003c330:·6e65·6c22·2069·6e20·616e·7369·626c·655f··nel"·in·ansible_ | |||
| 0003c340:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 0003c350:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003c360:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003c370:·5341·2d53·5449·472d·5248·454c·2d30·382d··SA-STIG-RHEL-08- | |||
| 0003c380:·3031·3033·3539·0a20·202d·204e·4953·542d··010359.··-·NIST- | |||
| 0003c390:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003c3a0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003c3b0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003c3c0:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003c3d0:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003c3e0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003c3f0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003c400:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003c410:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003c420:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003c430:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003c440:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003c450:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003c460:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003c470:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003c480:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003c490:·2d74·6172·6765·743d·2223·6964·6d38·3031··-target="#idm801 | |||
| 0003c4a0:·3422·2074·6162·696e·6465·783d·2230·2220··4"·tabindex="0"· | |||
| 0003c4b0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003c4c0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003c4d0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003c4e0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003c4f0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003c500:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003c510:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003c520:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c530:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003c540:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003c550:·643d·2269·646d·3830·3134·223e·3c70·7265··d="idm8014"><pre | |||
| Max diff block lines reached; 22769888/22807590 bytes (99.83%) of diff not shown. | |||
| Offset 15326, 282 lines modified | Offset 15326, 282 lines modified | ||
| 0003bdd0:·7267·6574·3d22·2369·646d·3830·3132·2220··rget="#idm8012"· | 0003bdd0:·7267·6574·3d22·2369·646d·3830·3132·2220··rget="#idm8012"· | ||
| 0003bde0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003bde0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003bdf0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003bdf0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003be00:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003be00:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003be10:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003be10:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003be20:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003be20:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003be30:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003be30:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003be40:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003be50:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003be60:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003be70:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003be80:·2069·643d·2269·646d·3830·3132·223e·3c74···id="idm8012"><t | |||
| 0003be90:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003bea0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003beb0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003bec0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003bed0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003bee0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003bef0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bf00:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003bf10:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003bf20:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003bf30:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003bf40:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bf50:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003bf60:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003bf70:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003bf80:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003bf90:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003bfa0:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 0003bfb0:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003bfc0:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003bfd0:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003bfe0:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003bff0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003c000:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003c010:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003c020:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003c030:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003c040:·3031·3322·2074·6162·696e·6465·783d·2230··013"·tabindex="0 | |||
| 0003c050:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003c060:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003c070:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003c080:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003c090:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003c0a0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003c0b0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003c0c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c0d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c0e0:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003c0f0:·3133·223e·3c74·6162·6c65·2063·6c61·7373··13"><table·class | |||
| 0003c100:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003c110:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003c120:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003c130:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003c140:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003c150:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c160:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003c170:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003c180:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c190:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003c1a0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003c1b0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003c1c0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003c1d0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003c1e0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003c1f0:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | |||
| 0003c200:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | |||
| 0003c210:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | |||
| 0003c220:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | |||
| 0003c230:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003c240:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003c250:·5341·2d53·5449·472d·5248·454c·2d30·382d··SA-STIG-RHEL-08- | |||
| 0003c260:·3031·3033·3539·0a20·202d·204e·4953·542d··010359.··-·NIST- | |||
| 0003c270:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003c280:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003c290:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003c2a0:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003c2b0:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003c2c0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003c2d0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003c2e0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003c2f0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003c300:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003c310:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003c320:·7461·6c6c·6564·0a0a·2d20·6e61·6d65·3a20··talled..-·name:· | |||
| 0003c330:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003c340:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003c350:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003c360:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003c370:·6573·656e·740a·2020·7768·656e·3a20·2722··esent.··when:·'" | |||
| 0003c380:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003c390:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003c3a0:·7327·0a20·2074·6167·733a·0a20·202d·2043··s'.··tags:.··-·C | |||
| 0003c3b0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003c3c0:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003c3d0:·3038·2d30·3130·3335·390a·2020·2d20·4e49··08-010359.··-·NI | |||
| 0003c3e0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003c3f0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003c400:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003c410:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003c420:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003c430:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003c440:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003c450:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003c460:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003c470:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003c480:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003c490:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003c4a0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003c4b0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003c4c0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003c4d0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003c4e0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003c4f0:·3830·3134·2220·7461·6269·6e64·6578·3d22··8014"·tabindex=" | |||
| 0003c500:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003c510:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003c520:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003c530:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003c540:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003c550:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003c560:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003c570:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003c580:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003c590:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003c5a0:·2220·6964·3d22·6964·6d38·3031·3422·3e3c··"·id="idm8014">< | |||
| 0003c5b0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| Max diff block lines reached; 23061122/23098686 bytes (99.84%) of diff not shown. | |||
| Offset 15316, 283 lines modified | Offset 15316, 283 lines modified | ||
| 0003bd30:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003bd30:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003bd40:·2369·646d·3830·3132·2220·7461·6269·6e64··#idm8012"·tabind | 0003bd40:·2369·646d·3830·3132·2220·7461·6269·6e64··#idm8012"·tabind | ||
| 0003bd50:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003bd50:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003bd60:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003bd60:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003bd70:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003bd70:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003bd80:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003bd80:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003bd90:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003bd90:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003bda0:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003bdb0:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003bdc0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bdd0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bde0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bdf0:·646d·3830·3132·223e·3c74·6162·6c65·2063··dm8012"><table·c | |||
| 0003be00:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003be10:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003be20:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003be30:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003be40:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003be50:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003be60:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003be70:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003be80:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003be90:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003bea0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003beb0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003bec0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003bed0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003bee0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003bef0:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003bf00:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003bf10:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003bf20:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003bf30:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003bf40:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003bf50:·0a7d·0a3c·2f63·6f64·653e·3c2f·7072·653e··.}.</code></pre> | |||
| 0003bf60:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003bf70:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003bf80:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003bf90:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003bfa0:·6765·743d·2223·6964·6d38·3031·3322·2074··get="#idm8013"·t | |||
| 0003bfb0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003bfc0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003bfd0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003bfe0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003bff0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003c000:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003c010:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003c020:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c030:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c040:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c050:·2069·643d·2269·646d·3830·3133·223e·3c74···id="idm8013"><t | |||
| 0003c060:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003c070:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003c080:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003c090:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003c0a0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003c0b0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003c0c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c0d0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003c0e0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003c0f0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003c100:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003c110:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c120:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003c130:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003c140:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003c150:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003c160:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003c170:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003c180:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003c190:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003c1a0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003c1b0:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003c1c0:·472d·5248·454c·2d30·382d·3031·3033·3539··G-RHEL-08-010359 | |||
| 0003c1d0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003c1e0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003c1f0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003c200:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003c210:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003c220:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003c230:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003c240:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003c250:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003c260:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003c270:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003c280:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003c290:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003c2a0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003c2b0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003c2c0:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003c2d0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003c2e0:·2020·7768·656e·3a20·2722·6b65·726e·656c····when:·'"kernel | |||
| 0003c2f0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003c300:·7473·2e70·6163·6b61·6765·7327·0a20·2074··ts.packages'.··t | |||
| 0003c310:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003c320:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003c330:·5354·4947·2d52·4845·4c2d·3038·2d30·3130··STIG-RHEL-08-010 | |||
| 0003c340:·3335·390a·2020·2d20·4e49·5354·2d38·3030··359.··-·NIST-800 | |||
| 0003c350:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003c360:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003c370:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003c380:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003c390:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003c3a0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003c3b0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003c3c0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003c3d0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003c3e0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003c3f0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003c400:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003c410:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003c420:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003c430:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003c440:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003c450:·7267·6574·3d22·2369·646d·3830·3134·2220··rget="#idm8014"· | |||
| 0003c460:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003c470:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003c480:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003c490:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003c4a0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003c4b0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003c4c0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003c4d0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003c4e0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c4f0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c500:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c510:·6964·6d38·3031·3422·3e3c·7072·653e·3c63··idm8014"><pre><c | |||
| Max diff block lines reached; 9767334/9805036 bytes (99.62%) of diff not shown. | |||
| Offset 147, 26 lines modified | Offset 147, 48 lines modified | ||
| 147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 148 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 148 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 149 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 149 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 150 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 150 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 151 | ············_\x8c_\x8i_\x8s············5.3.1 | 151 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 152 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 152 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 153 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 153 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | include·install_aide | ||
| 160 | class·install_aide·{ | ||
| 161 | ··package·{·'aide': | ||
| 162 | ····ensure·=>·'installed', | ||
| 163 | ··} | ||
| 164 | 159 | dnf·install·aide | |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | package·install·aide | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | [[packages]] | ||
| 168 | name·=·"aide" | ||
| 169 | version·=·"*" | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 176 | if·rpm·--quiet·-q·kernel;·then | ||
| 177 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 178 | ····yum·install·-y·"aide" | ||
| 179 | fi | ||
| 180 | else | ||
| 181 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 182 | fi | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | -·name:·Gather·the·package·facts | 188 | -·name:·Gather·the·package·facts |
| 171 | ··package_facts: | 189 | ··package_facts: |
| Offset 197, 55 lines modified | Offset 219, 33 lines modified | ||
| 197 | ··-·PCI-DSSv4-11.5.2 | 219 | ··-·PCI-DSSv4-11.5.2 |
| 198 | ··-·enable_strategy | 220 | ··-·enable_strategy |
| 199 | ··-·low_complexity | 221 | ··-·low_complexity |
| 200 | ··-·low_disruption | 222 | ··-·low_disruption |
| 201 | ··-·medium_severity | 223 | ··-·medium_severity |
| 202 | ··-·no_reboot_needed | 224 | ··-·no_reboot_needed |
| 203 | ··-·package_aide_installed | 225 | ··-·package_aide_installed |
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 205 | [[packages]] | ||
| 206 | name·=·"aide" | ||
| 207 | version·=·"*" | ||
| 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 209 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 210 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 211 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 212 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 213 | dnf·install·aide | ||
| 214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 215 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 216 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 217 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 218 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 219 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 220 | if·rpm·--quiet·-q·kernel;·then | ||
| 221 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 222 | ····yum·install·-y·"aide" | ||
| 223 | fi | ||
| 224 | else | ||
| 225 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 226 | fi | ||
| 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 228 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 229 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 230 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 231 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 232 | package·--add=aide | 231 | package·--add=aide |
| 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 232 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 233 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 234 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 235 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 237 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 236 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 237 | include·install_aide | ||
| 238 | 238 | class·install_aide·{ | |
| 239 | ··package·{·'aide': | ||
| 240 | ····ensure·=>·'installed', | ||
| 241 | ··} | ||
| 242 | } | ||
| 239 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 243 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 240 | Run·the·following·command·to·generate·a·new·database: | 244 | Run·the·following·command·to·generate·a·new·database: |
| 241 | $·sudo·/usr/sbin/aide·--init | 245 | $·sudo·/usr/sbin/aide·--init |
| 242 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 246 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 243 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 247 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 244 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 248 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 245 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 249 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 271, 14 lines modified | Offset 271, 28 lines modified | ||
| 271 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 271 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 272 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 272 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 273 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 273 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 274 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 274 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 275 | ············_\x8c_\x8i_\x8s············5.3.1 | 275 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 276 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 276 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 277 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 277 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 278 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 279 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 280 | if·rpm·--quiet·-q·kernel;·then | ||
| 281 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| Max diff block lines reached; 1107166/1112427 bytes (99.53%) of diff not shown. | |||
| Offset 14991, 295 lines modified | Offset 14991, 295 lines modified | ||
| 0003a8e0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003a8e0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003a8f0:·6d31·3332·3531·2220·7461·6269·6e64·6578··m13251"·tabindex | 0003a8f0:·6d31·3332·3531·2220·7461·6269·6e64·6578··m13251"·tabindex | ||
| 0003a900:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003a900:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003a910:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003a910:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003a920:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003a920:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003a930:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003a930:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003a940:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003a940:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003a950:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003a960:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003a970:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003a980:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003a990:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003a9a0:·3133·3235·3122·3e3c·7461·626c·6520·636c··13251"><table·cl | |||
| 0003a9b0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003a9c0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003a9d0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003a9e0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003a9f0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003aa00:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003aa10:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003aa20:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003aa30:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003aa40:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003aa50:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003aa60:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003aa70:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003aa80:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003aa90:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003aaa0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f64··nclude·install_d | |||
| 0003aab0:·6e66·2d61·7574·6f6d·6174·6963·0a0a·636c··nf-automatic..cl | |||
| 0003aac0:·6173·7320·696e·7374·616c·6c5f·646e·662d··ass·install_dnf- | |||
| 0003aad0:·6175·746f·6d61·7469·6320·7b0a·2020·7061··automatic·{.··pa | |||
| 0003aae0:·636b·6167·6520·7b20·2764·6e66·2d61·7574··ckage·{·'dnf-aut | |||
| 0003aaf0:·6f6d·6174·6963·273a·0a20·2020·2065·6e73··omatic':.····ens | |||
| 0003ab00:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003ab10:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003ab20:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003ab30:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003ab40:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003ab50:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003ab60:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003ab70:·6964·6d31·3332·3532·2220·7461·6269·6e64··idm13252"·tabind | |||
| 0003ab80:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003ab90:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003aba0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003abb0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003abc0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003abd0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003abe0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003abf0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003ac00:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003ac10:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003ac20:·6964·6d31·3332·3532·223e·3c74·6162·6c65··idm13252"><table | |||
| 0003ac30:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003ac40:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003ac50:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003ac60:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003ac70:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003ac80:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ac90:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003aca0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003acb0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003acc0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003acd0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003ace0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003acf0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003ad00:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003ad10:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003ad20:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003ad30:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003ad40:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003ad50:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003ad60:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003ad70:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003ad80:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003ad90:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003ada0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003adb0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003adc0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003add0:·0a20·202d·2070·6163·6b61·6765·5f64·6e66··.··-·package_dnf | |||
| 0003ade0:·2d61·7574·6f6d·6174·6963·5f69·6e73·7461··-automatic_insta | |||
| 0003adf0:·6c6c·6564·0a0a·2d20·6e61·6d65·3a20·456e··lled..-·name:·En | |||
| 0003ae00:·7375·7265·2064·6e66·2d61·7574·6f6d·6174··sure·dnf-automat | |||
| 0003ae10:·6963·2069·7320·696e·7374·616c·6c65·640a··ic·is·installed. | |||
| 0003ae20:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003ae30:·616d·653a·2064·6e66·2d61·7574·6f6d·6174··ame:·dnf-automat | |||
| 0003ae40:·6963·0a20·2020·2073·7461·7465·3a20·7072··ic.····state:·pr | |||
| 0003ae50:·6573·656e·740a·2020·7768·656e·3a20·6e6f··esent.··when:·no | |||
| 0003ae60:·7420·2820·226b·6572·6e65·6c22·2069·6e20··t·(·"kernel"·in· | |||
| 0003ae70:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003ae80:·636b·6167·6573·2061·6e64·2022·7270·6d2d··ckages·and·"rpm- | |||
| 0003ae90:·6f73·7472·6565·2220·696e·2061·6e73·6962··ostree"·in·ansib | |||
| 0003aea0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003aeb0:·730a·2020·2020·616e·6420·2262·6f6f·7463··s.····and·"bootc | |||
| 0003aec0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003aed0:·7473·2e70·6163·6b61·6765·7320·616e·6420··ts.packages·and· | |||
| 0003aee0:·6e6f·7420·226f·7065·6e73·6869·6674·2d6b··not·"openshift-k | |||
| 0003aef0:·7562·656c·6574·2220·696e·2061·6e73·6962··ubelet"·in·ansib | |||
| 0003af00:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003af10:·730a·2020·2020·290a·2020·7461·6773·3a0a··s.····).··tags:. | |||
| 0003af20:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003af30:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003af40:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003af50:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003af60:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003af70:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003af80:·6564·0a20·202d·2070·6163·6b61·6765·5f64··ed.··-·package_d | |||
| 0003af90:·6e66·2d61·7574·6f6d·6174·6963·5f69·6e73··nf-automatic_ins | |||
| 0003afa0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003afb0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003afc0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003afd0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003afe0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003aff0:·2d74·6172·6765·743d·2223·6964·6d31·3332··-target="#idm132 | |||
| 0003b000:·3533·2220·7461·6269·6e64·6578·3d22·3022··53"·tabindex="0" | |||
| 0003b010:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b020:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b030:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b040:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b050:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b060:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b070:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b080:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b090:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b0a0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b0b0:·6964·3d22·6964·6d31·3332·3533·223e·3c70··id="idm13253"><p | |||
| 0003b0c0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| Max diff block lines reached; 3377446/3416804 bytes (98.85%) of diff not shown. | |||
| Offset 112, 26 lines modified | Offset 112, 49 lines modified | ||
| 112 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 112 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 113 | ············suitable·for·automatic,·regular·execution. | 113 | ············suitable·for·automatic,·regular·execution. |
| 114 | Severity: ··medium | 114 | Severity: ··medium |
| 115 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 115 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 116 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 116 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 117 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 117 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 124 | include·install_dnf-automatic | ||
| 124 | dnf·install·dnf-automatic | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | c | 130 | package·install·dnf-automatic |
| 126 | ··package·{·'dnf-automatic': | ||
| 127 | ····ensure·=>·'installed', | ||
| 128 | ··} | ||
| 129 | 131 | _.R_.e_.m_.e_.d_.i_.a_.t_.i_.o_.n_.·_.O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_.t_.·_.s_.n_.i_.p_.p_.e_.t_.·_.⇲ | |
| 132 | [[packages]] | ||
| 133 | name·=·"dnf-automatic" | ||
| 134 | version·=·"*" | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 141 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 142 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 143 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 144 | ····yum·install·-y·"dnf-automatic" | ||
| 145 | fi | ||
| 146 | else | ||
| 147 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 148 | fi | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | -·name:·Gather·the·package·facts | 154 | -·name:·Gather·the·package·facts |
| 136 | ··package_facts: | 155 | ··package_facts: |
| Offset 155, 56 lines modified | Offset 178, 33 lines modified | ||
| 155 | ··tags: | 178 | ··tags: |
| 156 | ··-·enable_strategy | 179 | ··-·enable_strategy |
| 157 | ··-·low_complexity | 180 | ··-·low_complexity |
| 158 | ··-·low_disruption | 181 | ··-·low_disruption |
| 159 | ··-·medium_severity | 182 | ··-·medium_severity |
| 160 | ··-·no_reboot_needed | 183 | ··-·no_reboot_needed |
| 161 | ··-·package_dnf-automatic_installed | 184 | ··-·package_dnf-automatic_installed |
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 163 | [[packages]] | ||
| 164 | name·=·"dnf-automatic" | ||
| 165 | version·=·"*" | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | dnf·install·dnf-automatic | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 178 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 179 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 180 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 181 | ····yum·install·-y·"dnf-automatic" | ||
| 182 | fi | ||
| 183 | else | ||
| 184 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 185 | fi | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 191 | package·--add=dnf-automatic | 190 | package·--add=dnf-automatic |
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 196 | include·install_dnf-automatic | ||
| 197 | class·install_dnf-automatic·{ | ||
| 197 | package· | 198 | ··package·{·'dnf-automatic': |
| 199 | ····ensure·=>·'installed', | ||
| 200 | ··} | ||
| 201 | } | ||
| 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 202 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 199 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 203 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 200 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 204 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 201 | automatic.conf. | 205 | automatic.conf. |
| 202 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 206 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 203 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 207 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 204 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 208 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 214, 54 lines modified | Offset 214, 14 lines modified | ||
| 214 | Severity: ··medium | 214 | Severity: ··medium |
| 215 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 215 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 216 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 216 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 217 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 217 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 218 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 218 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 219 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 | 219 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 |
| 220 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 220 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 221 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 222 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 223 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 224 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| Max diff block lines reached; 239002/245447 bytes (97.37%) of diff not shown. | |||
| Offset 15373, 283 lines modified | Offset 15373, 283 lines modified | ||
| 0003c0c0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003c0c0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003c0d0:·6964·6d38·3031·3222·2074·6162·696e·6465··idm8012"·tabinde | 0003c0d0:·6964·6d38·3031·3222·2074·6162·696e·6465··idm8012"·tabinde | ||
| 0003c0e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003c0e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003c0f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003c0f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003c100:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003c100:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003c110:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003c110:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003c120:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003c120:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003c130:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003c140:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003c150:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003c160:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003c170:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003c180:·6d38·3031·3222·3e3c·7461·626c·6520·636c··m8012"><table·cl | |||
| 0003c190:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003c1a0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003c1b0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003c1c0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003c1d0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003c1e0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003c1f0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003c200:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003c210:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003c220:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003c230:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003c240:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003c250:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003c260:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003c270:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003c280:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003c290:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003c2a0:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003c2b0:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003c2c0:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003c2d0:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003c2e0:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003c2f0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003c300:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003c310:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003c320:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003c330:·6574·3d22·2369·646d·3830·3133·2220·7461··et="#idm8013"·ta | |||
| 0003c340:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003c350:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003c360:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003c370:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003c380:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003c390:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003c3a0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003c3b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c3c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c3d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003c3e0:·6964·3d22·6964·6d38·3031·3322·3e3c·7461··id="idm8013"><ta | |||
| 0003c3f0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003c400:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003c410:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003c420:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003c430:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003c440:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003c450:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c460:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003c470:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c480:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003c490:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003c4a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c4b0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003c4c0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003c4d0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003c4e0:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003c4f0:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003c500:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003c510:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003c520:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003c530:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003c540:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003c550:·2d52·4845·4c2d·3038·2d30·3130·3335·390a··-RHEL-08-010359. | |||
| 0003c560:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003c570:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003c580:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003c590:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003c5a0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003c5b0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003c5c0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003c5d0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003c5e0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003c5f0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003c600:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003c610:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003c620:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003c630:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003c640:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003c650:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003c660:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003c670:·2077·6865·6e3a·2027·226b·6572·6e65·6c22···when:·'"kernel" | |||
| 0003c680:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003c690:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 0003c6a0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003c6b0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003c6c0:·5449·472d·5248·454c·2d30·382d·3031·3033··TIG-RHEL-08-0103 | |||
| 0003c6d0:·3539·0a20·202d·204e·4953·542d·3830·302d··59.··-·NIST-800- | |||
| 0003c6e0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003c6f0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003c700:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003c710:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003c720:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003c730:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003c740:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003c750:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003c760:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003c770:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003c780:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003c790:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003c7a0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003c7b0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003c7c0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003c7d0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003c7e0:·6765·743d·2223·6964·6d38·3031·3422·2074··get="#idm8014"·t | |||
| 0003c7f0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003c800:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003c810:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003c820:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003c830:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003c840:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003c850:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003c860:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003c870:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c880:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c890:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003c8a0:·646d·3830·3134·223e·3c70·7265·3e3c·636f··dm8014"><pre><co | |||
| Max diff block lines reached; 26064321/26102023 bytes (99.86%) of diff not shown. | |||
| Offset 15335, 282 lines modified | Offset 15335, 282 lines modified | ||
| 0003be60:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | 0003be60:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | ||
| 0003be70:·3132·2220·7461·6269·6e64·6578·3d22·3022··12"·tabindex="0" | 0003be70:·3132·2220·7461·6269·6e64·6578·3d22·3022··12"·tabindex="0" | ||
| 0003be80:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003be80:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003be90:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003be90:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003bea0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003bea0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003beb0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003beb0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003bec0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003bec0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003bed0:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003bee0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003bef0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bf00:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bf10:·7073·6522·2069·643d·2269·646d·3830·3132··pse"·id="idm8012 | |||
| 0003bf20:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bf30:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bf40:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bf50:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bf60:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003bf70:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003bf80:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bf90:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003bfa0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bfb0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003bfc0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003bfd0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003bfe0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003bff0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003c000:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003c010:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003c020:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003c030:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003c040:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003c050:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003c060:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003c070:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003c080:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003c090:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003c0a0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003c0b0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003c0c0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003c0d0:·6964·6d38·3031·3322·2074·6162·696e·6465··idm8013"·tabinde | |||
| 0003c0e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003c0f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003c100:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003c110:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003c120:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003c130:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003c140:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003c150:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c160:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c170:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003c180:·646d·3830·3133·223e·3c74·6162·6c65·2063··dm8013"><table·c | |||
| 0003c190:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003c1a0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003c1b0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003c1c0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003c1d0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003c1e0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c1f0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003c200:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003c210:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003c220:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003c230:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003c240:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003c250:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003c260:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003c270:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003c280:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003c290:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003c2a0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003c2b0:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003c2c0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003c2d0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003c2e0:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003c2f0:·2d30·382d·3031·3033·3539·0a20·202d·204e··-08-010359.··-·N | |||
| 0003c300:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003c310:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003c320:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003c330:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003c340:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003c350:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003c360:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003c370:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003c380:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003c390:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003c3a0:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003c3b0:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003c3c0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003c3d0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003c3e0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003c3f0:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003c400:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003c410:·3a20·2722·6b65·726e·656c·2220·696e·2061··:·'"kernel"·in·a | |||
| 0003c420:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003c430:·6b61·6765·7327·0a20·2074·6167·733a·0a20··kages'.··tags:.· | |||
| 0003c440:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003c450:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003c460:·4845·4c2d·3038·2d30·3130·3335·390a·2020··HEL-08-010359.·· | |||
| 0003c470:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003c480:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003c490:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003c4a0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003c4b0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003c4c0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003c4d0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003c4e0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003c4f0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003c500:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003c510:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003c520:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003c530:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003c540:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003c550:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003c560:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003c570:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003c580:·2369·646d·3830·3134·2220·7461·6269·6e64··#idm8014"·tabind | |||
| 0003c590:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003c5a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003c5b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003c5c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003c5d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003c5e0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003c5f0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003c600:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003c610:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003c620:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003c630:·6170·7365·2220·6964·3d22·6964·6d38·3031··apse"·id="idm801 | |||
| 0003c640:·3422·3e3c·7072·653e·3c63·6f64·653e·0a5b··4"><pre><code>.[ | |||
| Max diff block lines reached; 11434779/11472343 bytes (99.67%) of diff not shown. | |||
| Offset 133, 26 lines modified | Offset 133, 48 lines modified | ||
| 133 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 133 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 135 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 135 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 136 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 136 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 137 | ············_\x8c_\x8i_\x8s············5.3.1 | 137 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 139 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 139 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | include·install_aide | ||
| 146 | class·install_aide·{ | ||
| 147 | ··package·{·'aide': | ||
| 148 | ····ensure·=>·'installed', | ||
| 149 | ··} | ||
| 150 | 145 | dnf·install·aide | |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | package·install·aide | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 162 | if·rpm·--quiet·-q·kernel;·then | ||
| 163 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 164 | ····yum·install·-y·"aide" | ||
| 165 | fi | ||
| 166 | else | ||
| 167 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 168 | fi | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 156 | -·name:·Gather·the·package·facts | 174 | -·name:·Gather·the·package·facts |
| 157 | ··package_facts: | 175 | ··package_facts: |
| Offset 183, 55 lines modified | Offset 205, 33 lines modified | ||
| 183 | ··-·PCI-DSSv4-11.5.2 | 205 | ··-·PCI-DSSv4-11.5.2 |
| 184 | ··-·enable_strategy | 206 | ··-·enable_strategy |
| 185 | ··-·low_complexity | 207 | ··-·low_complexity |
| 186 | ··-·low_disruption | 208 | ··-·low_disruption |
| 187 | ··-·medium_severity | 209 | ··-·medium_severity |
| 188 | ··-·no_reboot_needed | 210 | ··-·no_reboot_needed |
| 189 | ··-·package_aide_installed | 211 | ··-·package_aide_installed |
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 191 | [[packages]] | ||
| 192 | name·=·"aide" | ||
| 193 | version·=·"*" | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 199 | dnf·install·aide | ||
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 205 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 206 | if·rpm·--quiet·-q·kernel;·then | ||
| 207 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 208 | ····yum·install·-y·"aide" | ||
| 209 | fi | ||
| 210 | else | ||
| 211 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 212 | fi | ||
| 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 218 | package·--add=aide | 217 | package·--add=aide |
| 219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 220 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 221 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 222 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 223 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 223 | include·install_aide | ||
| 224 | 224 | class·install_aide·{ | |
| 225 | ··package·{·'aide': | ||
| 226 | ····ensure·=>·'installed', | ||
| 227 | ··} | ||
| 228 | } | ||
| 225 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 229 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 226 | Run·the·following·command·to·generate·a·new·database: | 230 | Run·the·following·command·to·generate·a·new·database: |
| 227 | $·sudo·/usr/sbin/aide·--init | 231 | $·sudo·/usr/sbin/aide·--init |
| 228 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 232 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 229 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 233 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 230 | To·initiate·a·manual·check,·run·the·following·command: | 234 | To·initiate·a·manual·check,·run·the·following·command: |
| 231 | $·sudo·/usr/sbin/aide·--check | 235 | $·sudo·/usr/sbin/aide·--check |
| Offset 250, 14 lines modified | Offset 250, 28 lines modified | ||
| 250 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 250 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 251 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 251 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 252 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 252 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 253 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 253 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 254 | ············_\x8c_\x8i_\x8s············5.3.1 | 254 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 255 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 255 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 256 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 256 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 258 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 259 | if·rpm·--quiet·-q·kernel;·then | ||
| 260 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| Max diff block lines reached; 1354298/1359708 bytes (99.60%) of diff not shown. | |||
| Offset 15326, 283 lines modified | Offset 15326, 283 lines modified | ||
| 0003bdd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003bdd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003bde0:·2369·646d·3830·3132·2220·7461·6269·6e64··#idm8012"·tabind | 0003bde0:·2369·646d·3830·3132·2220·7461·6269·6e64··#idm8012"·tabind | ||
| 0003bdf0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003bdf0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003be00:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003be00:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003be10:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003be10:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003be20:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003be20:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003be30:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003be30:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003be40:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003be50:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003be60:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003be70:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003be80:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003be90:·646d·3830·3132·223e·3c74·6162·6c65·2063··dm8012"><table·c | |||
| 0003bea0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003beb0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003bec0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003bed0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003bee0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bef0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bf00:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003bf10:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003bf20:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bf30:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003bf40:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003bf50:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003bf60:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003bf70:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003bf80:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003bf90:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003bfa0:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003bfb0:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003bfc0:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003bfd0:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003bfe0:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003bff0:·0a7d·0a3c·2f63·6f64·653e·3c2f·7072·653e··.}.</code></pre> | |||
| 0003c000:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003c010:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003c020:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003c030:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003c040:·6765·743d·2223·6964·6d38·3031·3322·2074··get="#idm8013"·t | |||
| 0003c050:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003c060:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003c070:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003c080:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003c090:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003c0a0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003c0b0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003c0c0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c0d0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c0e0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c0f0:·2069·643d·2269·646d·3830·3133·223e·3c74···id="idm8013"><t | |||
| 0003c100:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003c110:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003c120:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003c130:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003c140:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003c150:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003c160:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c170:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003c180:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003c190:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003c1a0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003c1b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c1c0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003c1d0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003c1e0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003c1f0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003c200:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003c210:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003c220:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003c230:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003c240:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003c250:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003c260:·472d·5248·454c·2d30·382d·3031·3033·3539··G-RHEL-08-010359 | |||
| 0003c270:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003c280:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003c290:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003c2a0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003c2b0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003c2c0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003c2d0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003c2e0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003c2f0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003c300:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003c310:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003c320:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003c330:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003c340:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003c350:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003c360:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003c370:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003c380:·2020·7768·656e·3a20·2722·6b65·726e·656c····when:·'"kernel | |||
| 0003c390:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003c3a0:·7473·2e70·6163·6b61·6765·7327·0a20·2074··ts.packages'.··t | |||
| 0003c3b0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003c3c0:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003c3d0:·5354·4947·2d52·4845·4c2d·3038·2d30·3130··STIG-RHEL-08-010 | |||
| 0003c3e0:·3335·390a·2020·2d20·4e49·5354·2d38·3030··359.··-·NIST-800 | |||
| 0003c3f0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003c400:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003c410:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003c420:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003c430:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003c440:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003c450:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003c460:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003c470:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003c480:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003c490:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003c4a0:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003c4b0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003c4c0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003c4d0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003c4e0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003c4f0:·7267·6574·3d22·2369·646d·3830·3134·2220··rget="#idm8014"· | |||
| 0003c500:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003c510:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003c520:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003c530:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003c540:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003c550:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003c560:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003c570:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003c580:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c590:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c5a0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c5b0:·6964·6d38·3031·3422·3e3c·7072·653e·3c63··idm8014"><pre><c | |||
| Max diff block lines reached; 11131137/11168839 bytes (99.66%) of diff not shown. | |||
| Offset 132, 26 lines modified | Offset 132, 48 lines modified | ||
| 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 136 | ············_\x8c_\x8i_\x8s············5.3.1 | 136 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | include·install_aide | ||
| 145 | class·install_aide·{ | ||
| 146 | ··package·{·'aide': | ||
| 147 | ····ensure·=>·'installed', | ||
| 148 | ··} | ||
| 149 | 144 | dnf·install·aide | |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | package·install·aide | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | [[packages]] | ||
| 153 | name·=·"aide" | ||
| 154 | version·=·"*" | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 161 | if·rpm·--quiet·-q·kernel;·then | ||
| 162 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 163 | ····yum·install·-y·"aide" | ||
| 164 | fi | ||
| 165 | else | ||
| 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 167 | fi | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | -·name:·Gather·the·package·facts | 173 | -·name:·Gather·the·package·facts |
| 156 | ··package_facts: | 174 | ··package_facts: |
| Offset 182, 55 lines modified | Offset 204, 33 lines modified | ||
| 182 | ··-·PCI-DSSv4-11.5.2 | 204 | ··-·PCI-DSSv4-11.5.2 |
| 183 | ··-·enable_strategy | 205 | ··-·enable_strategy |
| 184 | ··-·low_complexity | 206 | ··-·low_complexity |
| 185 | ··-·low_disruption | 207 | ··-·low_disruption |
| 186 | ··-·medium_severity | 208 | ··-·medium_severity |
| 187 | ··-·no_reboot_needed | 209 | ··-·no_reboot_needed |
| 188 | ··-·package_aide_installed | 210 | ··-·package_aide_installed |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | [[packages]] | ||
| 191 | name·=·"aide" | ||
| 192 | version·=·"*" | ||
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 198 | dnf·install·aide | ||
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 204 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 205 | if·rpm·--quiet·-q·kernel;·then | ||
| 206 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 207 | ····yum·install·-y·"aide" | ||
| 208 | fi | ||
| 209 | else | ||
| 210 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 211 | fi | ||
| 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 211 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 212 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 213 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 214 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 215 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 217 | package·--add=aide | 216 | package·--add=aide |
| 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 217 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 218 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 219 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 220 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 221 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 222 | include·install_aide | ||
| 223 | 223 | class·install_aide·{ | |
| 224 | ··package·{·'aide': | ||
| 225 | ····ensure·=>·'installed', | ||
| 226 | ··} | ||
| 227 | } | ||
| 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 228 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 225 | Run·the·following·command·to·generate·a·new·database: | 229 | Run·the·following·command·to·generate·a·new·database: |
| 226 | $·sudo·/usr/sbin/aide·--init | 230 | $·sudo·/usr/sbin/aide·--init |
| 227 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 231 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 228 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 232 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 229 | To·initiate·a·manual·check,·run·the·following·command: | 233 | To·initiate·a·manual·check,·run·the·following·command: |
| 230 | $·sudo·/usr/sbin/aide·--check | 234 | $·sudo·/usr/sbin/aide·--check |
| Offset 249, 14 lines modified | Offset 249, 28 lines modified | ||
| 249 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 249 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 250 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 250 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 251 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 251 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 252 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 252 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 253 | ············_\x8c_\x8i_\x8s············5.3.1 | 253 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 254 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 254 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 255 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 255 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 256 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 257 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 258 | if·rpm·--quiet·-q·kernel;·then | ||
| 259 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| Max diff block lines reached; 1316795/1322205 bytes (99.59%) of diff not shown. | |||
| Offset 15365, 282 lines modified | Offset 15365, 282 lines modified | ||
| 0003c040:·2d74·6172·6765·743d·2223·6964·6d38·3031··-target="#idm801 | 0003c040:·2d74·6172·6765·743d·2223·6964·6d38·3031··-target="#idm801 | ||
| 0003c050:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 0003c050:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0003c060:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003c060:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003c070:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003c070:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003c080:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003c080:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003c090:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003c090:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003c0a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003c0a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003c0b0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003c0c0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003c0d0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c0e0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c0f0:·7365·2220·6964·3d22·6964·6d38·3031·3222··se"·id="idm8012" | |||
| 0003c100:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003c110:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003c120:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003c130:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003c140:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003c150:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003c160:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003c170:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003c180:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c190:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003c1a0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003c1b0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003c1c0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003c1d0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003c1e0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003c1f0:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003c200:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003c210:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003c220:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003c230:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003c240:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003c250:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003c260:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003c270:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003c280:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003c290:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003c2a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003c2b0:·646d·3830·3133·2220·7461·6269·6e64·6578··dm8013"·tabindex | |||
| 0003c2c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003c2d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003c2e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003c2f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003c300:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003c310:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003c320:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003c330:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003c340:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003c350:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003c360:·6d38·3031·3322·3e3c·7461·626c·6520·636c··m8013"><table·cl | |||
| 0003c370:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003c380:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003c390:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003c3a0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003c3b0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003c3c0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003c3d0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003c3e0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003c3f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003c400:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003c410:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003c420:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003c430:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003c440:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003c450:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003c460:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003c470:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003c480:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003c490:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003c4a0:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003c4b0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003c4c0:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003c4d0:·3038·2d30·3130·3335·390a·2020·2d20·4e49··08-010359.··-·NI | |||
| 0003c4e0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003c4f0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003c500:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003c510:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003c520:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003c530:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003c540:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003c550:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003c560:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003c570:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003c580:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003c590:·696e·7374·616c·6c65·640a·0a2d·206e·616d··installed..-·nam | |||
| 0003c5a0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003c5b0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003c5c0:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003c5d0:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003c5e0:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003c5f0:·2027·226b·6572·6e65·6c22·2069·6e20·616e···'"kernel"·in·an | |||
| 0003c600:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003c610:·6167·6573·270a·2020·7461·6773·3a0a·2020··ages'.··tags:.·· | |||
| 0003c620:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003c630:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003c640:·454c·2d30·382d·3031·3033·3539·0a20·202d··EL-08-010359.··- | |||
| 0003c650:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003c660:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003c670:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003c680:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003c690:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003c6a0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003c6b0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003c6c0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003c6d0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003c6e0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003c6f0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003c700:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003c710:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003c720:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003c730:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003c740:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003c750:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003c760:·6964·6d38·3031·3422·2074·6162·696e·6465··idm8014"·tabinde | |||
| 0003c770:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003c780:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003c790:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003c7a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003c7b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003c7c0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| 0003c7d0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003c7e0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003c7f0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003c800:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003c810:·7073·6522·2069·643d·2269·646d·3830·3134··pse"·id="idm8014 | |||
| 0003c820:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| Max diff block lines reached; 25855970/25893534 bytes (99.85%) of diff not shown. | |||
| Offset 15357, 282 lines modified | Offset 15357, 282 lines modified | ||
| 0003bfc0:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 0003bfc0:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 0003bfd0:·3031·3222·2074·6162·696e·6465·783d·2230··012"·tabindex="0 | 0003bfd0:·3031·3222·2074·6162·696e·6465·783d·2230··012"·tabindex="0 | ||
| 0003bfe0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003bfe0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003bff0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003bff0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003c000:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003c000:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003c010:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003c010:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003c020:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003c020:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003c030:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003c040:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003c050:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003c060:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003c070:·6170·7365·2220·6964·3d22·6964·6d38·3031··apse"·id="idm801 | |||
| 0003c080:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003c090:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003c0a0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003c0b0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003c0c0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003c0d0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003c0e0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c0f0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003c100:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003c110:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003c120:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003c130:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003c140:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003c150:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003c160:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003c170:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003c180:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003c190:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003c1a0:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003c1b0:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003c1c0:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003c1d0:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003c1e0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003c1f0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003c200:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003c210:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003c220:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003c230:·2369·646d·3830·3133·2220·7461·6269·6e64··#idm8013"·tabind | |||
| 0003c240:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003c250:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003c260:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003c270:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003c280:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003c290:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003c2a0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003c2b0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c2c0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c2d0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c2e0:·6964·6d38·3031·3322·3e3c·7461·626c·6520··idm8013"><table· | |||
| 0003c2f0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003c300:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003c310:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003c320:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003c330:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003c340:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003c350:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003c360:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003c370:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003c380:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003c390:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003c3a0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003c3b0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003c3c0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003c3d0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003c3e0:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 0003c3f0:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 0003c400:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 0003c410:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 0003c420:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 0003c430:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003c440:·202d·2044·4953·412d·5354·4947·2d52·4845···-·DISA-STIG-RHE | |||
| 0003c450:·4c2d·3038·2d30·3130·3335·390a·2020·2d20··L-08-010359.··-· | |||
| 0003c460:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003c470:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003c480:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003c490:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003c4a0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003c4b0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003c4c0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003c4d0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003c4e0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003c4f0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003c500:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003c510:·655f·696e·7374·616c·6c65·640a·0a2d·206e··e_installed..-·n | |||
| 0003c520:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003c530:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003c540:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003c550:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003c560:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003c570:·6e3a·2027·226b·6572·6e65·6c22·2069·6e20··n:·'"kernel"·in· | |||
| 0003c580:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003c590:·636b·6167·6573·270a·2020·7461·6773·3a0a··ckages'.··tags:. | |||
| 0003c5a0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003c5b0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003c5c0:·5248·454c·2d30·382d·3031·3033·3539·0a20··RHEL-08-010359.· | |||
| 0003c5d0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003c5e0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003c5f0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003c600:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003c610:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003c620:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003c630:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003c640:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003c650:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003c660:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003c670:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003c680:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003c690:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c6a0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c6b0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c6c0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c6d0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c6e0:·2223·6964·6d38·3031·3422·2074·6162·696e··"#idm8014"·tabin | |||
| 0003c6f0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c700:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c710:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c720:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c730:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c740:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003c750:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003c760:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003c770:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c780:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c790:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003c7a0:·3134·223e·3c70·7265·3e3c·636f·6465·3e0a··14"><pre><code>. | |||
| Max diff block lines reached; 9928489/9966053 bytes (99.62%) of diff not shown. | |||
| Offset 138, 26 lines modified | Offset 138, 48 lines modified | ||
| 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 142 | ············_\x8c_\x8i_\x8s············5.3.1 | 142 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | include·install_aide | ||
| 151 | class·install_aide·{ | ||
| 152 | ··package·{·'aide': | ||
| 153 | ····ensure·=>·'installed', | ||
| 154 | ··} | ||
| 155 | 150 | dnf·install·aide | |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 156 | package·install·aide | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 167 | if·rpm·--quiet·-q·kernel;·then | ||
| 168 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 169 | ····yum·install·-y·"aide" | ||
| 170 | fi | ||
| 171 | else | ||
| 172 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 173 | fi | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | -·name:·Gather·the·package·facts | 179 | -·name:·Gather·the·package·facts |
| 162 | ··package_facts: | 180 | ··package_facts: |
| Offset 188, 55 lines modified | Offset 210, 33 lines modified | ||
| 188 | ··-·PCI-DSSv4-11.5.2 | 210 | ··-·PCI-DSSv4-11.5.2 |
| 189 | ··-·enable_strategy | 211 | ··-·enable_strategy |
| 190 | ··-·low_complexity | 212 | ··-·low_complexity |
| 191 | ··-·low_disruption | 213 | ··-·low_disruption |
| 192 | ··-·medium_severity | 214 | ··-·medium_severity |
| 193 | ··-·no_reboot_needed | 215 | ··-·no_reboot_needed |
| 194 | ··-·package_aide_installed | 216 | ··-·package_aide_installed |
| 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 196 | [[packages]] | ||
| 197 | name·=·"aide" | ||
| 198 | version·=·"*" | ||
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 204 | dnf·install·aide | ||
| 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 210 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 211 | if·rpm·--quiet·-q·kernel;·then | ||
| 212 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 213 | ····yum·install·-y·"aide" | ||
| 214 | fi | ||
| 215 | else | ||
| 216 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 217 | fi | ||
| 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 217 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 218 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 219 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 220 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 221 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 223 | package·--add=aide | 222 | package·--add=aide |
| 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 228 | include·install_aide | ||
| 229 | 229 | class·install_aide·{ | |
| 230 | ··package·{·'aide': | ||
| 231 | ····ensure·=>·'installed', | ||
| 232 | ··} | ||
| 233 | } | ||
| 230 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 234 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 231 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 235 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 232 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 236 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 233 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 237 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 234 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 238 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 299, 87 lines modified | Offset 299, 107 lines modified | ||
| 299 | $·sudo·yum·install·crypto-policies | 299 | $·sudo·yum·install·crypto-policies |
| 300 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 300 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 301 | Severity: ··medium | 301 | Severity: ··medium |
| 302 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 302 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 303 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 303 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| 304 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 304 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 305 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 305 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 306 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 306 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 307 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 307 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 308 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 308 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 309 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 309 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 310 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 310 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 1318890/1324855 bytes (99.55%) of diff not shown. | |||
| Offset 15402, 408 lines modified | Offset 15402, 408 lines modified | ||
| 0003c290:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003c290:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003c2a0:·6964·6d37·3637·3322·2074·6162·696e·6465··idm7673"·tabinde | 0003c2a0:·6964·6d37·3637·3322·2074·6162·696e·6465··idm7673"·tabinde | ||
| 0003c2b0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003c2b0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003c2c0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003c2c0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003c2d0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003c2d0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003c2e0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003c2e0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003c2f0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003c2f0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003c300:·656d·6564·6961·7469·6f6e·20 | 0003c300:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | ||
| 0003c310:· | 0003c310:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0003c320:·6 | 0003c320:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003c330:· | 0003c330:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003c340:· | 0003c340:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | ||
| 0003c350:· | 0003c350:·3637·3322·3e3c·7072·653e·3c63·6f64·653e··673"><pre><code> | ||
| 0003c360:· | 0003c360:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | ||
| 0003c370:· | 0003c370:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | ||
| 0003c380:· | 0003c380:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | ||
| 0003c390:·6 | 0003c390:·666f·726d·730a·6966·2021·2028·207b·2072··forms.if·!·(·{·r | ||
| 0003c3a0:· | 0003c3a0:·706d·202d·2d71·7569·6574·202d·7120·6b65··pm·--quiet·-q·ke | ||
| 0003c3b0:· | 0003c3b0:·726e·656c·203b·7d20·2661·6d70·3b26·616d··rnel·;}·&&am | ||
| 0003c3c0:· | 0003c3c0:·703b·207b·2072·706d·202d·2d71·7569·6574··p;·{·rpm·--quiet | ||
| 0003c3d0:· | 0003c3d0:·202d·7120·7270·6d2d·6f73·7472·6565·203b···-q·rpm-ostree·; | ||
| 0003c3e0:· | 0003c3e0:·7d20·2661·6d70·3b26·616d·703b·207b·2072··}·&&·{·r | ||
| 0003c3f0:· | 0003c3f0:·706d·202d·2d71·7569·6574·202d·7120·626f··pm·--quiet·-q·bo | ||
| 0003c400:· | 0003c400:·6f74·6320·3b7d·2026·616d·703b·2661·6d70··otc·;}·&& | ||
| 0003c410:· | 0003c410:·3b20·7b20·2120·7270·6d20·2d2d·7175·6965··;·{·!·rpm·--quie | ||
| 0003c420:·74 | 0003c420:·7420·2d71·206f·7065·6e73·6869·6674·2d6b··t·-q·openshift-k | ||
| 0003c430:· | 0003c430:·7562·656c·6574·203b·7d20·293b·2074·6865··ubelet·;}·);·the | ||
| 0003c440:· | 0003c440:·6e0a·0a23·2046·696e·6420·7768·6963·6820··n..#·Find·which· | ||
| 0003c450:· | 0003c450:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | ||
| 0003c460:·7 | 0003c460:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | ||
| 0003c470:· | 0003c470:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | ||
| 0003c480:· | 0003c480:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | ||
| 0003c490:·6 | 0003c490:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | ||
| 0003c4a0:· | 0003c4a0:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | ||
| 0003c4b0:· | 0003c4b0:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | ||
| 0003c4c0:· | 0003c4c0:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003c4d0:· | 0003c4d0:·745f·6861·7368·3d22·2428·7270·6d20·2d56··t_hash="$(rpm·-V | ||
| 0003c4e0:· | 0003c4e0:·6120·2d2d·6e6f·636f·6e66·6967·207c·2067··a·--noconfig·|·g | ||
| 0003c4f0:· | 0003c4f0:·7265·7020·2d45·2027·5e2e·2e35·2720·7c20··rep·-E·'^..5'·|· | ||
| 0003c500:· | 0003c500:·6177·6b20·277b·7072·696e·7420·244e·467d··awk·'{print·$NF} | ||
| 0003c510:·2 | 0003c510:·2720·2922·0a0a·6966·205b·202d·6e20·2224··'·)"..if·[·-n·"$ | ||
| 0003c520:· | 0003c520:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | ||
| 0003c530:· | 0003c530:·7265·6374·5f68·6173·6822·205d·3b20·7468··rect_hash"·];·th | ||
| 0003c540:· | 0003c540:·656e·0a20·2020·2023·2046·726f·6d20·6669··en.····#·From·fi | ||
| 0003c550:· | 0003c550:·6c65·7320·6e61·6d65·7320·6765·7420·7061··les·names·get·pa | ||
| 0003c560:· | 0003c560:·636b·6167·6520·6e61·6d65·7320·616e·6420··ckage·names·and· | ||
| 0003c570:· | 0003c570:·6368·616e·6765·206e·6577·6c69·6e65·2074··change·newline·t | ||
| 0003c580:· | 0003c580:·6f20·7370·6163·652c·2062·6563·6175·7365··o·space,·because | ||
| 0003c590:· | 0003c590:·2072·706d·2077·7269·7465·7320·6561·6368···rpm·writes·each | ||
| 0003c5a0:· | 0003c5a0:·2070·6163·6b61·6765·2074·6f20·6e65·7720···package·to·new· | ||
| 0003c5b0:· | 0003c5b0:·6c69·6e65·0a20·2020·2070·6163·6b61·6765··line.····package | ||
| 0003c5c0:· | 0003c5c0:·735f·746f·5f72·6569·6e73·7461·6c6c·3d22··s_to_reinstall=" | ||
| 0003c5d0:· | 0003c5d0:·2428·7270·6d20·2d71·6620·2466·696c·6573··$(rpm·-qf·$files | ||
| 0003c5e0:· | 0003c5e0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | ||
| 0003c5f0:· | 0003c5f0:·6861·7368·207c·2074·7220·275c·6e27·2027··hash·|·tr·'\n'·' | ||
| 0003c600:·202 | 0003c600:·2027·2922·0a0a·2020·2020·0a20·2020·2079···')"..····.····y | ||
| 0003c610:· | 0003c610:·756d·2072·6569·6e73·7461·6c6c·202d·7920··um·reinstall·-y· | ||
| 0003c620:· | 0003c620:·2470·6163·6b61·6765·735f·746f·5f72·6569··$packages_to_rei | ||
| 0003c630:·6 | 0003c630:·6e73·7461·6c6c·0a20·2020·200a·6669·0a0a··nstall.····.fi.. | ||
| 0003c640:·6 | 0003c640:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | ||
| 0003c650:· | 0003c650:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | ||
| 0003c660:·6 | 0003c660:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | ||
| 0003c670:·6 | 0003c670:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | ||
| 0003c680:· | 0003c680:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | ||
| 0003c690:·6 | 0003c690:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | ||
| 0003c6a0:· | 0003c6a0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | ||
| 0003c6b0:· | 0003c6b0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | ||
| 0003c6c0:· | 0003c6c0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | ||
| 0003c6d0:·6522·206 | 0003c6d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003c6e0:· | 0003c6e0:·2369·646d·3736·3734·2220·7461·6269·6e64··#idm7674"·tabind | ||
| 0003c6f0:· | 0003c6f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003c700:· | 0003c700:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003c710:·6 | 0003c710:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003c720:· | 0003c720:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003c730:·7 | 0003c730:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003c740:· | 0003c740:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003c750:· | 0003c750:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | ||
| 0003c760:· | 0003c760:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003c770:· | 0003c770:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003c780:·6 | 0003c780:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003c790:· | 0003c790:·6964·6d37·3637·3422·3e3c·7461·626c·6520··idm7674"><table· | ||
| 0003c7a0:· | 0003c7a0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003c7b0:· | 0003c7b0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003c7c0:· | 0003c7c0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003c7d0:· | 0003c7d0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003c7e0:· | 0003c7e0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003c7f0:· | 0003c7f0:·7468·3e3c·7464·3e68·6967·683c·2f74·643e··th><td>high</td> | ||
| 0003c800:· | 0003c800:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003c810:· | 0003c810:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003c820:·3 | 0003c820:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | ||
| 0003c830:· | 0003c830:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003c840:· | 0003c840:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003c850:· | 0003c850:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003c860:· | 0003c860:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003c870:· | 0003c870:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | ||
| 0003c880:· | 0003c880:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003c890:· | 0003c890:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | ||
| 0003c8a0:· | 0003c8a0:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | ||
| 0003c8b0:· | 0003c8b0:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | ||
| 0003c8c0:·6 | 0003c8c0:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | ||
| 0003c8d0:·6 | 0003c8d0:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | ||
| 0003c8e0:· | 0003c8e0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | ||
| 0003c8f0:·2 | 0003c8f0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003c900:· | 0003c900:·302d·3137·312d·332e·332e·380a·2020·2d20··0-171-3.3.8.··-· | ||
| 0003c910:· | 0003c910:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | ||
| 0003c920:· | 0003c920:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003c930:· | 0003c930:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | ||
| 0003c940:· | 0003c940:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003c950:· | 0003c950:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | ||
| 0003c960:· | 0003c960:·3533·2d43·4d2d·3628·6429·0a20·202d·204e··53-CM-6(d).··-·N | ||
| 0003c970:· | 0003c970:·4953·542d·3830·302d·3533·2d53·492d·370a··IST-800-53-SI-7. | ||
| 0003c980:· | 0003c980:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c990:· | 0003c990:·5349·2d37·2831·290a·2020·2d20·4e49·5354··SI-7(1).··-·NIST | ||
| 0003c9a0:· | 0003c9a0:·2d38·3030·2d35·332d·5349·2d37·2836·290a··-800-53-SI-7(6). | ||
| 0003c9b0:· | 0003c9b0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | ||
| 0003c9c0:· | 0003c9c0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | ||
| 0003c9d0:· | 0003c9d0:·7634·2d31·312e·352e·320a·2020·2d20·6869··v4-11.5.2.··-·hi | ||
| 0003c9e0:·6 | 0003c9e0:·6768·5f63·6f6d·706c·6578·6974·790a·2020··gh_complexity.·· | ||
| 0003c9f0:·2 | 0003c9f0:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | ||
| 0003ca00:· | 0003ca00:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | ||
| 0003ca10:· | 0003ca10:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | ||
| 0003ca20:·6 | 0003ca20:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | ||
| 0003ca30:·6 | 0003ca30:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | ||
| 0003ca40:· | 0003ca40:·0a20·202d·2072·706d·5f76·6572·6966·795f··.··-·rpm_verify_ | ||
| 0003ca50:· | 0003ca50:·6861·7368·6573·0a0a·2d20·6e61·6d65·3a20··hashes..-·name:· | ||
| 0003ca60:·2 | 0003ca60:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| Max diff block lines reached; 6736700/6791652 bytes (99.19%) of diff not shown. | |||
| Offset 132, 14 lines modified | Offset 132, 33 lines modified | ||
| 132 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 132 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 133 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 133 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 134 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 134 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 141 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 142 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 143 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 144 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 145 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 146 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 147 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 148 | fi | ||
| 149 | else | ||
| 150 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 151 | fi | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 144 | -·name:·Gather·the·package·facts | 157 | -·name:·Gather·the·package·facts |
| 145 | ··package_facts: | 158 | ··package_facts: |
| Offset 306, 33 lines modified | Offset 325, 14 lines modified | ||
| 306 | ··-·PCI-DSSv4-11.5.2 | 325 | ··-·PCI-DSSv4-11.5.2 |
| 307 | ··-·high_complexity | 326 | ··-·high_complexity |
| 308 | ··-·high_severity | 327 | ··-·high_severity |
| 309 | ··-·medium_disruption | 328 | ··-·medium_disruption |
| 310 | ··-·no_reboot_needed | 329 | ··-·no_reboot_needed |
| 311 | ··-·restrict_strategy | 330 | ··-·restrict_strategy |
| 312 | ··-·rpm_verify_hashes | 331 | ··-·rpm_verify_hashes |
| 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 314 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 315 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 316 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 317 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 318 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 319 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 320 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 321 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 322 | fi | ||
| 323 | else | ||
| 324 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 325 | fi | ||
| 326 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 332 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 327 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 333 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 328 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 334 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 329 | run·the·following·command·to·determine·which·package·owns·it: | 335 | run·the·following·command·to·determine·which·package·owns·it: |
| 330 | $·rpm·-qf·FILENAME | 336 | $·rpm·-qf·FILENAME |
| 331 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 337 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 332 | $·sudo·rpm·--restore·PACKAGENAME | 338 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 351, 14 lines modified | Offset 351, 46 lines modified | ||
| 351 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 351 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 352 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 352 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 353 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 353 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 354 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 354 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 355 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 355 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 356 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 356 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 357 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 357 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 363 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 364 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 365 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 366 | declare·-A·SETPERMS_RPM_DICT | ||
| 367 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 368 | #·is·expected·by·the·RPM·database | ||
| 369 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 370 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 371 | do | ||
| 372 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 373 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 374 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 375 | done | ||
| 376 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 377 | #·correct·values | ||
| 378 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 379 | do | ||
| 380 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 381 | done | ||
| 382 | else | ||
| 383 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 384 | fi | ||
| 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 386 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 387 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 388 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 389 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 363 | -·name:·Gather·the·package·facts | 390 | -·name:·Gather·the·package·facts |
| 364 | ··package_facts: | 391 | ··package_facts: |
| Offset 466, 46 lines modified | Offset 498, 14 lines modified | ||
| 466 | ··-·PCI-DSSv4-11.5.2 | 498 | ··-·PCI-DSSv4-11.5.2 |
| 467 | ··-·high_complexity | 499 | ··-·high_complexity |
| 468 | ··-·high_severity | 500 | ··-·high_severity |
| 469 | ··-·medium_disruption | 501 | ··-·medium_disruption |
| 470 | ··-·no_reboot_needed | 502 | ··-·no_reboot_needed |
| 471 | ··-·restrict_strategy | 503 | ··-·restrict_strategy |
| 472 | ··-·rpm_verify_ownership | 504 | ··-·rpm_verify_ownership |
| 473 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 474 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 475 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 476 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 477 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 733428/741139 bytes (98.96%) of diff not shown. | |||
| Offset 15428, 408 lines modified | Offset 15428, 408 lines modified | ||
| 0003c430:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003c430:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003c440:·2223·6964·6d37·3637·3322·2074·6162·696e··"#idm7673"·tabin | 0003c440:·2223·6964·6d37·3637·3322·2074·6162·696e··"#idm7673"·tabin | ||
| 0003c450:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003c450:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003c460:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003c460:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003c470:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003c470:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003c480:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003c480:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003c490:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003c490:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003c4a0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003c4a0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003c4b0:·6 | 0003c4b0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003c4c0:·3 | 0003c4c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003c4d0:· | 0003c4d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003c4e0:· | 0003c4e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003c4f0:· | 0003c4f0:·6d37·3637·3322·3e3c·7072·653e·3c63·6f64··m7673"><pre><cod | ||
| 0003c500:· | 0003c500:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003c510:·6 | 0003c510:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003c520:·6 | 0003c520:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003c530:· | 0003c530:·6174·666f·726d·730a·6966·2021·2028·207b··atforms.if·!·(·{ | ||
| 0003c540:· | 0003c540:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003c550:· | 0003c550:·6b65·726e·656c·203b·7d20·2661·6d70·3b26··kernel·;}·&& | ||
| 0003c560:· | 0003c560:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003c570:·7 | 0003c570:·6574·202d·7120·7270·6d2d·6f73·7472·6565··et·-q·rpm-ostree | ||
| 0003c580:· | 0003c580:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003c590:· | 0003c590:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003c5a0:· | 0003c5a0:·626f·6f74·6320·3b7d·2026·616d·703b·2661··bootc·;}·&&a | ||
| 0003c5b0:· | 0003c5b0:·6d70·3b20·7b20·2120·7270·6d20·2d2d·7175··mp;·{·!·rpm·--qu | ||
| 0003c5c0:· | 0003c5c0:·6965·7420·2d71·206f·7065·6e73·6869·6674··iet·-q·openshift | ||
| 0003c5d0:· | 0003c5d0:·2d6b·7562·656c·6574·203b·7d20·293b·2074··-kubelet·;}·);·t | ||
| 0003c5e0:· | 0003c5e0:·6865·6e0a·0a23·2046·696e·6420·7768·6963··hen..#·Find·whic | ||
| 0003c5f0:·6 | 0003c5f0:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | ||
| 0003c600:· | 0003c600:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | ||
| 0003c610:· | 0003c610:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | ||
| 0003c620:·6 | 0003c620:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | ||
| 0003c630:· | 0003c630:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | ||
| 0003c640:·6 | 0003c640:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | ||
| 0003c650:· | 0003c650:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | ||
| 0003c660:· | 0003c660:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003c670:· | 0003c670:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | ||
| 0003c680:· | 0003c680:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | ||
| 0003c690:·2 | 0003c690:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | ||
| 0003c6a0:· | 0003c6a0:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | ||
| 0003c6b0:· | 0003c6b0:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | ||
| 0003c6c0:·2 | 0003c6c0:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | ||
| 0003c6d0:· | 0003c6d0:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | ||
| 0003c6e0:· | 0003c6e0:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | ||
| 0003c6f0:· | 0003c6f0:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | ||
| 0003c700:· | 0003c700:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | ||
| 0003c710:· | 0003c710:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | ||
| 0003c720:·2 | 0003c720:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | ||
| 0003c730:· | 0003c730:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | ||
| 0003c740:·6 | 0003c740:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | ||
| 0003c750:· | 0003c750:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | ||
| 0003c760:· | 0003c760:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003c770:· | 0003c770:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | ||
| 0003c780:·6 | 0003c780:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003c790:·7 | 0003c790:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | ||
| 0003c7a0:· | 0003c7a0:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | ||
| 0003c7b0:· | 0003c7b0:·2079·756d·2072·6569·6e73·7461·6c6c·202d···yum·reinstall·- | ||
| 0003c7c0:· | 0003c7c0:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | ||
| 0003c7d0:·6 | 0003c7d0:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | ||
| 0003c7e0:· | 0003c7e0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | ||
| 0003c7f0:· | 0003c7f0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | ||
| 0003c800:·6 | 0003c800:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | ||
| 0003c810:· | 0003c810:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | ||
| 0003c820:·6 | 0003c820:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | ||
| 0003c830:· | 0003c830:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003c840:· | 0003c840:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003c850:· | 0003c850:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003c860:· | 0003c860:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003c870:·7 | 0003c870:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003c880:· | 0003c880:·3d22·2369·646d·3736·3734·2220·7461·6269··="#idm7674"·tabi | ||
| 0003c890:· | 0003c890:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003c8a0:· | 0003c8a0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003c8b0:· | 0003c8b0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003c8c0:· | 0003c8c0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003c8d0:· | 0003c8d0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003c8e0:· | 0003c8e0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003c8f0:· | 0003c8f0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003c900:· | 0003c900:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003c910:· | 0003c910:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003c920:· | 0003c920:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003c930:· | 0003c930:·3d22·6964·6d37·3637·3422·3e3c·7461·626c··="idm7674"><tabl | ||
| 0003c940:· | 0003c940:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003c950:· | 0003c950:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003c960:· | 0003c960:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003c970:· | 0003c970:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003c980:·3 | 0003c980:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003c990:· | 0003c990:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003c9a0:· | 0003c9a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003c9b0:· | 0003c9b0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003c9c0:· | 0003c9c0:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003c9d0:· | 0003c9d0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003c9e0:· | 0003c9e0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003c9f0:·3 | 0003c9f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003ca00:· | 0003ca00:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003ca10:· | 0003ca10:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003ca20:· | 0003ca20:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003ca30:· | 0003ca30:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003ca40:·20 | 0003ca40:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003ca50:·6 | 0003ca50:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003ca60:·65 | 0003ca60:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003ca70:· | 0003ca70:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003ca80:·6 | 0003ca80:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003ca90:· | 0003ca90:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003caa0:· | 0003caa0:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003cab0:· | 0003cab0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003cac0:· | 0003cac0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003cad0:· | 0003cad0:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003cae0:·20 | 0003cae0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003caf0:· | 0003caf0:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003cb00:· | 0003cb00:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003cb10:· | 0003cb10:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003cb20:· | 0003cb20:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003cb30:· | 0003cb30:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003cb40:· | 0003cb40:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003cb50:· | 0003cb50:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003cb60:· | 0003cb60:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003cb70:· | 0003cb70:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003cb80:· | 0003cb80:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003cb90:· | 0003cb90:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003cba0:· | 0003cba0:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003cbb0:· | 0003cbb0:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003cbc0:·6 | 0003cbc0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003cbd0:· | 0003cbd0:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003cbe0:· | 0003cbe0:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003cbf0:·7 | 0003cbf0:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| 0003cc00:· | 0003cc00:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| Max diff block lines reached; 17390561/17445513 bytes (99.69%) of diff not shown. | |||
| Offset 138, 14 lines modified | Offset 138, 33 lines modified | ||
| 138 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 138 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 139 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 139 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 140 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 140 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 141 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 141 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 143 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 143 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 144 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 144 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 147 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 148 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 149 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 150 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 151 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 152 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 153 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 154 | fi | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 150 | -·name:·Gather·the·package·facts | 163 | -·name:·Gather·the·package·facts |
| 151 | ··package_facts: | 164 | ··package_facts: |
| Offset 312, 33 lines modified | Offset 331, 14 lines modified | ||
| 312 | ··-·PCI-DSSv4-11.5.2 | 331 | ··-·PCI-DSSv4-11.5.2 |
| 313 | ··-·high_complexity | 332 | ··-·high_complexity |
| 314 | ··-·high_severity | 333 | ··-·high_severity |
| 315 | ··-·medium_disruption | 334 | ··-·medium_disruption |
| 316 | ··-·no_reboot_needed | 335 | ··-·no_reboot_needed |
| 317 | ··-·restrict_strategy | 336 | ··-·restrict_strategy |
| 318 | ··-·rpm_verify_hashes | 337 | ··-·rpm_verify_hashes |
| 319 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 320 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 321 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 322 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 323 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 324 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 325 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 326 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 327 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 328 | fi | ||
| 329 | else | ||
| 330 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 331 | fi | ||
| 332 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 338 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 333 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 339 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 334 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 340 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 335 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 341 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 336 | $·rpm·-qf·FILENAME | 342 | $·rpm·-qf·FILENAME |
| 337 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 343 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 359, 14 lines modified | Offset 359, 50 lines modified | ||
| 359 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 359 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 360 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 360 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 361 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 361 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 362 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 362 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 363 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 363 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 364 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 364 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 365 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 365 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 366 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 367 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 368 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 369 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 370 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 371 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 372 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 373 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 374 | declare·-A·SETPERMS_RPM_DICT | ||
| 375 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 376 | #·is·expected·by·the·RPM·database | ||
| 377 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 378 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 379 | do | ||
| 380 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 381 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 382 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 383 | ········do | ||
| 384 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 385 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 386 | ········done | ||
| 387 | done | ||
| 388 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 389 | #·correct·values | ||
| 390 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 391 | do | ||
| 392 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 393 | done | ||
| 394 | else | ||
| 395 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 396 | fi | ||
| 366 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 397 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 367 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 398 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 368 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 399 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 369 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 400 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 370 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 401 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 371 | -·name:·Gather·the·package·facts | 402 | -·name:·Gather·the·package·facts |
| 372 | ··package_facts: | 403 | ··package_facts: |
| Offset 478, 50 lines modified | Offset 514, 14 lines modified | ||
| 478 | ··-·PCI-DSSv4-11.5.2 | 514 | ··-·PCI-DSSv4-11.5.2 |
| 479 | ··-·high_complexity | 515 | ··-·high_complexity |
| 480 | ··-·high_severity | 516 | ··-·high_severity |
| 481 | ··-·medium_disruption | 517 | ··-·medium_disruption |
| 482 | ··-·no_reboot_needed | 518 | ··-·no_reboot_needed |
| 483 | ··-·restrict_strategy | 519 | ··-·restrict_strategy |
| 484 | ··-·rpm_verify_permissions | 520 | ··-·rpm_verify_permissions |
| 485 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1380139/1388223 bytes (99.42%) of diff not shown. | |||
| Offset 15437, 408 lines modified | Offset 15437, 408 lines modified | ||
| 0003c4c0:·6574·3d22·2369·646d·3736·3733·2220·7461··et="#idm7673"·ta | 0003c4c0:·6574·3d22·2369·646d·3736·3733·2220·7461··et="#idm7673"·ta | ||
| 0003c4d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003c4d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003c4e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003c4e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003c4f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003c4f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003c500:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003c500:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003c510:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003c510:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003c520:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003c520:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003c530:· | 0003c530:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 0003c540:· | 0003c540:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003c550:· | 0003c550:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003c560:· | 0003c560:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003c570:· | 0003c570:·2269·646d·3736·3733·223e·3c70·7265·3e3c··"idm7673"><pre>< | ||
| 0003c580:·6 | 0003c580:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 0003c590:· | 0003c590:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | ||
| 0003c5a0:· | 0003c5a0:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | ||
| 0003c5b0:· | 0003c5b0:·2070·6c61·7466·6f72·6d73·0a69·6620·2120···platforms.if·!· | ||
| 0003c5c0:· | 0003c5c0:·2820·7b20·7270·6d20·2d2d·7175·6965·7420··(·{·rpm·--quiet· | ||
| 0003c5d0:· | 0003c5d0:·2d71·206b·6572·6e65·6c20·3b7d·2026·616d··-q·kernel·;}·&am | ||
| 0003c5e0:· | 0003c5e0:·703b·2661·6d70·3b20·7b20·7270·6d20·2d2d··p;&·{·rpm·-- | ||
| 0003c5f0:· | 0003c5f0:·7175·6965·7420·2d71·2072·706d·2d6f·7374··quiet·-q·rpm-ost | ||
| 0003c600:· | 0003c600:·7265·6520·3b7d·2026·616d·703b·2661·6d70··ree·;}·&& | ||
| 0003c610:·3 | 0003c610:·3b20·7b20·7270·6d20·2d2d·7175·6965·7420··;·{·rpm·--quiet· | ||
| 0003c620:· | 0003c620:·2d71·2062·6f6f·7463·203b·7d20·2661·6d70··-q·bootc·;}·& | ||
| 0003c630:· | 0003c630:·3b26·616d·703b·207b·2021·2072·706d·202d··;&·{·!·rpm·- | ||
| 0003c640:· | 0003c640:·2d71·7569·6574·202d·7120·6f70·656e·7368··-quiet·-q·opensh | ||
| 0003c650:·6 | 0003c650:·6966·742d·6b75·6265·6c65·7420·3b7d·2029··ift-kubelet·;}·) | ||
| 0003c660:· | 0003c660:·3b20·7468·656e·0a0a·2320·4669·6e64·2077··;·then..#·Find·w | ||
| 0003c670:· | 0003c670:·6869·6368·2066·696c·6573·2068·6176·6520··hich·files·have· | ||
| 0003c680:·6 | 0003c680:·696e·636f·7272·6563·7420·6861·7368·2028··incorrect·hash·( | ||
| 0003c690:·6 | 0003c690:·6e6f·7420·696e·202f·6574·632c·2062·6563··not·in·/etc,·bec | ||
| 0003c6a0:·6 | 0003c6a0:·6175·7365·206f·6620·7468·6520·7379·7374··ause·of·the·syst | ||
| 0003c6b0:· | 0003c6b0:·656d·2072·656c·6174·6564·2063·6f6e·6669··em·related·confi | ||
| 0003c6c0:· | 0003c6c0:·6720·6669·6c65·7329·2061·6e64·2074·6865··g·files)·and·the | ||
| 0003c6d0:· | 0003c6d0:·6e20·6765·7420·6669·6c65·7320·6e61·6d65··n·get·files·name | ||
| 0003c6e0:· | 0003c6e0:·730a·6669·6c65·735f·7769·7468·5f69·6e63··s.files_with_inc | ||
| 0003c6f0:· | 0003c6f0:·6f72·7265·6374·5f68·6173·683d·2224·2872··orrect_hash="$(r | ||
| 0003c700:· | 0003c700:·706d·202d·5661·202d·2d6e·6f63·6f6e·6669··pm·-Va·--noconfi | ||
| 0003c710:· | 0003c710:·6720·7c20·6772·6570·202d·4520·275e·2e2e··g·|·grep·-E·'^.. | ||
| 0003c720:· | 0003c720:·3527·207c·2061·776b·2027·7b70·7269·6e74··5'·|·awk·'{print | ||
| 0003c730:· | 0003c730:·2024·4e46·7d27·2029·220a·0a69·6620·5b20···$NF}'·)"..if·[· | ||
| 0003c740:· | 0003c740:·2d6e·2022·2466·696c·6573·5f77·6974·685f··-n·"$files_with_ | ||
| 0003c750:· | 0003c750:·696e·636f·7272·6563·745f·6861·7368·2220··incorrect_hash"· | ||
| 0003c760:· | 0003c760:·5d3b·2074·6865·6e0a·2020·2020·2320·4672··];·then.····#·Fr | ||
| 0003c770:· | 0003c770:·6f6d·2066·696c·6573·206e·616d·6573·2067··om·files·names·g | ||
| 0003c780:· | 0003c780:·6574·2070·6163·6b61·6765·206e·616d·6573··et·package·names | ||
| 0003c790:·2 | 0003c790:·2061·6e64·2063·6861·6e67·6520·6e65·776c···and·change·newl | ||
| 0003c7a0:· | 0003c7a0:·696e·6520·746f·2073·7061·6365·2c20·6265··ine·to·space,·be | ||
| 0003c7b0:· | 0003c7b0:·6361·7573·6520·7270·6d20·7772·6974·6573··cause·rpm·writes | ||
| 0003c7c0:·2 | 0003c7c0:·2065·6163·6820·7061·636b·6167·6520·746f···each·package·to | ||
| 0003c7d0:· | 0003c7d0:·206e·6577·206c·696e·650a·2020·2020·7061···new·line.····pa | ||
| 0003c7e0:·6 | 0003c7e0:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | ||
| 0003c7f0:·6 | 0003c7f0:·616c·6c3d·2224·2872·706d·202d·7166·2024··all="$(rpm·-qf·$ | ||
| 0003c800:· | 0003c800:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | ||
| 0003c810:· | 0003c810:·7265·6374·5f68·6173·6820·7c20·7472·2027··rect_hash·|·tr·' | ||
| 0003c820:· | 0003c820:·5c6e·2720·2720·2729·220a·0a20·2020·200a··\n'·'·')"..····. | ||
| 0003c830:· | 0003c830:·2020·2020·7975·6d20·7265·696e·7374·616c······yum·reinstal | ||
| 0003c840:·6 | 0003c840:·6c20·2d79·2024·7061·636b·6167·6573·5f74··l·-y·$packages_t | ||
| 0003c850:·6 | 0003c850:·6f5f·7265·696e·7374·616c·6c0a·2020·2020··o_reinstall.···· | ||
| 0003c860:· | 0003c860:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | ||
| 0003c870:· | 0003c870:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | ||
| 0003c880:· | 0003c880:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | ||
| 0003c890:·7 | 0003c890:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | ||
| 0003c8a0:· | 0003c8a0:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | ||
| 0003c8b0:· | 0003c8b0:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | ||
| 0003c8c0:· | 0003c8c0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003c8d0:·6 | 0003c8d0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003c8e0:· | 0003c8e0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003c8f0:·6 | 0003c8f0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003c900:·6 | 0003c900:·6765·743d·2223·6964·6d37·3637·3422·2074··get="#idm7674"·t | ||
| 0003c910:· | 0003c910:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003c920:· | 0003c920:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003c930:·7 | 0003c930:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003c940:· | 0003c940:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003c950:·7 | 0003c950:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003c960:· | 0003c960:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003c970:· | 0003c970:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003c980:· | 0003c980:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003c990:·206 | 0003c990:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003c9a0:· | 0003c9a0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003c9b0:· | 0003c9b0:·2069·643d·2269·646d·3736·3734·223e·3c74···id="idm7674"><t | ||
| 0003c9c0:· | 0003c9c0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003c9d0:· | 0003c9d0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003c9e0:· | 0003c9e0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003c9f0:· | 0003c9f0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003ca00:·3 | 0003ca00:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003ca10:· | 0003ca10:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | ||
| 0003ca20:· | 0003ca20:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003ca30:· | 0003ca30:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003ca40:· | 0003ca40:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 0003ca50:· | 0003ca50:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003ca60:· | 0003ca60:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003ca70:· | 0003ca70:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003ca80:· | 0003ca80:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003ca90:· | 0003ca90:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003caa0:·2 | 0003caa0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003cab0:· | 0003cab0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003cac0:· | 0003cac0:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | ||
| 0003cad0:·6 | 0003cad0:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | ||
| 0003cae0:· | 0003cae0:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | ||
| 0003caf0:· | 0003caf0:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | ||
| 0003cb00:·202 | 0003cb00:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 0003cb10:· | 0003cb10:·2d35·2e31·302e·342e·310a·2020·2d20·4e49··-5.10.4.1.··-·NI | ||
| 0003cb20:·5 | 0003cb20:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | ||
| 0003cb30:· | 0003cb30:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003cb40:· | 0003cb40:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | ||
| 0003cb50:· | 0003cb50:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | ||
| 0003cb60:· | 0003cb60:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003cb70:· | 0003cb70:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | ||
| 0003cb80:·2 | 0003cb80:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | ||
| 0003cb90:· | 0003cb90:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003cba0:· | 0003cba0:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | ||
| 0003cbb0:· | 0003cbb0:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | ||
| 0003cbc0:·20 | 0003cbc0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003cbd0:· | 0003cbd0:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | ||
| 0003cbe0:· | 0003cbe0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | ||
| 0003cbf0:· | 0003cbf0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | ||
| 0003cc00:· | 0003cc00:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | ||
| 0003cc10:· | 0003cc10:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | ||
| 0003cc20:· | 0003cc20:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | ||
| 0003cc30:·6 | 0003cc30:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | ||
| 0003cc40:· | 0003cc40:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 0003cc50:·202 | 0003cc50:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 0003cc60:·6 | 0003cc60:·6174·6567·790a·2020·2d20·7270·6d5f·7665··ategy.··-·rpm_ve | ||
| 0003cc70:· | 0003cc70:·7269·6679·5f68·6173·6865·730a·0a2d·206e··rify_hashes..-·n | ||
| 0003cc80:· | 0003cc80:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003cc90:·5 | 0003cc90:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| Max diff block lines reached; 10102667/10157619 bytes (99.46%) of diff not shown. | |||
| Offset 139, 14 lines modified | Offset 139, 33 lines modified | ||
| 139 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 139 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 140 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 140 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 141 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 141 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 142 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 142 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 144 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 144 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 145 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 145 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 148 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 149 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 150 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 151 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 152 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 153 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 154 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 155 | fi | ||
| 156 | else | ||
| 157 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 158 | fi | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 151 | -·name:·Gather·the·package·facts | 164 | -·name:·Gather·the·package·facts |
| 152 | ··package_facts: | 165 | ··package_facts: |
| Offset 313, 33 lines modified | Offset 332, 14 lines modified | ||
| 313 | ··-·PCI-DSSv4-11.5.2 | 332 | ··-·PCI-DSSv4-11.5.2 |
| 314 | ··-·high_complexity | 333 | ··-·high_complexity |
| 315 | ··-·high_severity | 334 | ··-·high_severity |
| 316 | ··-·medium_disruption | 335 | ··-·medium_disruption |
| 317 | ··-·no_reboot_needed | 336 | ··-·no_reboot_needed |
| 318 | ··-·restrict_strategy | 337 | ··-·restrict_strategy |
| 319 | ··-·rpm_verify_hashes | 338 | ··-·rpm_verify_hashes |
| 320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 321 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 322 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 323 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 324 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 325 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 326 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 327 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 328 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 329 | fi | ||
| 330 | else | ||
| 331 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 332 | fi | ||
| 333 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 339 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 334 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 340 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 335 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 341 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 336 | run·the·following·command·to·determine·which·package·owns·it: | 342 | run·the·following·command·to·determine·which·package·owns·it: |
| 337 | $·rpm·-qf·FILENAME | 343 | $·rpm·-qf·FILENAME |
| 338 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 344 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 339 | $·sudo·rpm·--restore·PACKAGENAME | 345 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 358, 14 lines modified | Offset 358, 46 lines modified | ||
| 358 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 358 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 359 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 359 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 360 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 360 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 361 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 361 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 362 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 362 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 363 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 363 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 364 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 364 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 370 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 371 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 372 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 373 | declare·-A·SETPERMS_RPM_DICT | ||
| 374 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 375 | #·is·expected·by·the·RPM·database | ||
| 376 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 377 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 378 | do | ||
| 379 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 380 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 381 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 382 | done | ||
| 383 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 384 | #·correct·values | ||
| 385 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 386 | do | ||
| 387 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 388 | done | ||
| 389 | else | ||
| 390 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 391 | fi | ||
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 392 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 393 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 394 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 395 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 396 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 370 | -·name:·Gather·the·package·facts | 397 | -·name:·Gather·the·package·facts |
| 371 | ··package_facts: | 398 | ··package_facts: |
| Offset 473, 46 lines modified | Offset 505, 14 lines modified | ||
| 473 | ··-·PCI-DSSv4-11.5.2 | 505 | ··-·PCI-DSSv4-11.5.2 |
| 474 | ··-·high_complexity | 506 | ··-·high_complexity |
| 475 | ··-·high_severity | 507 | ··-·high_severity |
| 476 | ··-·medium_disruption | 508 | ··-·medium_disruption |
| 477 | ··-·no_reboot_needed | 509 | ··-·no_reboot_needed |
| 478 | ··-·restrict_strategy | 510 | ··-·restrict_strategy |
| 479 | ··-·rpm_verify_ownership | 511 | ··-·rpm_verify_ownership |
| 480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 481 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 482 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 483 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 484 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1083120/1090831 bytes (99.29%) of diff not shown. | |||
| Offset 15330, 283 lines modified | Offset 15330, 283 lines modified | ||
| 0003be10:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003be10:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003be20:·6964·6d38·3031·3222·2074·6162·696e·6465··idm8012"·tabinde | 0003be20:·6964·6d38·3031·3222·2074·6162·696e·6465··idm8012"·tabinde | ||
| 0003be30:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003be30:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003be40:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003be40:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003be50:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003be50:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003be60:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003be60:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003be70:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003be70:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003be80:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003be90:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003bea0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003beb0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003bec0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003bed0:·6d38·3031·3222·3e3c·7461·626c·6520·636c··m8012"><table·cl | |||
| 0003bee0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003bef0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003bf00:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003bf10:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003bf20:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003bf30:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003bf40:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003bf50:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003bf60:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003bf70:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003bf80:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003bf90:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003bfa0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003bfb0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003bfc0:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003bfd0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003bfe0:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003bff0:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003c000:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003c010:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003c020:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003c030:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003c040:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003c050:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003c060:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003c070:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003c080:·6574·3d22·2369·646d·3830·3133·2220·7461··et="#idm8013"·ta | |||
| 0003c090:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003c0a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003c0b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003c0c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003c0d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003c0e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003c0f0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003c100:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c110:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c120:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003c130:·6964·3d22·6964·6d38·3031·3322·3e3c·7461··id="idm8013"><ta | |||
| 0003c140:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003c150:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003c160:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003c170:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003c180:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003c190:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003c1a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c1b0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003c1c0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c1d0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003c1e0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003c1f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c200:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003c210:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003c220:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003c230:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003c240:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003c250:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003c260:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003c270:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003c280:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003c290:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003c2a0:·2d52·4845·4c2d·3038·2d30·3130·3335·390a··-RHEL-08-010359. | |||
| 0003c2b0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003c2c0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003c2d0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003c2e0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003c2f0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003c300:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003c310:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003c320:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003c330:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003c340:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003c350:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003c360:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003c370:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003c380:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003c390:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003c3a0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003c3b0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003c3c0:·2077·6865·6e3a·2027·226b·6572·6e65·6c22···when:·'"kernel" | |||
| 0003c3d0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003c3e0:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 0003c3f0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003c400:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003c410:·5449·472d·5248·454c·2d30·382d·3031·3033··TIG-RHEL-08-0103 | |||
| 0003c420:·3539·0a20·202d·204e·4953·542d·3830·302d··59.··-·NIST-800- | |||
| 0003c430:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003c440:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003c450:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003c460:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003c470:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003c480:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003c490:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003c4a0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003c4b0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003c4c0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003c4d0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003c4e0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003c4f0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003c500:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003c510:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003c520:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003c530:·6765·743d·2223·6964·6d38·3031·3422·2074··get="#idm8014"·t | |||
| 0003c540:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003c550:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003c560:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003c570:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003c580:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003c590:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003c5a0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003c5b0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003c5c0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c5d0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c5e0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003c5f0:·646d·3830·3134·223e·3c70·7265·3e3c·636f··dm8014"><pre><co | |||
| Max diff block lines reached; 9931525/9969227 bytes (99.62%) of diff not shown. | |||
| Offset 130, 26 lines modified | Offset 130, 48 lines modified | ||
| 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 134 | ············_\x8c_\x8i_\x8s············5.3.1 | 134 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 142 | include·install_aide | ||
| 143 | class·install_aide·{ | ||
| 144 | ··package·{·'aide': | ||
| 145 | ····ensure·=>·'installed', | ||
| 146 | ··} | ||
| 147 | 142 | dnf·install·aide | |
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | package·install·aide | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | [[packages]] | ||
| 151 | name·=·"aide" | ||
| 152 | version·=·"*" | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 159 | if·rpm·--quiet·-q·kernel;·then | ||
| 160 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 161 | ····yum·install·-y·"aide" | ||
| 162 | fi | ||
| 163 | else | ||
| 164 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 165 | fi | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | -·name:·Gather·the·package·facts | 171 | -·name:·Gather·the·package·facts |
| 154 | ··package_facts: | 172 | ··package_facts: |
| Offset 180, 55 lines modified | Offset 202, 33 lines modified | ||
| 180 | ··-·PCI-DSSv4-11.5.2 | 202 | ··-·PCI-DSSv4-11.5.2 |
| 181 | ··-·enable_strategy | 203 | ··-·enable_strategy |
| 182 | ··-·low_complexity | 204 | ··-·low_complexity |
| 183 | ··-·low_disruption | 205 | ··-·low_disruption |
| 184 | ··-·medium_severity | 206 | ··-·medium_severity |
| 185 | ··-·no_reboot_needed | 207 | ··-·no_reboot_needed |
| 186 | ··-·package_aide_installed | 208 | ··-·package_aide_installed |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | [[packages]] | ||
| 189 | name·=·"aide" | ||
| 190 | version·=·"*" | ||
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 196 | dnf·install·aide | ||
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 202 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 203 | if·rpm·--quiet·-q·kernel;·then | ||
| 204 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 205 | ····yum·install·-y·"aide" | ||
| 206 | fi | ||
| 207 | else | ||
| 208 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 209 | fi | ||
| 210 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 211 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 212 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 213 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 214 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 215 | package·--add=aide | 214 | package·--add=aide |
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 217 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 218 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 219 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 220 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 220 | include·install_aide | ||
| 221 | 221 | class·install_aide·{ | |
| 222 | ··package·{·'aide': | ||
| 223 | ····ensure·=>·'installed', | ||
| 224 | ··} | ||
| 225 | } | ||
| 222 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 226 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 223 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 227 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 224 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 228 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 225 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 229 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 226 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 230 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 291, 87 lines modified | Offset 291, 107 lines modified | ||
| 291 | $·sudo·yum·install·crypto-policies | 291 | $·sudo·yum·install·crypto-policies |
| 292 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 292 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 293 | Severity: ··medium | 293 | Severity: ··medium |
| 294 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 294 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 295 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 295 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| 296 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 296 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 297 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 297 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 299 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 299 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 300 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 300 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 301 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 301 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 302 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 302 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 1318907/1324872 bytes (99.55%) of diff not shown. | |||
| Offset 15429, 408 lines modified | Offset 15429, 408 lines modified | ||
| 0003c440:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003c440:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003c450:·646d·3736·3733·2220·7461·6269·6e64·6578··dm7673"·tabindex | 0003c450:·646d·3736·3733·2220·7461·6269·6e64·6578··dm7673"·tabindex | ||
| 0003c460:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003c460:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003c470:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003c470:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003c480:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003c480:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003c490:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003c490:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003c4a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003c4a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003c4b0:·6d65·6469·6174·696f·6e20· | 0003c4b0:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | ||
| 0003c4c0:· | 0003c4c0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 0003c4d0:· | 0003c4d0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003c4e0:· | 0003c4e0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003c4f0:·6 | 0003c4f0:·6c61·7073·6522·2069·643d·2269·646d·3736··lapse"·id="idm76 | ||
| 0003c500:· | 0003c500:·3733·223e·3c70·7265·3e3c·636f·6465·3e23··73"><pre><code># | ||
| 0003c510:· | 0003c510:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | ||
| 0003c520:· | 0003c520:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | ||
| 0003c530:·6 | 0003c530:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | ||
| 0003c540:·6 | 0003c540:·6f72·6d73·0a69·6620·2120·2820·7b20·7270··orms.if·!·(·{·rp | ||
| 0003c550:· | 0003c550:·6d20·2d2d·7175·6965·7420·2d71·206b·6572··m·--quiet·-q·ker | ||
| 0003c560:· | 0003c560:·6e65·6c20·3b7d·2026·616d·703b·2661·6d70··nel·;}·&& | ||
| 0003c570:· | 0003c570:·3b20·7b20·7270·6d20·2d2d·7175·6965·7420··;·{·rpm·--quiet· | ||
| 0003c580:· | 0003c580:·2d71·2072·706d·2d6f·7374·7265·6520·3b7d··-q·rpm-ostree·;} | ||
| 0003c590:· | 0003c590:·2026·616d·703b·2661·6d70·3b20·7b20·7270···&&·{·rp | ||
| 0003c5a0:· | 0003c5a0:·6d20·2d2d·7175·6965·7420·2d71·2062·6f6f··m·--quiet·-q·boo | ||
| 0003c5b0:·746 | 0003c5b0:·7463·203b·7d20·2661·6d70·3b26·616d·703b··tc·;}·&& | ||
| 0003c5c0:· | 0003c5c0:·207b·2021·2072·706d·202d·2d71·7569·6574···{·!·rpm·--quiet | ||
| 0003c5d0:· | 0003c5d0:·202d·7120·6f70·656e·7368·6966·742d·6b75···-q·openshift-ku | ||
| 0003c5e0:· | 0003c5e0:·6265·6c65·7420·3b7d·2029·3b20·7468·656e··belet·;}·);·then | ||
| 0003c5f0:· | 0003c5f0:·0a0a·2320·4669·6e64·2077·6869·6368·2066··..#·Find·which·f | ||
| 0003c600:·6 | 0003c600:·696c·6573·2068·6176·6520·696e·636f·7272··iles·have·incorr | ||
| 0003c610:·6 | 0003c610:·6563·7420·6861·7368·2028·6e6f·7420·696e··ect·hash·(not·in | ||
| 0003c620:· | 0003c620:·202f·6574·632c·2062·6563·6175·7365·206f···/etc,·because·o | ||
| 0003c630:·66 | 0003c630:·6620·7468·6520·7379·7374·656d·2072·656c··f·the·system·rel | ||
| 0003c640:·6 | 0003c640:·6174·6564·2063·6f6e·6669·6720·6669·6c65··ated·config·file | ||
| 0003c650:· | 0003c650:·7329·2061·6e64·2074·6865·6e20·6765·7420··s)·and·then·get· | ||
| 0003c660:· | 0003c660:·6669·6c65·7320·6e61·6d65·730a·6669·6c65··files·names.file | ||
| 0003c670:· | 0003c670:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003c680:·5 | 0003c680:·5f68·6173·683d·2224·2872·706d·202d·5661··_hash="$(rpm·-Va | ||
| 0003c690:· | 0003c690:·202d·2d6e·6f63·6f6e·6669·6720·7c20·6772···--noconfig·|·gr | ||
| 0003c6a0:· | 0003c6a0:·6570·202d·4520·275e·2e2e·3527·207c·2061··ep·-E·'^..5'·|·a | ||
| 0003c6b0:· | 0003c6b0:·776b·2027·7b70·7269·6e74·2024·4e46·7d27··wk·'{print·$NF}' | ||
| 0003c6c0:· | 0003c6c0:·2029·220a·0a69·6620·5b20·2d6e·2022·2466···)"..if·[·-n·"$f | ||
| 0003c6d0:· | 0003c6d0:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003c6e0:· | 0003c6e0:·6563·745f·6861·7368·2220·5d3b·2074·6865··ect_hash"·];·the | ||
| 0003c6f0:· | 0003c6f0:·6e0a·2020·2020·2320·4672·6f6d·2066·696c··n.····#·From·fil | ||
| 0003c700:· | 0003c700:·6573·206e·616d·6573·2067·6574·2070·6163··es·names·get·pac | ||
| 0003c710:· | 0003c710:·6b61·6765·206e·616d·6573·2061·6e64·2063··kage·names·and·c | ||
| 0003c720:· | 0003c720:·6861·6e67·6520·6e65·776c·696e·6520·746f··hange·newline·to | ||
| 0003c730:·2 | 0003c730:·2073·7061·6365·2c20·6265·6361·7573·6520···space,·because· | ||
| 0003c740:· | 0003c740:·7270·6d20·7772·6974·6573·2065·6163·6820··rpm·writes·each· | ||
| 0003c750:· | 0003c750:·7061·636b·6167·6520·746f·206e·6577·206c··package·to·new·l | ||
| 0003c760:·6 | 0003c760:·696e·650a·2020·2020·7061·636b·6167·6573··ine.····packages | ||
| 0003c770:· | 0003c770:·5f74·6f5f·7265·696e·7374·616c·6c3d·2224··_to_reinstall="$ | ||
| 0003c780:· | 0003c780:·2872·706d·202d·7166·2024·6669·6c65·735f··(rpm·-qf·$files_ | ||
| 0003c790:·7 | 0003c790:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003c7a0:· | 0003c7a0:·6173·6820·7c20·7472·2027·5c6e·2720·2720··ash·|·tr·'\n'·'· | ||
| 0003c7b0:·2 | 0003c7b0:·2729·220a·0a20·2020·200a·2020·2020·7975··')"..····.····yu | ||
| 0003c7c0:· | 0003c7c0:·6d20·7265·696e·7374·616c·6c20·2d79·2024··m·reinstall·-y·$ | ||
| 0003c7d0:· | 0003c7d0:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | ||
| 0003c7e0:· | 0003c7e0:·7374·616c·6c0a·2020·2020·0a66·690a·0a65··stall.····.fi..e | ||
| 0003c7f0:·6c | 0003c7f0:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | ||
| 0003c800:· | 0003c800:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | ||
| 0003c810:· | 0003c810:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | ||
| 0003c820:· | 0003c820:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | ||
| 0003c830:· | 0003c830:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | ||
| 0003c840:·6 | 0003c840:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0003c850:· | 0003c850:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003c860:·6 | 0003c860:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003c870:· | 0003c870:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0003c880:·2220·6 | 0003c880:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003c890:· | 0003c890:·6964·6d37·3637·3422·2074·6162·696e·6465··idm7674"·tabinde | ||
| 0003c8a0:· | 0003c8a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003c8b0:·6 | 0003c8b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003c8c0:·6 | 0003c8c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003c8d0:· | 0003c8d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003c8e0:· | 0003c8e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003c8f0:· | 0003c8f0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003c900:· | 0003c900:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003c910:· | 0003c910:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003c920:· | 0003c920:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003c930:· | 0003c930:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003c940:· | 0003c940:·646d·3736·3734·223e·3c74·6162·6c65·2063··dm7674"><table·c | ||
| 0003c950:· | 0003c950:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003c960:· | 0003c960:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003c970:· | 0003c970:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003c980:· | 0003c980:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003c990:· | 0003c990:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003c9a0:· | 0003c9a0:·683e·3c74·643e·6869·6768·3c2f·7464·3e3c··h><td>high</td>< | ||
| 0003c9b0:·2 | 0003c9b0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003c9c0:· | 0003c9c0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003c9d0:· | 0003c9d0:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | ||
| 0003c9e0:· | 0003c9e0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003c9f0:·2 | 0003c9f0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003ca00:· | 0003ca00:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003ca10:· | 0003ca10:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003ca20:·3 | 0003ca20:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003ca30:· | 0003ca30:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003ca40:· | 0003ca40:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | ||
| 0003ca50:· | 0003ca50:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | ||
| 0003ca60:· | 0003ca60:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | ||
| 0003ca70:· | 0003ca70:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | ||
| 0003ca80:· | 0003ca80:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | ||
| 0003ca90:· | 0003ca90:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | ||
| 0003caa0:· | 0003caa0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003cab0:· | 0003cab0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | ||
| 0003cac0:· | 0003cac0:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | ||
| 0003cad0:· | 0003cad0:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | ||
| 0003cae0:· | 0003cae0:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | ||
| 0003caf0:· | 0003caf0:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | ||
| 0003cb00:·2 | 0003cb00:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003cb10:· | 0003cb10:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | ||
| 0003cb20:· | 0003cb20:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | ||
| 0003cb30:· | 0003cb30:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003cb40:· | 0003cb40:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | ||
| 0003cb50:· | 0003cb50:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | ||
| 0003cb60:· | 0003cb60:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | ||
| 0003cb70:· | 0003cb70:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | ||
| 0003cb80:· | 0003cb80:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | ||
| 0003cb90:·6 | 0003cb90:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | ||
| 0003cba0:· | 0003cba0:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | ||
| 0003cbb0:·202 | 0003cbb0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | ||
| 0003cbc0:· | 0003cbc0:·7469·6f6e·0a20·202d·206e·6f5f·7265·626f··tion.··-·no_rebo | ||
| 0003cbd0:·6 | 0003cbd0:·6f74·5f6e·6565·6465·640a·2020·2d20·7265··ot_needed.··-·re | ||
| 0003cbe0:·73 | 0003cbe0:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | ||
| 0003cbf0:· | 0003cbf0:·2020·2d20·7270·6d5f·7665·7269·6679·5f68····-·rpm_verify_h | ||
| 0003cc00:· | 0003cc00:·6173·6865·730a·0a2d·206e·616d·653a·2027··ashes..-·name:·' | ||
| 0003cc10:· | 0003cc10:·5365·7420·6661·6374·3a20·5061·636b·6167··Set·fact:·Packag | ||
| Max diff block lines reached; 17700358/17755310 bytes (99.69%) of diff not shown. | |||
| Offset 15363, 282 lines modified | Offset 15363, 282 lines modified | ||
| 0003c020:·6172·6765·743d·2223·6964·6d38·3031·3222··arget="#idm8012" | 0003c020:·6172·6765·743d·2223·6964·6d38·3031·3222··arget="#idm8012" | ||
| 0003c030:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003c030:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003c040:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003c040:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003c050:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003c050:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003c060:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003c060:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003c070:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003c070:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003c080:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003c080:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003c090:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003c0a0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003c0b0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003c0c0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003c0d0:·2220·6964·3d22·6964·6d38·3031·3222·3e3c··"·id="idm8012">< | |||
| 0003c0e0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003c0f0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003c100:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003c110:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003c120:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003c130:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003c140:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c150:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003c160:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c170:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003c180:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003c190:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c1a0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003c1b0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003c1c0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003c1d0:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003c1e0:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003c1f0:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003c200:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003c210:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003c220:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003c230:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003c240:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003c250:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003c260:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003c270:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003c280:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003c290:·3830·3133·2220·7461·6269·6e64·6578·3d22··8013"·tabindex=" | |||
| 0003c2a0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003c2b0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003c2c0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003c2d0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003c2e0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003c2f0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003c300:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003c310:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c320:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003c330:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003c340:·3031·3322·3e3c·7461·626c·6520·636c·6173··013"><table·clas | |||
| 0003c350:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003c360:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003c370:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003c380:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003c390:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003c3a0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c3b0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003c3c0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003c3d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c3e0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003c3f0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003c400:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003c410:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003c420:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003c430:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003c440:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003c450:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003c460:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003c470:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003c480:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003c490:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003c4a0:·4953·412d·5354·4947·2d52·4845·4c2d·3038··ISA-STIG-RHEL-08 | |||
| 0003c4b0:·2d30·3130·3335·390a·2020·2d20·4e49·5354··-010359.··-·NIST | |||
| 0003c4c0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003c4d0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003c4e0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003c4f0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003c500:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003c510:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003c520:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003c530:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003c540:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003c550:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003c560:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003c570:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003c580:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003c590:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003c5a0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003c5b0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003c5c0:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003c5d0:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003c5e0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003c5f0:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003c600:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003c610:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003c620:·2d30·382d·3031·3033·3539·0a20·202d·204e··-08-010359.··-·N | |||
| 0003c630:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003c640:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003c650:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003c660:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003c670:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003c680:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003c690:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003c6a0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003c6b0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003c6c0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003c6d0:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003c6e0:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003c6f0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003c700:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003c710:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003c720:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003c730:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003c740:·6d38·3031·3422·2074·6162·696e·6465·783d··m8014"·tabindex= | |||
| 0003c750:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003c760:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003c770:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003c780:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003c790:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003c7a0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 0003c7b0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003c7c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003c7d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003c7e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003c7f0:·6522·2069·643d·2269·646d·3830·3134·223e··e"·id="idm8014"> | |||
| 0003c800:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| Max diff block lines reached; 28674666/28712230 bytes (99.87%) of diff not shown. | |||
| Offset 15382, 282 lines modified | Offset 15382, 282 lines modified | ||
| 0003c150:·7461·7267·6574·3d22·2369·646d·3830·3132··target="#idm8012 | 0003c150:·7461·7267·6574·3d22·2369·646d·3830·3132··target="#idm8012 | ||
| 0003c160:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003c160:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003c170:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003c170:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003c180:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003c180:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003c190:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003c190:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003c1a0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003c1a0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003c1b0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003c1b0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003c1c0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003c1d0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003c1e0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003c1f0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003c200:·6522·2069·643d·2269·646d·3830·3132·223e··e"·id="idm8012"> | |||
| 0003c210:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003c220:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003c230:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003c240:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003c250:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003c260:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003c270:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003c280:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003c290:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003c2a0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003c2b0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003c2c0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003c2d0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003c2e0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003c2f0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003c300:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003c310:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003c320:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003c330:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003c340:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003c350:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003c360:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003c370:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003c380:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003c390:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003c3a0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003c3b0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003c3c0:·6d38·3031·3322·2074·6162·696e·6465·783d··m8013"·tabindex= | |||
| 0003c3d0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003c3e0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003c3f0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003c400:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003c410:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003c420:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003c430:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003c440:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c450:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003c460:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c470:·3830·3133·223e·3c74·6162·6c65·2063·6c61··8013"><table·cla | |||
| 0003c480:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003c490:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003c4a0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003c4b0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003c4c0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003c4d0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c4e0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003c4f0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003c500:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c510:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003c520:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003c530:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003c540:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003c550:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003c560:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003c570:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003c580:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003c590:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003c5a0:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003c5b0:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | |||
| 0003c5c0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003c5d0:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003c5e0:·382d·3031·3033·3539·0a20·202d·204e·4953··8-010359.··-·NIS | |||
| 0003c5f0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003c600:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003c610:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003c620:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003c630:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003c640:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003c650:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003c660:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003c670:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003c680:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003c690:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003c6a0:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003c6b0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003c6c0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003c6d0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003c6e0:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003c6f0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003c700:·2722·6b65·726e·656c·2220·696e·2061·6e73··'"kernel"·in·ans | |||
| 0003c710:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003c720:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | |||
| 0003c730:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003c740:·202d·2044·4953·412d·5354·4947·2d52·4845···-·DISA-STIG-RHE | |||
| 0003c750:·4c2d·3038·2d30·3130·3335·390a·2020·2d20··L-08-010359.··-· | |||
| 0003c760:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003c770:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003c780:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003c790:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003c7a0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003c7b0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003c7c0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003c7d0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003c7e0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003c7f0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003c800:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003c810:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003c820:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003c830:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003c840:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003c850:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003c860:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003c870:·646d·3830·3134·2220·7461·6269·6e64·6578··dm8014"·tabindex | |||
| 0003c880:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003c890:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003c8a0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003c8b0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003c8c0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003c8d0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003c8e0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003c8f0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003c900:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c910:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c920:·7365·2220·6964·3d22·6964·6d38·3031·3422··se"·id="idm8014" | |||
| 0003c930:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| Max diff block lines reached; 28519818/28557382 bytes (99.87%) of diff not shown. | |||
| Offset 15178, 279 lines modified | Offset 15178, 279 lines modified | ||
| 0003b490:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b490:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b4a0:·3d22·2369·646d·3733·3331·2220·7461·6269··="#idm7331"·tabi | 0003b4a0:·3d22·2369·646d·3733·3331·2220·7461·6269··="#idm7331"·tabi | ||
| 0003b4b0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b4b0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b4c0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b4c0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b4d0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b4d0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b4e0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b4e0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b4f0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b4f0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b500:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b500:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | ||
| 0003b510:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b520:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b530:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b540:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b550:·2269·646d·3733·3331·223e·3c74·6162·6c65··"idm7331"><table | |||
| 0003b560:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b570:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b580:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b590:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b5a0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b5b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b5c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b5d0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b5e0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b5f0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b600:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b610:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b620:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b630:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b640:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b650:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003b660:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003b670:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003b680:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b690:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003b6a0:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003b6b0:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003b6c0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b6d0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b6e0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b6f0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b700:·6172·6765·743d·2223·6964·6d37·3333·3222··arget="#idm7332" | |||
| 0003b710:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b720:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b730:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b740:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b750:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b760:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b770:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b | 0003b510:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0003b | 0003b520:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b | 0003b530:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b | 0003b540:·7073·6522·2069·643d·2269·646d·3733·3331··pse"·id="idm7331 | ||
| 0003b | 0003b550:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003b | 0003b560:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003b7 | 0003b570:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b | 0003b580:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003b | 0003b590:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003b | 0003b5a0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b | 0003b5b0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b | 0003b5c0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b | 0003b5d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b5e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b | 0003b5f0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b | 0003b600:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b | 0003b610:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b | 0003b620:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | ||
| 0003b | 0003b630:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003b640:·7072·653e·3c63·6f64·653e·0a64·6e66·2069··pre><code>.dnf·i | |||
| 0003b650:·6e73·7461·6c6c·2061·6964·650a·3c2f·636f··nstall·aide.</co | |||
| 0003b8b0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b8c0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b8d0:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b8e0:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b8f0:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b900:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b910:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003b920:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b930:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b940:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b950:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b960:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b970:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b980:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b990:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b9a0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b9b0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b9c0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b9d0:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003b9e0:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b9f0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003ba00:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003ba10:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003ba20:·7365·6e74·0a20·2077·6865·6e3a·2027·226b··sent.··when:·'"k | |||
| 0003ba30:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | |||
| 0003ba40:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003ba50:·270a·2020·7461·6773·3a0a·2020·2d20·434a··'.··tags:.··-·CJ | |||
| 0003ba60:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003ba70:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003ba80:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003ba90:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003baa0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003bab0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003bac0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003bad0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003bae0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003baf0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003bb00:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003bb10:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003bb20:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b | 0003b660:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0003b | 0003b670:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0003b | 0003b680:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0003b | 0003b690:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0003b6a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b6b0:·646d·3733·3332·2220·7461·6269·6e64·6578··dm7332"·tabindex | |||
| 0003b6c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b6d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b6e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b6f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b700:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b710:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | |||
| 0003b720:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b730:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b740:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b750:·2069·643d·2269·646d·3733·3332·223e·3c74···id="idm7332"><t | |||
| 0003b760:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b770:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b780:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| Max diff block lines reached; 21153443/21190593 bytes (99.82%) of diff not shown. | |||
| Offset 15184, 278 lines modified | Offset 15184, 278 lines modified | ||
| 0003b4f0:·6765·743d·2223·6964·6d37·3333·3122·2074··get="#idm7331"·t | 0003b4f0:·6765·743d·2223·6964·6d37·3333·3122·2074··get="#idm7331"·t | ||
| 0003b500:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b500:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b510:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b510:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b520:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b520:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b530:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b530:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b540:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b540:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b550:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b550:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b560:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003b570:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b580:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b590:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b5a0:·6964·3d22·6964·6d37·3333·3122·3e3c·7461··id="idm7331"><ta | |||
| 0003b5b0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b5c0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b5d0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b5e0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b5f0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b600:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b610:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b620:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b630:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b640:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b650:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b660:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b670:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b680:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b690:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b6a0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b6b0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b6c0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b6d0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b6e0:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b6f0:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b700:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003b710:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b720:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b730:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b740:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b750:·612d·7461·7267·6574·3d22·2369·646d·3733··a-target="#idm73 | |||
| 0003b760:·3332·2220·7461·6269·6e64·6578·3d22·3022··32"·tabindex="0" | |||
| 0003b770:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b780:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b790:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b7a0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b7b0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b7c0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b | 0003b560:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0003b | 0003b570:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b | 0003b580:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b | 0003b590:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | ||
| 0003b | 0003b5a0:·3333·3122·3e3c·7461·626c·6520·636c·6173··331"><table·clas | ||
| 0003b | 0003b5b0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b | 0003b5c0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b | 0003b5d0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b | 0003b5e0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b | 0003b5f0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b | 0003b600:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003b610:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b | 0003b620:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003b630:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b640:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b | 0003b650:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b | 0003b660:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b | 0003b670:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003b | 0003b680:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003b90 | 0003b690:·653e·3c70·7265·3e3c·636f·6465·3e0a·646e··e><pre><code>.dn | ||
| 0003b6a0:·6620·696e·7374·616c·6c20·6169·6465·0a3c··f·install·aide.< | |||
| 0003b910:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b920:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b930:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b940:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b950:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b960:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003b970:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b980:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b990:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b9a0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b9b0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b9c0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b9d0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b9e0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b9f0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003ba00:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003ba10:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003ba20:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003ba30:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003ba40:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003ba50:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003ba60:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003ba70:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003ba80:·2722·6b65·726e·656c·2220·696e·2061·6e73··'"kernel"·in·ans | |||
| 0003ba90:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003baa0:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | |||
| 0003bab0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003bac0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003bad0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003bae0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003baf0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003bb00:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003bb10:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003bb20:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003bb30:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003bb40:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003bb50:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003bb60:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003bb70:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b | 0003b6b0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003b | 0003b6c0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003b | 0003b6d0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003b | 0003b6e0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003b | 0003b6f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b | 0003b700:·2223·6964·6d37·3333·3222·2074·6162·696e··"#idm7332"·tabin | ||
| 0003b | 0003b710:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b | 0003b720:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b | 0003b730:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b | 0003b740:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b | 0003b750:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b760:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | |||
| 0003b770:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b780:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b790:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b7a0:·7365·2220·6964·3d22·6964·6d37·3333·3222··se"·id="idm7332" | |||
| 0003b7b0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b7c0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b7d0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b7e0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b7f0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| Max diff block lines reached; 21445850/21482862 bytes (99.83%) of diff not shown. | |||
| Offset 15174, 279 lines modified | Offset 15174, 279 lines modified | ||
| 0003b450:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b450:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b460:·6964·6d37·3333·3122·2074·6162·696e·6465··idm7331"·tabinde | 0003b460:·6964·6d37·3333·3122·2074·6162·696e·6465··idm7331"·tabinde | ||
| 0003b470:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b470:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b480:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b480:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b490:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b490:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b4a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b4a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b4b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b4b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b4c0:·656d·6564·6961·7469·6f6e·20 | 0003b4c0:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | ||
| 0003b4d0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b4e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b4f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b500:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b510:·6d37·3333·3122·3e3c·7461·626c·6520·636c··m7331"><table·cl | |||
| 0003b520:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b530:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b540:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b550:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b560:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b570:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b580:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b590:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b5a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b5b0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b5c0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b5d0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b5e0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b5f0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b600:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b610:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b620:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b630:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b640:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b650:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b660:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b670:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003b680:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b690:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b6a0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b6b0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b6c0:·6574·3d22·2369·646d·3733·3332·2220·7461··et="#idm7332"·ta | |||
| 0003b6d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b6e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b6f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b700:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b710:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b720:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b730:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b74 | 0003b4d0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b | 0003b4e0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b | 0003b4f0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b | 0003b500:·2220·6964·3d22·6964·6d37·3333·3122·3e3c··"·id="idm7331">< | ||
| 0003b | 0003b510:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003b | 0003b520:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003b | 0003b530:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003b | 0003b540:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003b | 0003b550:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003b | 0003b560:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003b | 0003b570:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b580:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003b | 0003b590:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b | 0003b5a0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b | 0003b5b0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b | 0003b5c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b5d0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003b | 0003b5e0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0003b | 0003b5f0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003b600:·3e3c·636f·6465·3e0a·646e·6620·696e·7374··><code>.dnf·inst | |||
| 0003b610:·616c·6c20·6169·6465·0a3c·2f63·6f64·653e··all·aide.</code> | |||
| 0003b870:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b880:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b890:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b8a0:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b8b0:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b8c0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b8d0:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b8e0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b8f0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b900:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b910:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b920:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b930:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b940:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b950:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b960:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b970:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b980:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b990:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b9a0:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b9b0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b9c0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b9d0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b9e0:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003b9f0:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003ba00:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003ba10:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003ba20:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003ba30:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003ba40:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003ba50:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003ba60:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003ba70:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003ba80:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003ba90:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003baa0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003bab0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003bac0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003bad0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003bae0:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003b | 0003b620:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | ||
| 0003b | 0003b630:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | ||
| 0003b | 0003b640:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | ||
| 0003b | 0003b650:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003b | 0003b660:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003b | 0003b670:·3333·3222·2074·6162·696e·6465·783d·2230··332"·tabindex="0 | ||
| 0003b | 0003b680:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b | 0003b690:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b | 0003b6a0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b | 0003b6b0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b | 0003b6c0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b6d0:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 0003b6e0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b6f0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b700:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b710:·3d22·6964·6d37·3333·3222·3e3c·7461·626c··="idm7332"><tabl | |||
| 0003b720:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b730:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b740:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| Max diff block lines reached; 9120434/9157584 bytes (99.59%) of diff not shown. | |||
| Offset 135, 26 lines modified | Offset 135, 48 lines modified | ||
| 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 139 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 139 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 140 | ············_\x8c_\x8i_\x8s············6.1.1 | 140 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | include·install_aide | ||
| 148 | class·install_aide·{ | ||
| 149 | ··package·{·'aide': | ||
| 150 | ····ensure·=>·'installed', | ||
| 151 | ··} | ||
| 152 | 147 | dnf·install·aide | |
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | package·install·aide | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 164 | if·rpm·--quiet·-q·kernel;·then | ||
| 165 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 166 | ····dnf·install·-y·"aide" | ||
| 167 | fi | ||
| 168 | else | ||
| 169 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 170 | fi | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 158 | -·name:·Gather·the·package·facts | 176 | -·name:·Gather·the·package·facts |
| 159 | ··package_facts: | 177 | ··package_facts: |
| Offset 183, 55 lines modified | Offset 205, 33 lines modified | ||
| 183 | ··-·PCI-DSSv4-11.5.2 | 205 | ··-·PCI-DSSv4-11.5.2 |
| 184 | ··-·enable_strategy | 206 | ··-·enable_strategy |
| 185 | ··-·low_complexity | 207 | ··-·low_complexity |
| 186 | ··-·low_disruption | 208 | ··-·low_disruption |
| 187 | ··-·medium_severity | 209 | ··-·medium_severity |
| 188 | ··-·no_reboot_needed | 210 | ··-·no_reboot_needed |
| 189 | ··-·package_aide_installed | 211 | ··-·package_aide_installed |
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 191 | [[packages]] | ||
| 192 | name·=·"aide" | ||
| 193 | version·=·"*" | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 199 | dnf·install·aide | ||
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 205 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 206 | if·rpm·--quiet·-q·kernel;·then | ||
| 207 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 208 | ····dnf·install·-y·"aide" | ||
| 209 | fi | ||
| 210 | else | ||
| 211 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 212 | fi | ||
| 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 218 | package·--add=aide | 217 | package·--add=aide |
| 219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 220 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 221 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 222 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 223 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 223 | include·install_aide | ||
| 224 | 224 | class·install_aide·{ | |
| 225 | ··package·{·'aide': | ||
| 226 | ····ensure·=>·'installed', | ||
| 227 | ··} | ||
| 228 | } | ||
| 225 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 229 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 226 | Run·the·following·command·to·generate·a·new·database: | 230 | Run·the·following·command·to·generate·a·new·database: |
| 227 | $·sudo·/usr/sbin/aide·--init | 231 | $·sudo·/usr/sbin/aide·--init |
| 228 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 232 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 229 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 233 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 230 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 234 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 231 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 235 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 256, 14 lines modified | Offset 256, 28 lines modified | ||
| 256 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 256 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 257 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 257 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 258 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 258 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 259 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 259 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 260 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 260 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 261 | ············_\x8c_\x8i_\x8s············6.1.1 | 261 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 263 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 264 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 265 | if·rpm·--quiet·-q·kernel;·then | ||
| 266 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| Max diff block lines reached; 1052724/1057945 bytes (99.51%) of diff not shown. | |||
| Offset 14855, 295 lines modified | Offset 14855, 295 lines modified | ||
| 0003a060:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003a060:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003a070:·2223·6964·6d31·3035·3432·2220·7461·6269··"#idm10542"·tabi | 0003a070:·2223·6964·6d31·3035·3432·2220·7461·6269··"#idm10542"·tabi | ||
| 0003a080:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003a080:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003a090:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003a090:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003a0a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003a0a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003a0b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003a0b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003a0c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003a0c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003a0d0:·223e·5265·6d65·6469·6174·696f·6e20· | 0003a0d0:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | ||
| 0003a0e0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003a0f0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003a100:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003a110:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003a120:·2269·646d·3130·3534·3222·3e3c·7461·626c··"idm10542"><tabl | |||
| 0003a130:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003a140:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003a150:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003a160:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003a170:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003a180:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003a190:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003a1a0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003a1b0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003a1c0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003a1d0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003a1e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003a1f0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003a200:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003a210:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003a220:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003a230:·6c6c·5f64·6e66·2d61·7574·6f6d·6174·6963··ll_dnf-automatic | |||
| 0003a240:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003a250:·646e·662d·6175·746f·6d61·7469·6320·7b0a··dnf-automatic·{. | |||
| 0003a260:·2020·7061·636b·6167·6520·7b20·2764·6e66····package·{·'dnf | |||
| 0003a270:·2d61·7574·6f6d·6174·6963·273a·0a20·2020··-automatic':.··· | |||
| 0003a280:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003a290:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003a2a0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003a2b0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003a2c0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003a2d0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003a2e0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003a2f0:·743d·2223·6964·6d31·3035·3433·2220·7461··t="#idm10543"·ta | |||
| 0003a300:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003a310:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003a320:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003a330:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003a340:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003a350:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003a360:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003a370:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003a380:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003a390:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003a3a0:·6964·3d22·6964·6d31·3035·3433·223e·3c74··id="idm10543"><t | |||
| 0003a3b0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003a3c0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003a3d0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003a3e0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003a3f0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003a400:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003a410:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003a420:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003a430:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003a440:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003a450:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003a460:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003a470:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003a480:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003a490:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003a4a0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003a4b0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003a4c0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003a4d0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003a4e0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003a4f0:·3a0a·2020·2d20·656e·6162·6c65·5f73·7472··:.··-·enable_str | |||
| 0003a500:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003a510:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003a520:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003a530:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003a540:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003a550:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003a560:·5f64·6e66·2d61·7574·6f6d·6174·6963·5f69··_dnf-automatic_i | |||
| 0003a570:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003a580:·3a20·456e·7375·7265·2064·6e66·2d61·7574··:·Ensure·dnf-aut | |||
| 0003a590:·6f6d·6174·6963·2069·7320·696e·7374·616c··omatic·is·instal | |||
| 0003a5a0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003a5b0:·2020·206e·616d·653a·2064·6e66·2d61·7574·····name:·dnf-aut | |||
| 0003a5c0:·6f6d·6174·6963·0a20·2020·2073·7461·7465··omatic.····state | |||
| 0003a5d0:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003a5e0:·3a20·6e6f·7420·2820·226b·6572·6e65·6c22··:·not·(·"kernel" | |||
| 0003a5f0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003a600:·732e·7061·636b·6167·6573·2061·6e64·2022··s.packages·and·" | |||
| 0003a610:·7270·6d2d·6f73·7472·6565·2220·696e·2061··rpm-ostree"·in·a | |||
| 0003a620:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003a630:·6b61·6765·730a·2020·2020·616e·6420·2262··kages.····and·"b | |||
| 0003a640:·6f6f·7463·2220·696e·2061·6e73·6962·6c65··ootc"·in·ansible | |||
| 0003a650:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | |||
| 0003a660:·616e·6420·6e6f·7420·226f·7065·6e73·6869··and·not·"openshi | |||
| 0003a670:·6674·2d6b·7562·656c·6574·2220·696e·2061··ft-kubelet"·in·a | |||
| 0003a680:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003a690:·6b61·6765·730a·2020·2020·290a·2020·7461··kages.····).··ta | |||
| 0003a6a0:·6773·3a0a·2020·2d20·656e·6162·6c65·5f73··gs:.··-·enable_s | |||
| 0003a6b0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003a6c0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003a6d0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003a6e0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003a6f0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003a700:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003a710:·6765·5f64·6e66·2d61·7574·6f6d·6174·6963··ge_dnf-automatic | |||
| 0003a720:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003a730:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003a740:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003a750:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003a760:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003a770:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003a780:·6d31·3035·3434·2220·7461·6269·6e64·6578··m10544"·tabindex | |||
| 0003a790:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003a7a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003a7b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003a7c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003a7d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003a7e0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003a7f0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003a800:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003a810:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003a820:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003a830:·7365·2220·6964·3d22·6964·6d31·3035·3434··se"·id="idm10544 | |||
| 0003a840:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| Max diff block lines reached; 2813917/2853275 bytes (98.62%) of diff not shown. | |||
| Offset 101, 26 lines modified | Offset 101, 49 lines modified | ||
| 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 102 | ············suitable·for·automatic,·regular·execution. | 102 | ············suitable·for·automatic,·regular·execution. |
| 103 | Severity: ··medium | 103 | Severity: ··medium |
| 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 105 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 105 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 113 | include·install_dnf-automatic | ||
| 113 | dnf·install·dnf-automatic | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 114 | c | 119 | package·install·dnf-automatic |
| 115 | ··package·{·'dnf-automatic': | ||
| 116 | ····ensure·=>·'installed', | ||
| 117 | ··} | ||
| 118 | 120 | _.R_.e_.m_.e_.d_.i_.a_.t_.i_.o_.n_.·_.O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_.t_.·_.s_.n_.i_.p_.p_.e_.t_.·_.⇲ | |
| 121 | [[packages]] | ||
| 122 | name·=·"dnf-automatic" | ||
| 123 | version·=·"*" | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 130 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 131 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 132 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 133 | ····dnf·install·-y·"dnf-automatic" | ||
| 134 | fi | ||
| 135 | else | ||
| 136 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 137 | fi | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 124 | -·name:·Gather·the·package·facts | 143 | -·name:·Gather·the·package·facts |
| 125 | ··package_facts: | 144 | ··package_facts: |
| Offset 144, 56 lines modified | Offset 167, 33 lines modified | ||
| 144 | ··tags: | 167 | ··tags: |
| 145 | ··-·enable_strategy | 168 | ··-·enable_strategy |
| 146 | ··-·low_complexity | 169 | ··-·low_complexity |
| 147 | ··-·low_disruption | 170 | ··-·low_disruption |
| 148 | ··-·medium_severity | 171 | ··-·medium_severity |
| 149 | ··-·no_reboot_needed | 172 | ··-·no_reboot_needed |
| 150 | ··-·package_dnf-automatic_installed | 173 | ··-·package_dnf-automatic_installed |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | [[packages]] | ||
| 153 | name·=·"dnf-automatic" | ||
| 154 | version·=·"*" | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | dnf·install·dnf-automatic | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 167 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 168 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 169 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 170 | ····dnf·install·-y·"dnf-automatic" | ||
| 171 | fi | ||
| 172 | else | ||
| 173 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 174 | fi | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 180 | package·--add=dnf-automatic | 179 | package·--add=dnf-automatic |
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 185 | include·install_dnf-automatic | ||
| 186 | class·install_dnf-automatic·{ | ||
| 186 | package· | 187 | ··package·{·'dnf-automatic': |
| 188 | ····ensure·=>·'installed', | ||
| 189 | ··} | ||
| 190 | } | ||
| 187 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 188 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 192 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 189 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 193 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 190 | automatic.conf. | 194 | automatic.conf. |
| 191 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 195 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 192 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 196 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 193 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 197 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 203, 54 lines modified | Offset 203, 14 lines modified | ||
| 203 | Severity: ··medium | 203 | Severity: ··medium |
| 204 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 204 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 205 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 205 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 206 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 206 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 207 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 207 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 208 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 | 208 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 |
| 209 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 209 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 210 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 211 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 212 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 213 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| Max diff block lines reached; 193214/199659 bytes (96.77%) of diff not shown. | |||
| Offset 15225, 279 lines modified | Offset 15225, 279 lines modified | ||
| 0003b780:·2d74·6172·6765·743d·2223·6964·6d37·3333··-target="#idm733 | 0003b780:·2d74·6172·6765·743d·2223·6964·6d37·3333··-target="#idm733 | ||
| 0003b790:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | 0003b790:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 0003b7a0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b7a0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b7b0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b7b0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b7c0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b7c0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b7d0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b7d0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b7e0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b7e0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b7f0:·7469·6f6e·2073·6372·6970·7420·e287·b23c··tion·script·...< | |||
| 0003b7f0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b800:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b810:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b820:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b830:·7365·2220·6964·3d22·6964·6d37·3333·3122··se"·id="idm7331" | |||
| 0003b840:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b850:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b860:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b870:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b880:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b890:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b8a0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b8b0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b8c0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b8d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b8e0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b8f0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b900:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b910:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b920:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b930:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b940:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b950:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003b960:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b970:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b980:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b990:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003b9a0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b9b0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b9c0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b9d0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b9e0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b9f0:·646d·3733·3332·2220·7461·6269·6e64·6578··dm7332"·tabindex | |||
| 0003ba00:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003ba10:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003ba20:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003ba30:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003ba40:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003ba50:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003ba60:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b | 0003b800:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003b | 0003b810:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003b | 0003b820:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003b | 0003b830:·6964·6d37·3333·3122·3e3c·7461·626c·6520··idm7331"><table· | ||
| 0003b | 0003b840:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003b | 0003b850:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003b | 0003b860:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003b | 0003b870:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003b | 0003b880:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003b | 0003b890:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b8a0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b | 0003b8b0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003b8c0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b | 0003b8d0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b | 0003b8e0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b | 0003b8f0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b | 0003b900:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003b | 0003b910:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003b | 0003b920:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003b930:·3e0a·646e·6620·696e·7374·616c·6c20·6169··>.dnf·install·ai | |||
| 0003bba0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003bbb0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003bbc0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003bbd0:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003bbe0:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003bbf0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003bc00:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003bc10:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003bc20:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003bc30:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003bc40:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003bc50:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003bc60:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003bc70:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003bc80:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003bc90:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003bca0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003bcb0:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003bcc0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003bcd0:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003bce0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003bcf0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003bd00:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003bd10:·656e·3a20·2722·6b65·726e·656c·2220·696e··en:·'"kernel"·in | |||
| 0003bd20:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003bd30:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003bd40:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003bd50:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003bd60:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003bd70:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003bd80:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003bd90:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003bda0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003bdb0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003bdc0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003bdd0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003bde0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003bdf0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003be00:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b | 0003b940:·6465·0a3c·2f63·6f64·653e·3c2f·7072·653e··de.</code></pre> | ||
| 0003b | 0003b950:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003b | 0003b960:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003b | 0003b970:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003b | 0003b980:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003b | 0003b990:·6765·743d·2223·6964·6d37·3333·3222·2074··get="#idm7332"·t | ||
| 0003b | 0003b9a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b | 0003b9b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b | 0003b9c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b | 0003b9d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b | 0003b9e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b9f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003ba00:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003ba10:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ba20:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ba30:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003ba40:·3333·3222·3e3c·7461·626c·6520·636c·6173··332"><table·clas | |||
| 0003ba50:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003ba60:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003ba70:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| Max diff block lines reached; 24156822/24193972 bytes (99.85%) of diff not shown. | |||
| Offset 15187, 278 lines modified | Offset 15187, 278 lines modified | ||
| 0003b520:·6574·3d22·2369·646d·3733·3331·2220·7461··et="#idm7331"·ta | 0003b520:·6574·3d22·2369·646d·3733·3331·2220·7461··et="#idm7331"·ta | ||
| 0003b530:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b530:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b540:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b540:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b550:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b550:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b560:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b560:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b570:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b570:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b580:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b580:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b590:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b5a0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b5b0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b5c0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b5d0:·643d·2269·646d·3733·3331·223e·3c74·6162··d="idm7331"><tab | |||
| 0003b5e0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b5f0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b600:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b610:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b620:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b630:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b640:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b650:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b660:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b670:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b680:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b690:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b6a0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b6b0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b6c0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b6d0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b6e0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b6f0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b700:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b710:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b720:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b730:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003b740:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b750:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b760:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b770:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b780:·2d74·6172·6765·743d·2223·6964·6d37·3333··-target="#idm733 | |||
| 0003b790:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003b7a0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b7b0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b7c0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b7d0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b7e0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b7f0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b | 0003b590:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 0003b | 0003b5a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b | 0003b5b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b | 0003b5c0:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | ||
| 0003b | 0003b5d0:·3331·223e·3c74·6162·6c65·2063·6c61·7373··31"><table·class | ||
| 0003b | 0003b5e0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003b | 0003b5f0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b | 0003b600:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003b | 0003b610:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003b | 0003b620:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003b | 0003b630:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b | 0003b640:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b | 0003b650:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003b | 0003b660:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b670:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b | 0003b680:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003b90 | 0003b690:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003b | 0003b6a0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | ||
| 0003b | 0003b6b0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003b | 0003b6c0:·3e3c·7072·653e·3c63·6f64·653e·0a64·6e66··><pre><code>.dnf | ||
| 0003b6d0:·2069·6e73·7461·6c6c·2061·6964·650a·3c2f···install·aide.</ | |||
| 0003b940:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003b950:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003b960:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003b970:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003b980:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b990:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b9a0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b9b0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b9c0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b9d0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b9e0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b9f0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003ba00:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003ba10:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003ba20:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003ba30:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003ba40:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003ba50:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003ba60:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003ba70:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003ba80:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003ba90:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003baa0:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003bab0:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003bac0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003bad0:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003bae0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003baf0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003bb00:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003bb10:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003bb20:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003bb30:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003bb40:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003bb50:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003bb60:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003bb70:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003bb80:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003bb90:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003bba0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b | 0003b6e0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | ||
| 0003b | 0003b6f0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | ||
| 0003b | 0003b700:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | ||
| 0003b | 0003b710:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | ||
| 0003b | 0003b720:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b | 0003b730:·2369·646d·3733·3332·2220·7461·6269·6e64··#idm7332"·tabind | ||
| 0003b | 0003b740:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b | 0003b750:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b | 0003b760:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b | 0003b770:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b | 0003b780:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b790:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 0003b7a0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b7b0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b7c0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b7d0:·6522·2069·643d·2269·646d·3733·3332·223e··e"·id="idm7332"> | |||
| 0003b7e0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b7f0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b800:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b810:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b820:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| Max diff block lines reached; 11037946/11074958 bytes (99.67%) of diff not shown. | |||
| Offset 120, 26 lines modified | Offset 120, 48 lines modified | ||
| 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.1.1 | 125 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | include·install_aide | ||
| 133 | class·install_aide·{ | ||
| 134 | ··package·{·'aide': | ||
| 135 | ····ensure·=>·'installed', | ||
| 136 | ··} | ||
| 137 | 132 | dnf·install·aide | |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | package·install·aide | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | [[packages]] | ||
| 141 | name·=·"aide" | ||
| 142 | version·=·"*" | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 149 | if·rpm·--quiet·-q·kernel;·then | ||
| 150 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 151 | ····dnf·install·-y·"aide" | ||
| 152 | fi | ||
| 153 | else | ||
| 154 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 155 | fi | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 143 | -·name:·Gather·the·package·facts | 161 | -·name:·Gather·the·package·facts |
| 144 | ··package_facts: | 162 | ··package_facts: |
| Offset 168, 55 lines modified | Offset 190, 33 lines modified | ||
| 168 | ··-·PCI-DSSv4-11.5.2 | 190 | ··-·PCI-DSSv4-11.5.2 |
| 169 | ··-·enable_strategy | 191 | ··-·enable_strategy |
| 170 | ··-·low_complexity | 192 | ··-·low_complexity |
| 171 | ··-·low_disruption | 193 | ··-·low_disruption |
| 172 | ··-·medium_severity | 194 | ··-·medium_severity |
| 173 | ··-·no_reboot_needed | 195 | ··-·no_reboot_needed |
| 174 | ··-·package_aide_installed | 196 | ··-·package_aide_installed |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | [[packages]] | ||
| 177 | name·=·"aide" | ||
| 178 | version·=·"*" | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | dnf·install·aide | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 190 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 191 | if·rpm·--quiet·-q·kernel;·then | ||
| 192 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 193 | ····dnf·install·-y·"aide" | ||
| 194 | fi | ||
| 195 | else | ||
| 196 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 197 | fi | ||
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 203 | package·--add=aide | 202 | package·--add=aide |
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 208 | include·install_aide | ||
| 209 | 209 | class·install_aide·{ | |
| 210 | ··package·{·'aide': | ||
| 211 | ····ensure·=>·'installed', | ||
| 212 | ··} | ||
| 213 | } | ||
| 210 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 214 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 211 | Run·the·following·command·to·generate·a·new·database: | 215 | Run·the·following·command·to·generate·a·new·database: |
| 212 | $·sudo·/usr/sbin/aide·--init | 216 | $·sudo·/usr/sbin/aide·--init |
| 213 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 217 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 214 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 218 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 215 | To·initiate·a·manual·check,·run·the·following·command: | 219 | To·initiate·a·manual·check,·run·the·following·command: |
| 216 | $·sudo·/usr/sbin/aide·--check | 220 | $·sudo·/usr/sbin/aide·--check |
| Offset 234, 14 lines modified | Offset 234, 28 lines modified | ||
| 234 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 234 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 236 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 236 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 238 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 238 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 239 | ············_\x8c_\x8i_\x8s············6.1.1 | 239 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 240 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 240 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 242 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 243 | if·rpm·--quiet·-q·kernel;·then | ||
| 244 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| Max diff block lines reached; 1306350/1311720 bytes (99.59%) of diff not shown. | |||
| Offset 15178, 278 lines modified | Offset 15178, 278 lines modified | ||
| 0003b490:·6765·743d·2223·6964·6d37·3333·3122·2074··get="#idm7331"·t | 0003b490:·6765·743d·2223·6964·6d37·3333·3122·2074··get="#idm7331"·t | ||
| 0003b4a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b4a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b4b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b4b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b4c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b4c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b4d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b4d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b4e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b4e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b4f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b4f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b500:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003b510:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b520:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b530:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b540:·6964·3d22·6964·6d37·3333·3122·3e3c·7461··id="idm7331"><ta | |||
| 0003b550:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b560:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b570:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b580:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b590:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b5a0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b5b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b5c0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b5d0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b5e0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b5f0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b600:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b610:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b620:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b630:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b640:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b650:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b660:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b670:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b680:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b690:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b6a0:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003b6b0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b6c0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b6d0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b6e0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b6f0:·612d·7461·7267·6574·3d22·2369·646d·3733··a-target="#idm73 | |||
| 0003b700:·3332·2220·7461·6269·6e64·6578·3d22·3022··32"·tabindex="0" | |||
| 0003b710:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b720:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b730:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b740:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b750:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b760:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b | 0003b500:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0003b | 0003b510:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b | 0003b520:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b | 0003b530:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | ||
| 0003b | 0003b540:·3333·3122·3e3c·7461·626c·6520·636c·6173··331"><table·clas | ||
| 0003b | 0003b550:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b | 0003b560:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b | 0003b570:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b | 0003b580:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b | 0003b590:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b | 0003b5a0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003b5b0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b | 0003b5c0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003b5d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b5e0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b | 0003b5f0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b | 0003b600:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b | 0003b610:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003b | 0003b620:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003b | 0003b630:·653e·3c70·7265·3e3c·636f·6465·3e0a·646e··e><pre><code>.dn | ||
| 0003b640:·6620·696e·7374·616c·6c20·6169·6465·0a3c··f·install·aide.< | |||
| 0003b8b0:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b8c0:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b8d0:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b8e0:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b8f0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b900:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003b910:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b920:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b930:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b940:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b950:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b960:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b970:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b980:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b990:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b9a0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b9b0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b9c0:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003b9d0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b9e0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b9f0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003ba00:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003ba10:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003ba20:·2722·6b65·726e·656c·2220·696e·2061·6e73··'"kernel"·in·ans | |||
| 0003ba30:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003ba40:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | |||
| 0003ba50:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003ba60:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003ba70:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003ba80:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003ba90:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003baa0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003bab0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003bac0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003bad0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003bae0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003baf0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003bb00:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003bb10:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b | 0003b650:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003b | 0003b660:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003b | 0003b670:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003b | 0003b680:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003b | 0003b690:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b | 0003b6a0:·2223·6964·6d37·3333·3222·2074·6162·696e··"#idm7332"·tabin | ||
| 0003b | 0003b6b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b | 0003b6c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b | 0003b6d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b | 0003b6e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b | 0003b6f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b700:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | |||
| 0003b710:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b720:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b730:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b740:·7365·2220·6964·3d22·6964·6d37·3333·3222··se"·id="idm7332" | |||
| 0003b750:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b760:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b770:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b780:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b790:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| Max diff block lines reached; 10656816/10693828 bytes (99.65%) of diff not shown. | |||
| Offset 118, 26 lines modified | Offset 118, 48 lines modified | ||
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ············_\x8c_\x8i_\x8s············6.1.1 | 123 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | include·install_aide | ||
| 131 | class·install_aide·{ | ||
| 132 | ··package·{·'aide': | ||
| 133 | ····ensure·=>·'installed', | ||
| 134 | ··} | ||
| 135 | 130 | dnf·install·aide | |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | package·install·aide | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | [[packages]] | ||
| 139 | name·=·"aide" | ||
| 140 | version·=·"*" | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 147 | if·rpm·--quiet·-q·kernel;·then | ||
| 148 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 149 | ····dnf·install·-y·"aide" | ||
| 150 | fi | ||
| 151 | else | ||
| 152 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 153 | fi | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 141 | -·name:·Gather·the·package·facts | 159 | -·name:·Gather·the·package·facts |
| 142 | ··package_facts: | 160 | ··package_facts: |
| Offset 166, 55 lines modified | Offset 188, 33 lines modified | ||
| 166 | ··-·PCI-DSSv4-11.5.2 | 188 | ··-·PCI-DSSv4-11.5.2 |
| 167 | ··-·enable_strategy | 189 | ··-·enable_strategy |
| 168 | ··-·low_complexity | 190 | ··-·low_complexity |
| 169 | ··-·low_disruption | 191 | ··-·low_disruption |
| 170 | ··-·medium_severity | 192 | ··-·medium_severity |
| 171 | ··-·no_reboot_needed | 193 | ··-·no_reboot_needed |
| 172 | ··-·package_aide_installed | 194 | ··-·package_aide_installed |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | [[packages]] | ||
| 175 | name·=·"aide" | ||
| 176 | version·=·"*" | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 182 | dnf·install·aide | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 188 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 189 | if·rpm·--quiet·-q·kernel;·then | ||
| 190 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 191 | ····dnf·install·-y·"aide" | ||
| 192 | fi | ||
| 193 | else | ||
| 194 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 195 | fi | ||
| 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 197 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 198 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 199 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 200 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 201 | package·--add=aide | 200 | package·--add=aide |
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 206 | include·install_aide | ||
| 207 | 207 | class·install_aide·{ | |
| 208 | ··package·{·'aide': | ||
| 209 | ····ensure·=>·'installed', | ||
| 210 | ··} | ||
| 211 | } | ||
| 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 212 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 209 | Run·the·following·command·to·generate·a·new·database: | 213 | Run·the·following·command·to·generate·a·new·database: |
| 210 | $·sudo·/usr/sbin/aide·--init | 214 | $·sudo·/usr/sbin/aide·--init |
| 211 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 215 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 212 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 216 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 213 | To·initiate·a·manual·check,·run·the·following·command: | 217 | To·initiate·a·manual·check,·run·the·following·command: |
| 214 | $·sudo·/usr/sbin/aide·--check | 218 | $·sudo·/usr/sbin/aide·--check |
| Offset 232, 14 lines modified | Offset 232, 28 lines modified | ||
| 232 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 232 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 234 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 234 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 235 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 235 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 236 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 236 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 237 | ············_\x8c_\x8i_\x8s············6.1.1 | 237 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 238 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 238 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 240 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 241 | if·rpm·--quiet·-q·kernel;·then | ||
| 242 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| Max diff block lines reached; 1254842/1260212 bytes (99.57%) of diff not shown. | |||
| Offset 15216, 279 lines modified | Offset 15216, 279 lines modified | ||
| 0003b6f0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b6f0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b700:·646d·3733·3331·2220·7461·6269·6e64·6578··dm7331"·tabindex | 0003b700:·646d·3733·3331·2220·7461·6269·6e64·6578··dm7331"·tabindex | ||
| 0003b710:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b710:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b720:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b720:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b730:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b730:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b740:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b740:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b750:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b750:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b760:·6d65·6469·6174·696f·6e20· | 0003b760:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | ||
| 0003b770:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b780:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b790:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b7a0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b7b0:·3733·3331·223e·3c74·6162·6c65·2063·6c61··7331"><table·cla | |||
| 0003b7c0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b7d0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b7e0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b7f0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b800:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b810:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b820:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b830:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b840:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b850:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b860:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b870:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b880:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b890:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b8a0:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b8b0:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b8c0:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b8d0:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b8e0:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b8f0:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b900:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b910:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b920:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b930:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b940:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b950:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b960:·743d·2223·6964·6d37·3333·3222·2074·6162··t="#idm7332"·tab | |||
| 0003b970:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b980:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b990:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b9a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b9b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b9c0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b9d0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b | 0003b770:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b | 0003b780:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b | 0003b790:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003ba | 0003b7a0:·2069·643d·2269·646d·3733·3331·223e·3c74···id="idm7331"><t | ||
| 0003b | 0003b7b0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003b | 0003b7c0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003b | 0003b7d0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b | 0003b7e0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003b | 0003b7f0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003b | 0003b800:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003b | 0003b810:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b820:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b | 0003b830:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b | 0003b840:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b | 0003b850:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b | 0003b860:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b870:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b | 0003b880:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | ||
| 0003b | 0003b890:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003b8a0:·3c63·6f64·653e·0a64·6e66·2069·6e73·7461··<code>.dnf·insta | |||
| 0003bb10:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003bb20:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003bb30:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003bb40:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003bb50:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003bb60:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003bb70:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003bb80:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003bb90:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003bba0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003bbb0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003bbc0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003bbd0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003bbe0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003bbf0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003bc00:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003bc10:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003bc20:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003bc30:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003bc40:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003bc50:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003bc60:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003bc70:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003bc80:·0a20·2077·6865·6e3a·2027·226b·6572·6e65··.··when:·'"kerne | |||
| 0003bc90:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | |||
| 0003bca0:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003bcb0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003bcc0:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003bcd0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003bce0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003bcf0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003bd00:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003bd10:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003bd20:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003bd30:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003bd40:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003bd50:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003bd60:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003bd70:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b | 0003b8b0:·6c6c·2061·6964·650a·3c2f·636f·6465·3e3c··ll·aide.</code>< | ||
| 0003b | 0003b8c0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003b | 0003b8d0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003b | 0003b8e0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0003b | 0003b8f0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003b | 0003b900:·612d·7461·7267·6574·3d22·2369·646d·3733··a-target="#idm73 | ||
| 0003b | 0003b910:·3332·2220·7461·6269·6e64·6578·3d22·3022··32"·tabindex="0" | ||
| 0003b | 0003b920:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b | 0003b930:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b | 0003b940:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b | 0003b950:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b | 0003b960:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b970:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0003b980:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b990:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b9a0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b9b0:·2269·646d·3733·3332·223e·3c74·6162·6c65··"idm7332"><table | |||
| 0003b9c0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b9d0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b9e0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b9f0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| Max diff block lines reached; 23981276/24018426 bytes (99.85%) of diff not shown. | |||
| Offset 15267, 408 lines modified | Offset 15267, 408 lines modified | ||
| 0003ba20:·7267·6574·3d22·2369·646d·3639·3933·2220··rget="#idm6993"· | 0003ba20:·7267·6574·3d22·2369·646d·3639·3933·2220··rget="#idm6993"· | ||
| 0003ba30:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003ba30:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003ba40:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003ba40:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003ba50:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003ba50:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003ba60:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003ba60:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003ba70:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003ba70:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003ba80:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003ba80:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003ba90:·6e20· | 0003ba90:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | ||
| 0003baa0:· | 0003baa0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003bab0:· | 0003bab0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003bac0:·6 | 0003bac0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003bad0:· | 0003bad0:·643d·2269·646d·3639·3933·223e·3c70·7265··d="idm6993"><pre | ||
| 0003bae0:· | 0003bae0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 0003baf0:· | 0003baf0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 0003bb00:· | 0003bb00:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 0003bb10:· | 0003bb10:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 0003bb20:· | 0003bb20:·2120·2820·7b20·7270·6d20·2d2d·7175·6965··!·(·{·rpm·--quie | ||
| 0003bb30:· | 0003bb30:·7420·2d71·206b·6572·6e65·6c20·3b7d·2026··t·-q·kernel·;}·& | ||
| 0003bb40:·6 | 0003bb40:·616d·703b·2661·6d70·3b20·7b20·7270·6d20··amp;&·{·rpm· | ||
| 0003bb50:· | 0003bb50:·2d2d·7175·6965·7420·2d71·2072·706d·2d6f··--quiet·-q·rpm-o | ||
| 0003bb60:·7 | 0003bb60:·7374·7265·6520·3b7d·2026·616d·703b·2661··stree·;}·&&a | ||
| 0003bb70:·6 | 0003bb70:·6d70·3b20·7b20·7270·6d20·2d2d·7175·6965··mp;·{·rpm·--quie | ||
| 0003bb80:· | 0003bb80:·7420·2d71·2062·6f6f·7463·203b·7d20·2661··t·-q·bootc·;}·&a | ||
| 0003bb90:·6 | 0003bb90:·6d70·3b26·616d·703b·207b·2021·2072·706d··mp;&·{·!·rpm | ||
| 0003bba0:· | 0003bba0:·202d·2d71·7569·6574·202d·7120·6f70·656e···--quiet·-q·open | ||
| 0003bbb0:· | 0003bbb0:·7368·6966·742d·6b75·6265·6c65·7420·3b7d··shift-kubelet·;} | ||
| 0003bbc0:· | 0003bbc0:·2029·3b20·7468·656e·0a0a·2320·4669·6e64···);·then..#·Find | ||
| 0003bbd0:· | 0003bbd0:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | ||
| 0003bbe0:·6 | 0003bbe0:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | ||
| 0003bbf0:· | 0003bbf0:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | ||
| 0003bc00:· | 0003bc00:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | ||
| 0003bc10:· | 0003bc10:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | ||
| 0003bc20:· | 0003bc20:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | ||
| 0003bc30:· | 0003bc30:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | ||
| 0003bc40:· | 0003bc40:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | ||
| 0003bc50:· | 0003bc50:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | ||
| 0003bc60:· | 0003bc60:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | ||
| 0003bc70:· | 0003bc70:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | ||
| 0003bc80:· | 0003bc80:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | ||
| 0003bc90:· | 0003bc90:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | ||
| 0003bca0:·5 | 0003bca0:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | ||
| 0003bcb0:· | 0003bcb0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003bcc0:·2 | 0003bcc0:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | ||
| 0003bcd0:· | 0003bcd0:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | ||
| 0003bce0:·2 | 0003bce0:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | ||
| 0003bcf0:· | 0003bcf0:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | ||
| 0003bd00:· | 0003bd00:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | ||
| 0003bd10:· | 0003bd10:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | ||
| 0003bd20:· | 0003bd20:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | ||
| 0003bd30:· | 0003bd30:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | ||
| 0003bd40:· | 0003bd40:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | ||
| 0003bd50:· | 0003bd50:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | ||
| 0003bd60:· | 0003bd60:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | ||
| 0003bd70:· | 0003bd70:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | ||
| 0003bd80:· | 0003bd80:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | ||
| 0003bd90:· | 0003bd90:·200a·2020·2020·646e·6620·7265·696e·7374···.····dnf·reinst | ||
| 0003bda0:·6 | 0003bda0:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | ||
| 0003bdb0:· | 0003bdb0:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | ||
| 0003bdc0:·20 | 0003bdc0:·2020·0a66·690a·0a65·6c73·650a·2020·2020····.fi..else.···· | ||
| 0003bdd0:· | 0003bdd0:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | ||
| 0003bde0:·2 | 0003bde0:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | ||
| 0003bdf0:·6 | 0003bdf0:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | ||
| 0003be00:·6 | 0003be00:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | ||
| 0003be10:·20 | 0003be10:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | ||
| 0003be20:·6 | 0003be20:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | ||
| 0003be30:· | 0003be30:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | ||
| 0003be40:·7 | 0003be40:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003be50:·6 | 0003be50:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 0003be60:·6 | 0003be60:·6172·6765·743d·2223·6964·6d36·3939·3422··arget="#idm6994" | ||
| 0003be70:· | 0003be70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003be80:· | 0003be80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003be90:· | 0003be90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003bea0:· | 0003bea0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003beb0:· | 0003beb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003bec0:·6 | 0003bec0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003bed0:·6 | 0003bed0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003bee0:· | 0003bee0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003bef0:·6 | 0003bef0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003bf00:· | 0003bf00:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003bf10:· | 0003bf10:·6522·2069·643d·2269·646d·3639·3934·223e··e"·id="idm6994"> | ||
| 0003bf20:· | 0003bf20:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003bf30:· | 0003bf30:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003bf40:· | 0003bf40:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003bf50:·2 | 0003bf50:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003bf60:· | 0003bf60:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003bf70:· | 0003bf70:·7869·7479·3a3c·2f74·683e·3c74·643e·6869··xity:</th><td>hi | ||
| 0003bf80:· | 0003bf80:·6768·3c2f·7464·3e3c·2f74·723e·3c74·723e··gh</td></tr><tr> | ||
| 0003bf90:·3 | 0003bf90:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003bfa0:·2 | 0003bfa0:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | ||
| 0003bfb0:· | 0003bfb0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003bfc0:· | 0003bfc0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003bfd0:· | 0003bfd0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003bfe0:· | 0003bfe0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003bff0:·3 | 0003bff0:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | ||
| 0003c000:·43 | 0003c000:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | ||
| 0003c010:· | 0003c010:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | ||
| 0003c020:· | 0003c020:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | ||
| 0003c030:· | 0003c030:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | ||
| 0003c040:· | 0003c040:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | ||
| 0003c050:· | 0003c050:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | ||
| 0003c060:· | 0003c060:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | ||
| 0003c070:· | 0003c070:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | ||
| 0003c080:· | 0003c080:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | ||
| 0003c090:· | 0003c090:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | ||
| 0003c0a0:· | 0003c0a0:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | ||
| 0003c0b0:· | 0003c0b0:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | ||
| 0003c0c0:· | 0003c0c0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c0d0:· | 0003c0d0:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | ||
| 0003c0e0:· | 0003c0e0:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | ||
| 0003c0f0:·2 | 0003c0f0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c100:· | 0003c100:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | ||
| 0003c110:· | 0003c110:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | ||
| 0003c120:· | 0003c120:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003c130:· | 0003c130:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | ||
| 0003c140:· | 0003c140:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003c150:· | 0003c150:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003c160:· | 0003c160:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | ||
| 0003c170:· | 0003c170:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | ||
| 0003c180:· | 0003c180:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | ||
| 0003c190:· | 0003c190:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0003c1a0:· | 0003c1a0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| 0003c1b0:·6 | 0003c1b0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 0003c1c0:· | 0003c1c0:·7472·6174·6567·790a·2020·2d20·7270·6d5f··trategy.··-·rpm_ | ||
| 0003c1d0:·6 | 0003c1d0:·7665·7269·6679·5f68·6173·6865·730a·0a2d··verify_hashes..- | ||
| 0003c1e0:· | 0003c1e0:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003c1f0:· | 0003c1f0:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| Max diff block lines reached; 6338068/6393020 bytes (99.14%) of diff not shown. | |||
| Offset 120, 14 lines modified | Offset 120, 33 lines modified | ||
| 120 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 120 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 121 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 121 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 129 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 130 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 131 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 132 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 133 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 134 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 135 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 136 | fi | ||
| 137 | else | ||
| 138 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 139 | fi | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 132 | -·name:·Gather·the·package·facts | 145 | -·name:·Gather·the·package·facts |
| 133 | ··package_facts: | 146 | ··package_facts: |
| Offset 294, 33 lines modified | Offset 313, 14 lines modified | ||
| 294 | ··-·PCI-DSSv4-11.5.2 | 313 | ··-·PCI-DSSv4-11.5.2 |
| 295 | ··-·high_complexity | 314 | ··-·high_complexity |
| 296 | ··-·high_severity | 315 | ··-·high_severity |
| 297 | ··-·medium_disruption | 316 | ··-·medium_disruption |
| 298 | ··-·no_reboot_needed | 317 | ··-·no_reboot_needed |
| 299 | ··-·restrict_strategy | 318 | ··-·restrict_strategy |
| 300 | ··-·rpm_verify_hashes | 319 | ··-·rpm_verify_hashes |
| 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 302 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 303 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 304 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 305 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 306 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 307 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 308 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 309 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 310 | fi | ||
| 311 | else | ||
| 312 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 313 | fi | ||
| 314 | Group ·System·Cryptographic·Policies· Group·contains·2·rules | 320 | Group ·System·Cryptographic·Policies· Group·contains·2·rules |
| 315 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 321 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 316 | ····*·GnuTLS·library | 322 | ····*·GnuTLS·library |
| 317 | ····*·OpenSSL·library | 323 | ····*·OpenSSL·library |
| 318 | ····*·NSS·library | 324 | ····*·NSS·library |
| 319 | ····*·OpenJDK | 325 | ····*·OpenJDK |
| 320 | ····*·Libkrb5 | 326 | ····*·Libkrb5 |
| Offset 341, 14 lines modified | Offset 341, 58 lines modified | ||
| 341 | ············_\x8i_\x8s_\x8m······1446 | 341 | ············_\x8i_\x8s_\x8m······1446 |
| 342 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 342 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 343 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 343 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 344 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 344 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 345 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 345 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 346 | ············_\x8c_\x8i_\x8s······1.6.1 | 346 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 347 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 347 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 348 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 349 | var_system_crypto_policy='DEFAULT' | ||
| 350 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 351 | rc=$? | ||
| 352 | if·test·"$rc"·=·127;·then | ||
| 353 | » echo·"$stderr_of_call"·>&2 | ||
| 354 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 355 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 356 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 357 | » false··#·end·with·an·error·code | ||
| 358 | elif·test·"$rc"·!=·0;·then | ||
| 359 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 360 | » false··#·end·with·an·error·code | ||
| 361 | fi | ||
| 362 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 363 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 364 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 365 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 366 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 367 | --- | ||
| 368 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 369 | kind:·MachineConfig | ||
| 370 | spec: | ||
| 371 | ··config: | ||
| 372 | ····ignition: | ||
| 373 | ······version:·3.1.0 | ||
| 374 | ····systemd: | ||
| 375 | ······units: | ||
| 376 | ········-·name:·configure-crypto-policy.service | ||
| 377 | ··········enabled:·true | ||
| 378 | ··········contents:·| | ||
| 379 | ············[Unit] | ||
| 380 | ············Before=kubelet.service | ||
| 381 | ············[Service] | ||
| 382 | ············Type=oneshot | ||
| 383 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 384 | ············RemainAfterExit=yes | ||
| 385 | ············[Install] | ||
| 386 | ············WantedBy=multi-user.target | ||
| 348 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 387 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 349 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 388 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 350 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 389 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 351 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 390 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 352 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 391 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 353 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 392 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 354 | ··set_fact: | 393 | ··set_fact: |
| Offset 393, 72 lines modified | Offset 437, 33 lines modified | ||
| Max diff block lines reached; 712788/718737 bytes (99.17%) of diff not shown. | |||
| Offset 15293, 408 lines modified | Offset 15293, 408 lines modified | ||
| 0003bbc0:·6574·3d22·2369·646d·3639·3933·2220·7461··et="#idm6993"·ta | 0003bbc0:·6574·3d22·2369·646d·3639·3933·2220·7461··et="#idm6993"·ta | ||
| 0003bbd0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003bbd0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003bbe0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003bbe0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003bbf0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003bbf0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003bc00:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003bc00:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003bc10:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003bc10:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003bc20:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003bc20:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003bc30:· | 0003bc30:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 0003bc40:· | 0003bc40:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003bc50:· | 0003bc50:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003bc60:· | 0003bc60:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003bc70:· | 0003bc70:·2269·646d·3639·3933·223e·3c70·7265·3e3c··"idm6993"><pre>< | ||
| 0003bc80:·6 | 0003bc80:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 0003bc90:· | 0003bc90:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | ||
| 0003bca0:· | 0003bca0:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | ||
| 0003bcb0:· | 0003bcb0:·2070·6c61·7466·6f72·6d73·0a69·6620·2120···platforms.if·!· | ||
| 0003bcc0:· | 0003bcc0:·2820·7b20·7270·6d20·2d2d·7175·6965·7420··(·{·rpm·--quiet· | ||
| 0003bcd0:· | 0003bcd0:·2d71·206b·6572·6e65·6c20·3b7d·2026·616d··-q·kernel·;}·&am | ||
| 0003bce0:· | 0003bce0:·703b·2661·6d70·3b20·7b20·7270·6d20·2d2d··p;&·{·rpm·-- | ||
| 0003bcf0:· | 0003bcf0:·7175·6965·7420·2d71·2072·706d·2d6f·7374··quiet·-q·rpm-ost | ||
| 0003bd00:· | 0003bd00:·7265·6520·3b7d·2026·616d·703b·2661·6d70··ree·;}·&& | ||
| 0003bd10:·3 | 0003bd10:·3b20·7b20·7270·6d20·2d2d·7175·6965·7420··;·{·rpm·--quiet· | ||
| 0003bd20:· | 0003bd20:·2d71·2062·6f6f·7463·203b·7d20·2661·6d70··-q·bootc·;}·& | ||
| 0003bd30:· | 0003bd30:·3b26·616d·703b·207b·2021·2072·706d·202d··;&·{·!·rpm·- | ||
| 0003bd40:· | 0003bd40:·2d71·7569·6574·202d·7120·6f70·656e·7368··-quiet·-q·opensh | ||
| 0003bd50:·6 | 0003bd50:·6966·742d·6b75·6265·6c65·7420·3b7d·2029··ift-kubelet·;}·) | ||
| 0003bd60:· | 0003bd60:·3b20·7468·656e·0a0a·2320·4669·6e64·2077··;·then..#·Find·w | ||
| 0003bd70:· | 0003bd70:·6869·6368·2066·696c·6573·2068·6176·6520··hich·files·have· | ||
| 0003bd80:·6 | 0003bd80:·696e·636f·7272·6563·7420·6861·7368·2028··incorrect·hash·( | ||
| 0003bd90:·6 | 0003bd90:·6e6f·7420·696e·202f·6574·632c·2062·6563··not·in·/etc,·bec | ||
| 0003bda0:·6 | 0003bda0:·6175·7365·206f·6620·7468·6520·7379·7374··ause·of·the·syst | ||
| 0003bdb0:· | 0003bdb0:·656d·2072·656c·6174·6564·2063·6f6e·6669··em·related·confi | ||
| 0003bdc0:· | 0003bdc0:·6720·6669·6c65·7329·2061·6e64·2074·6865··g·files)·and·the | ||
| 0003bdd0:· | 0003bdd0:·6e20·6765·7420·6669·6c65·7320·6e61·6d65··n·get·files·name | ||
| 0003bde0:· | 0003bde0:·730a·6669·6c65·735f·7769·7468·5f69·6e63··s.files_with_inc | ||
| 0003bdf0:· | 0003bdf0:·6f72·7265·6374·5f68·6173·683d·2224·2872··orrect_hash="$(r | ||
| 0003be00:· | 0003be00:·706d·202d·5661·202d·2d6e·6f63·6f6e·6669··pm·-Va·--noconfi | ||
| 0003be10:· | 0003be10:·6720·7c20·6772·6570·202d·4520·275e·2e2e··g·|·grep·-E·'^.. | ||
| 0003be20:· | 0003be20:·3527·207c·2061·776b·2027·7b70·7269·6e74··5'·|·awk·'{print | ||
| 0003be30:· | 0003be30:·2024·4e46·7d27·2029·220a·0a69·6620·5b20···$NF}'·)"..if·[· | ||
| 0003be40:· | 0003be40:·2d6e·2022·2466·696c·6573·5f77·6974·685f··-n·"$files_with_ | ||
| 0003be50:· | 0003be50:·696e·636f·7272·6563·745f·6861·7368·2220··incorrect_hash"· | ||
| 0003be60:· | 0003be60:·5d3b·2074·6865·6e0a·2020·2020·2320·4672··];·then.····#·Fr | ||
| 0003be70:· | 0003be70:·6f6d·2066·696c·6573·206e·616d·6573·2067··om·files·names·g | ||
| 0003be80:· | 0003be80:·6574·2070·6163·6b61·6765·206e·616d·6573··et·package·names | ||
| 0003be90:·2 | 0003be90:·2061·6e64·2063·6861·6e67·6520·6e65·776c···and·change·newl | ||
| 0003bea0:· | 0003bea0:·696e·6520·746f·2073·7061·6365·2c20·6265··ine·to·space,·be | ||
| 0003beb0:· | 0003beb0:·6361·7573·6520·7270·6d20·7772·6974·6573··cause·rpm·writes | ||
| 0003bec0:·2 | 0003bec0:·2065·6163·6820·7061·636b·6167·6520·746f···each·package·to | ||
| 0003bed0:· | 0003bed0:·206e·6577·206c·696e·650a·2020·2020·7061···new·line.····pa | ||
| 0003bee0:·6 | 0003bee0:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | ||
| 0003bef0:·6 | 0003bef0:·616c·6c3d·2224·2872·706d·202d·7166·2024··all="$(rpm·-qf·$ | ||
| 0003bf00:· | 0003bf00:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | ||
| 0003bf10:· | 0003bf10:·7265·6374·5f68·6173·6820·7c20·7472·2027··rect_hash·|·tr·' | ||
| 0003bf20:· | 0003bf20:·5c6e·2720·2720·2729·220a·0a20·2020·200a··\n'·'·')"..····. | ||
| 0003bf30:· | 0003bf30:·2020·2020·646e·6620·7265·696e·7374·616c······dnf·reinstal | ||
| 0003bf40:·6 | 0003bf40:·6c20·2d79·2024·7061·636b·6167·6573·5f74··l·-y·$packages_t | ||
| 0003bf50:·6 | 0003bf50:·6f5f·7265·696e·7374·616c·6c0a·2020·2020··o_reinstall.···· | ||
| 0003bf60:· | 0003bf60:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | ||
| 0003bf70:· | 0003bf70:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | ||
| 0003bf80:· | 0003bf80:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | ||
| 0003bf90:·7 | 0003bf90:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | ||
| 0003bfa0:· | 0003bfa0:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | ||
| 0003bfb0:· | 0003bfb0:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | ||
| 0003bfc0:· | 0003bfc0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003bfd0:·6 | 0003bfd0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003bfe0:· | 0003bfe0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003bff0:·6 | 0003bff0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003c000:·6 | 0003c000:·6765·743d·2223·6964·6d36·3939·3422·2074··get="#idm6994"·t | ||
| 0003c010:· | 0003c010:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003c020:· | 0003c020:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003c030:·7 | 0003c030:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003c040:· | 0003c040:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003c050:·7 | 0003c050:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003c060:· | 0003c060:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003c070:· | 0003c070:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003c080:· | 0003c080:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003c090:·206 | 0003c090:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003c0a0:· | 0003c0a0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003c0b0:· | 0003c0b0:·2069·643d·2269·646d·3639·3934·223e·3c74···id="idm6994"><t | ||
| 0003c0c0:· | 0003c0c0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003c0d0:· | 0003c0d0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003c0e0:· | 0003c0e0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003c0f0:· | 0003c0f0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003c100:·3 | 0003c100:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003c110:· | 0003c110:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | ||
| 0003c120:· | 0003c120:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003c130:· | 0003c130:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003c140:· | 0003c140:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 0003c150:· | 0003c150:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003c160:· | 0003c160:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003c170:· | 0003c170:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003c180:· | 0003c180:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003c190:· | 0003c190:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003c1a0:·2 | 0003c1a0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003c1b0:· | 0003c1b0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003c1c0:· | 0003c1c0:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | ||
| 0003c1d0:·6 | 0003c1d0:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | ||
| 0003c1e0:· | 0003c1e0:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | ||
| 0003c1f0:· | 0003c1f0:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | ||
| 0003c200:·202 | 0003c200:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 0003c210:· | 0003c210:·2d35·2e31·302e·342e·310a·2020·2d20·4e49··-5.10.4.1.··-·NI | ||
| 0003c220:·5 | 0003c220:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | ||
| 0003c230:· | 0003c230:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003c240:· | 0003c240:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | ||
| 0003c250:· | 0003c250:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | ||
| 0003c260:· | 0003c260:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c270:· | 0003c270:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | ||
| 0003c280:·2 | 0003c280:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | ||
| 0003c290:· | 0003c290:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c2a0:· | 0003c2a0:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | ||
| 0003c2b0:· | 0003c2b0:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | ||
| 0003c2c0:·20 | 0003c2c0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003c2d0:· | 0003c2d0:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | ||
| 0003c2e0:· | 0003c2e0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | ||
| 0003c2f0:· | 0003c2f0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | ||
| 0003c300:· | 0003c300:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | ||
| 0003c310:· | 0003c310:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | ||
| 0003c320:· | 0003c320:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | ||
| 0003c330:·6 | 0003c330:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | ||
| 0003c340:· | 0003c340:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 0003c350:·202 | 0003c350:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 0003c360:·6 | 0003c360:·6174·6567·790a·2020·2d20·7270·6d5f·7665··ategy.··-·rpm_ve | ||
| 0003c370:· | 0003c370:·7269·6679·5f68·6173·6865·730a·0a2d·206e··rify_hashes..-·n | ||
| 0003c380:· | 0003c380:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003c390:·5 | 0003c390:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| Max diff block lines reached; 19381052/19436004 bytes (99.72%) of diff not shown. | |||
| Offset 15203, 279 lines modified | Offset 15203, 279 lines modified | ||
| 0003b620:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b620:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b630:·6d37·3333·3122·2074·6162·696e·6465·783d··m7331"·tabindex= | 0003b630:·6d37·3333·3122·2074·6162·696e·6465·783d··m7331"·tabindex= | ||
| 0003b640:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b640:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b650:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b650:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b660:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b660:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b670:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b670:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b680:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b680:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b690:·6564·6961·7469·6f6e·20 | 0003b690:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | ||
| 0003b6a0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b6b0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b6c0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b6d0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b6e0:·3333·3122·3e3c·7461·626c·6520·636c·6173··331"><table·clas | |||
| 0003b6f0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b700:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b710:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b720:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b730:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b740:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b750:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b760:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b770:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b780:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b790:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b7a0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b7b0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b7c0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b7d0:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003b7e0:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003b7f0:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003b800:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003b810:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003b820:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003b830:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003b840:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b850:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b860:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b870:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b880:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b890:·3d22·2369·646d·3733·3332·2220·7461·6269··="#idm7332"·tabi | |||
| 0003b8a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b8b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b8c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b8d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b8e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b8f0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b900:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b | 0003b6a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b | 0003b6b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b | 0003b6c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b | 0003b6d0:·6964·3d22·6964·6d37·3333·3122·3e3c·7461··id="idm7331"><ta | ||
| 0003b | 0003b6e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003b | 0003b6f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003b | 0003b700:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003b | 0003b710:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003b | 0003b720:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b | 0003b730:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003b740:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b750:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b760:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b770:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b780:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b | 0003b790:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b9c0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b9d0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b9e0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b9f0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ba00:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b | 0003b7a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b | 0003b7b0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | ||
| 0003b | 0003b7c0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b7d0:·636f·6465·3e0a·646e·6620·696e·7374·616c··code>.dnf·instal | |||
| 0003b7e0:·6c20·6169·6465·0a3c·2f63·6f64·653e·3c2f··l·aide.</code></ | |||
| 0003ba40:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003ba50:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003ba60:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003ba70:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003ba80:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003ba90:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003baa0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003bab0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003bac0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003bad0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003bae0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003baf0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003bb00:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003bb10:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003bb20:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003bb30:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003bb40:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003bb50:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003bb60:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003bb70:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003bb80:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003bb90:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003bba0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003bbb0:·2020·7768·656e·3a20·2722·6b65·726e·656c····when:·'"kernel | |||
| 0003bbc0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003bbd0:·7473·2e70·6163·6b61·6765·7327·0a20·2074··ts.packages'.··t | |||
| 0003bbe0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003bbf0:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | |||
| 0003bc00:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003bc10:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003bc20:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003bc30:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003bc40:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003bc50:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003bc60:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003bc70:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003bc80:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003bc90:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003bca0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003bcb0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b | 0003b7f0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | ||
| 0003b | 0003b800:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | ||
| 0003b | 0003b810:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | ||
| 0003b | 0003b820:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | ||
| 0003b | 0003b830:·2d74·6172·6765·743d·2223·6964·6d37·3333··-target="#idm733 | ||
| 0003b | 0003b840:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0003b | 0003b850:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b | 0003b860:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b | 0003b870:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b | 0003b880:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b | 0003b890:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b8a0:·7469·6f6e·2073·6372·6970·7420·e287·b23c··tion·script·...< | |||
| 0003b8b0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b8c0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| Max diff block lines reached; 10792978/10830128 bytes (99.66%) of diff not shown. | |||
| Offset 122, 26 lines modified | Offset 122, 48 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8c_\x8i_\x8s············6.1.1 | 127 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | include·install_aide | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | 134 | dnf·install·aide | |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | package·install·aide | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | [[packages]] | ||
| 143 | name·=·"aide" | ||
| 144 | version·=·"*" | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 151 | if·rpm·--quiet·-q·kernel;·then | ||
| 152 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 153 | ····dnf·install·-y·"aide" | ||
| 154 | fi | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | -·name:·Gather·the·package·facts | 163 | -·name:·Gather·the·package·facts |
| 146 | ··package_facts: | 164 | ··package_facts: |
| Offset 170, 55 lines modified | Offset 192, 33 lines modified | ||
| 170 | ··-·PCI-DSSv4-11.5.2 | 192 | ··-·PCI-DSSv4-11.5.2 |
| 171 | ··-·enable_strategy | 193 | ··-·enable_strategy |
| 172 | ··-·low_complexity | 194 | ··-·low_complexity |
| 173 | ··-·low_disruption | 195 | ··-·low_disruption |
| 174 | ··-·medium_severity | 196 | ··-·medium_severity |
| 175 | ··-·no_reboot_needed | 197 | ··-·no_reboot_needed |
| 176 | ··-·package_aide_installed | 198 | ··-·package_aide_installed |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | [[packages]] | ||
| 179 | name·=·"aide" | ||
| 180 | version·=·"*" | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | dnf·install·aide | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 192 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 193 | if·rpm·--quiet·-q·kernel;·then | ||
| 194 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 195 | ····dnf·install·-y·"aide" | ||
| 196 | fi | ||
| 197 | else | ||
| 198 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 199 | fi | ||
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 205 | package·--add=aide | 204 | package·--add=aide |
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 210 | include·install_aide | ||
| 211 | 211 | class·install_aide·{ | |
| 212 | ··package·{·'aide': | ||
| 213 | ····ensure·=>·'installed', | ||
| 214 | ··} | ||
| 215 | } | ||
| 212 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 216 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 213 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 217 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 214 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 218 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 215 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 219 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 220 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 291, 14 lines modified | Offset 291, 58 lines modified | ||
| 291 | ············_\x8i_\x8s_\x8m······1446 | 291 | ············_\x8i_\x8s_\x8m······1446 |
| 292 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 292 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 293 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 293 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 294 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 294 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 295 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 295 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 296 | ············_\x8c_\x8i_\x8s······1.6.1 | 296 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 297 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 297 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 299 | var_system_crypto_policy='FIPS' | ||
| Max diff block lines reached; 1153138/1160085 bytes (99.40%) of diff not shown. | |||
| Offset 15207, 279 lines modified | Offset 15207, 279 lines modified | ||
| 0003b660:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b660:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b670:·3733·3331·2220·7461·6269·6e64·6578·3d22··7331"·tabindex=" | 0003b670:·3733·3331·2220·7461·6269·6e64·6578·3d22··7331"·tabindex=" | ||
| 0003b680:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b680:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b690:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b690:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b6a0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b6a0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b6b0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b6b0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b6c0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b6c0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b6d0:·6469·6174·696f·6e20· | 0003b6d0:·6469·6174·696f·6e20·7363·7269·7074·20e2··diation·script·. | ||
| 0003b6e0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b6f0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b700:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b710:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | |||
| 0003b720:·3331·223e·3c74·6162·6c65·2063·6c61·7373··31"><table·class | |||
| 0003b730:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b740:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b750:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b760:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b770:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b780:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b790:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b7a0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b7b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b7c0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b7d0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b7e0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b7f0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b800:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b810:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b820:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003b830:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b840:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b850:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b860:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b870:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b880:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b890:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b8a0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b8b0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b8c0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b8d0:·2223·6964·6d37·3333·3222·2074·6162·696e··"#idm7332"·tabin | |||
| 0003b8e0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b8f0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b900:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b910:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b920:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b930:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003b940:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b | 0003b6e0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b | 0003b6f0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b | 0003b700:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b | 0003b710:·643d·2269·646d·3733·3331·223e·3c74·6162··d="idm7331"><tab | ||
| 0003b | 0003b720:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003b | 0003b730:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003b | 0003b740:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003b | 0003b750:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003b | 0003b760:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003b | 0003b770:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b | 0003b780:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b | 0003b790:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b | 0003b7a0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003b7b0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b | 0003b7c0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b | 0003b7d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b | 0003b7e0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b | 0003b7f0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 0003b | 0003b800:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b810:·6f64·653e·0a64·6e66·2069·6e73·7461·6c6c··ode>.dnf·install | |||
| 0003ba80:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003ba90:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003baa0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003bab0:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003bac0:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003bad0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003bae0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003baf0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003bb00:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003bb10:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003bb20:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003bb30:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003bb40:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003bb50:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003bb60:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003bb70:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003bb80:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003bb90:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003bba0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003bbb0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003bbc0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003bbd0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003bbe0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003bbf0:·2077·6865·6e3a·2027·226b·6572·6e65·6c22···when:·'"kernel" | |||
| 0003bc00:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003bc10:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 0003bc20:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003bc30:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003bc40:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003bc50:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003bc60:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003bc70:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003bc80:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003bc90:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003bca0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003bcb0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003bcc0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003bcd0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003bce0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b | 0003b820:·2061·6964·650a·3c2f·636f·6465·3e3c·2f70···aide.</code></p | ||
| 0003b | 0003b830:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 0003b | 0003b840:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 0003b | 0003b850:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0003b | 0003b860:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0003b | 0003b870:·7461·7267·6574·3d22·2369·646d·3733·3332··target="#idm7332 | ||
| 0003b | 0003b880:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b | 0003b890:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b | 0003b8a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b | 0003b8b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b | 0003b8c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b | 0003b8d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b8e0:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0003b8f0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b900:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b910:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b920:·646d·3733·3332·223e·3c74·6162·6c65·2063··dm7332"><table·c | |||
| 0003b930:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b940:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b950:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b960:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| Max diff block lines reached; 10793116/10830266 bytes (99.66%) of diff not shown. | |||
| Offset 123, 26 lines modified | Offset 123, 48 lines modified | ||
| 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8c_\x8i_\x8s············6.1.1 | 128 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | include·install_aide | ||
| 136 | class·install_aide·{ | ||
| 137 | ··package·{·'aide': | ||
| 138 | ····ensure·=>·'installed', | ||
| 139 | ··} | ||
| 140 | 135 | dnf·install·aide | |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | package·install·aide | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 152 | if·rpm·--quiet·-q·kernel;·then | ||
| 153 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 154 | ····dnf·install·-y·"aide" | ||
| 155 | fi | ||
| 156 | else | ||
| 157 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 158 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 146 | -·name:·Gather·the·package·facts | 164 | -·name:·Gather·the·package·facts |
| 147 | ··package_facts: | 165 | ··package_facts: |
| Offset 171, 55 lines modified | Offset 193, 33 lines modified | ||
| 171 | ··-·PCI-DSSv4-11.5.2 | 193 | ··-·PCI-DSSv4-11.5.2 |
| 172 | ··-·enable_strategy | 194 | ··-·enable_strategy |
| 173 | ··-·low_complexity | 195 | ··-·low_complexity |
| 174 | ··-·low_disruption | 196 | ··-·low_disruption |
| 175 | ··-·medium_severity | 197 | ··-·medium_severity |
| 176 | ··-·no_reboot_needed | 198 | ··-·no_reboot_needed |
| 177 | ··-·package_aide_installed | 199 | ··-·package_aide_installed |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 179 | [[packages]] | ||
| 180 | name·=·"aide" | ||
| 181 | version·=·"*" | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 187 | dnf·install·aide | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 194 | if·rpm·--quiet·-q·kernel;·then | ||
| 195 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 196 | ····dnf·install·-y·"aide" | ||
| 197 | fi | ||
| 198 | else | ||
| 199 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 200 | fi | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 206 | package·--add=aide | 205 | package·--add=aide |
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 211 | include·install_aide | ||
| 212 | 212 | class·install_aide·{ | |
| 213 | ··package·{·'aide': | ||
| 214 | ····ensure·=>·'installed', | ||
| 215 | ··} | ||
| 216 | } | ||
| 213 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 217 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 214 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 218 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 215 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 219 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 216 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 220 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 217 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 221 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 292, 14 lines modified | Offset 292, 58 lines modified | ||
| 292 | ············_\x8i_\x8s_\x8m······1446 | 292 | ············_\x8i_\x8s_\x8m······1446 |
| 293 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 293 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 294 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 294 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 295 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 295 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 296 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 296 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 297 | ············_\x8c_\x8i_\x8s······1.6.1 | 297 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 298 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 298 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 299 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 300 | var_system_crypto_policy='FIPS' | ||
| Max diff block lines reached; 1153138/1160085 bytes (99.40%) of diff not shown. | |||
| Offset 15205, 278 lines modified | Offset 15205, 278 lines modified | ||
| 0003b640:·6574·3d22·2369·646d·3733·3331·2220·7461··et="#idm7331"·ta | 0003b640:·6574·3d22·2369·646d·3733·3331·2220·7461··et="#idm7331"·ta | ||
| 0003b650:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b650:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b660:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b660:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b670:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b670:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b680:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b680:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b690:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b690:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b6a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b6a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b6b0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b6c0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b6d0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b6e0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b6f0:·643d·2269·646d·3733·3331·223e·3c74·6162··d="idm7331"><tab | |||
| 0003b700:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b710:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b720:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b730:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b740:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b750:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b760:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b770:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b780:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b790:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b7a0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b7b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b7c0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b7d0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b7e0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b7f0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b800:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b810:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b820:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b830:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b840:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b850:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003b860:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b870:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b880:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b890:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b8a0:·2d74·6172·6765·743d·2223·6964·6d37·3333··-target="#idm733 | |||
| 0003b8b0:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003b8c0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b8d0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b8e0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b8f0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b900:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b910:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b | 0003b6b0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 0003b | 0003b6c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b | 0003b6d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b | 0003b6e0:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | ||
| 0003b | 0003b6f0:·3331·223e·3c74·6162·6c65·2063·6c61·7373··31"><table·class | ||
| 0003b | 0003b700:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003b | 0003b710:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b | 0003b720:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003b | 0003b730:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003b | 0003b740:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003b | 0003b750:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b | 0003b760:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b | 0003b770:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003b | 0003b780:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b790:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b | 0003b7a0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003b | 0003b7b0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003b | 0003b7c0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | ||
| 0003b | 0003b7d0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003b | 0003b7e0:·3e3c·7072·653e·3c63·6f64·653e·0a64·6e66··><pre><code>.dnf | ||
| 0003b7f0:·2069·6e73·7461·6c6c·2061·6964·650a·3c2f···install·aide.</ | |||
| 0003ba60:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003ba70:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003ba80:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003ba90:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003baa0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003bab0:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003bac0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003bad0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003bae0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003baf0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003bb00:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003bb10:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003bb20:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003bb30:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003bb40:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003bb50:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003bb60:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003bb70:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003bb80:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003bb90:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003bba0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003bbb0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003bbc0:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003bbd0:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003bbe0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003bbf0:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003bc00:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003bc10:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003bc20:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003bc30:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003bc40:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003bc50:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003bc60:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003bc70:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003bc80:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003bc90:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003bca0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003bcb0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003bcc0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b | 0003b800:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | ||
| 0003b | 0003b810:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | ||
| 0003b | 0003b820:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | ||
| 0003b | 0003b830:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | ||
| 0003b | 0003b840:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b | 0003b850:·2369·646d·3733·3332·2220·7461·6269·6e64··#idm7332"·tabind | ||
| 0003b | 0003b860:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b | 0003b870:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b | 0003b880:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b | 0003b890:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b | 0003b8a0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b8b0:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 0003b8c0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b8d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b8e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b8f0:·6522·2069·643d·2269·646d·3733·3332·223e··e"·id="idm7332"> | |||
| 0003b900:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b910:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b920:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b930:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b940:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| Max diff block lines reached; 10791876/10828888 bytes (99.66%) of diff not shown. | |||
| Offset 122, 26 lines modified | Offset 122, 48 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8c_\x8i_\x8s············6.1.1 | 127 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | include·install_aide | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | 134 | dnf·install·aide | |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | package·install·aide | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | [[packages]] | ||
| 143 | name·=·"aide" | ||
| 144 | version·=·"*" | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 151 | if·rpm·--quiet·-q·kernel;·then | ||
| 152 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 153 | ····dnf·install·-y·"aide" | ||
| 154 | fi | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | -·name:·Gather·the·package·facts | 163 | -·name:·Gather·the·package·facts |
| 146 | ··package_facts: | 164 | ··package_facts: |
| Offset 170, 55 lines modified | Offset 192, 33 lines modified | ||
| 170 | ··-·PCI-DSSv4-11.5.2 | 192 | ··-·PCI-DSSv4-11.5.2 |
| 171 | ··-·enable_strategy | 193 | ··-·enable_strategy |
| 172 | ··-·low_complexity | 194 | ··-·low_complexity |
| 173 | ··-·low_disruption | 195 | ··-·low_disruption |
| 174 | ··-·medium_severity | 196 | ··-·medium_severity |
| 175 | ··-·no_reboot_needed | 197 | ··-·no_reboot_needed |
| 176 | ··-·package_aide_installed | 198 | ··-·package_aide_installed |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | [[packages]] | ||
| 179 | name·=·"aide" | ||
| 180 | version·=·"*" | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | dnf·install·aide | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 192 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 193 | if·rpm·--quiet·-q·kernel;·then | ||
| 194 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 195 | ····dnf·install·-y·"aide" | ||
| 196 | fi | ||
| 197 | else | ||
| 198 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 199 | fi | ||
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 205 | package·--add=aide | 204 | package·--add=aide |
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 210 | include·install_aide | ||
| 211 | 211 | class·install_aide·{ | |
| 212 | ··package·{·'aide': | ||
| 213 | ····ensure·=>·'installed', | ||
| 214 | ··} | ||
| 215 | } | ||
| 212 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 216 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 213 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 217 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 214 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 218 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 215 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 219 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 220 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 291, 14 lines modified | Offset 291, 58 lines modified | ||
| 291 | ············_\x8i_\x8s_\x8m······1446 | 291 | ············_\x8i_\x8s_\x8m······1446 |
| 292 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 292 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 293 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 293 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 294 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 294 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 295 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 295 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 296 | ············_\x8c_\x8i_\x8s······1.6.1 | 296 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 297 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 297 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 299 | var_system_crypto_policy='FIPS' | ||
| Max diff block lines reached; 1153138/1160085 bytes (99.40%) of diff not shown. | |||
| Offset 15477, 251 lines modified | Offset 15477, 251 lines modified | ||
| 0003c740:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003c740:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003c750:·2223·6964·6d37·3935·3522·2074·6162·696e··"#idm7955"·tabin | 0003c750:·2223·6964·6d37·3935·3522·2074·6162·696e··"#idm7955"·tabin | ||
| 0003c760:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003c760:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003c770:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003c770:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003c780:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003c780:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003c790:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003c790:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003c7a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003c7a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003c7b0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003c7b0:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | ||
| 0003c7c0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003c7d0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c7e0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c7f0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c800:·6964·6d37·3935·3522·3e3c·7461·626c·6520··idm7955"><table· | |||
| 0003c810:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003c820:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003c830:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003c840:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003c850:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003c860:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003c870:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003c880:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003c890:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003c8a0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003c8b0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003c8c0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003c8d0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003c8e0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003c8f0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003c900:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003c910:·5f63·7279·7074·6f2d·706f·6c69·6369·6573··_crypto-policies | |||
| 0003c920:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003c930:·6372·7970·746f·2d70·6f6c·6963·6965·7320··crypto-policies· | |||
| 0003c940:·7b0a·2020·7061·636b·6167·6520·7b20·2763··{.··package·{·'c | |||
| 0003c950:·7279·7074·6f2d·706f·6c69·6369·6573·273a··rypto-policies': | |||
| 0003c960:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003c970:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003c980:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003c990:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003c9a0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003c9b0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003c9c0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003c9d0:·6172·6765·743d·2223·6964·6d37·3935·3622··arget="#idm7956" | |||
| 0003c9e0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003c9f0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003ca00:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003ca10:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003ca20:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003ca30:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003ca40:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003ca50:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ca60:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ca70:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ca80:·6522·2069·643d·2269·646d·3739·3536·223e··e"·id="idm7956"> | |||
| 0003ca90:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003caa0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003cab0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003cac0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003cad0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003cae0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003caf0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003cb00:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003cb10:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003cb20:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003cb30:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003cb40:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003cb50:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003cb60:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003cb70:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003cb80:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003cb90:·456e·7375·7265·2063·7279·7074·6f2d·706f··Ensure·crypto-po | |||
| 0003cba0:·6c69·6369·6573·2069·7320·696e·7374·616c··licies·is·instal | |||
| 0003cbb0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003cbc0:·2020·206e·616d·653a·2063·7279·7074·6f2d·····name:·crypto- | |||
| 0003cbd0:·706f·6c69·6369·6573·0a20·2020·2073·7461··policies.····sta | |||
| 0003cbe0:·7465·3a20·7072·6573·656e·740a·2020·7461··te:·present.··ta | |||
| 0003cbf0:·6773·3a0a·2020·2d20·656e·6162·6c65·5f73··gs:.··-·enable_s | |||
| 0003cc00:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003cc10:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003cc20:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003cc30:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003cc40:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003cc50:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003cc60:·6765·5f63·7279·7074·6f2d·706f·6c69·6369··ge_crypto-polici | |||
| 0003cc70:·6573·5f69·6e73·7461·6c6c·6564·0a3c·2f63··es_installed.</c | |||
| 0003cc80:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003cc90:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003cca0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003ccb0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003ccc0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003ccd0:·6964·6d37·3935·3722·2074·6162·696e·6465··idm7957"·tabinde | |||
| 0003cce0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003ccf0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003cd00:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003cd10:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003cd20:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003cd30:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| 0003cd40:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003cd50:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003cd60:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003cd70:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003cd80:·7073·6522·2069·643d·2269·646d·3739·3537··pse"·id="idm7957 | |||
| 0003cd90:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003cda0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003cdb0:·3d20·2263·7279·7074·6f2d·706f·6c69·6369··=·"crypto-polici | |||
| 0003cdc0:·6573·220a·7665·7273·696f·6e20·3d20·222a··es".version·=·"* | |||
| 0003cdd0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003cde0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003cdf0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003ce00:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003ce10:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003ce20:·6574·3d22·2369·646d·3739·3538·2220·7461··et="#idm7958"·ta | |||
| 0003ce30:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003ce40:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003ce50:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003ce60:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003ce70:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003ce80:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003ce90:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003cea0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ceb0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003cec0:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003ced0:·3538·223e·3c74·6162·6c65·2063·6c61·7373··58"><table·class | |||
| 0003cee0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003cef0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003cf00:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003cf10:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003cf20:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| Max diff block lines reached; 6687740/6721026 bytes (99.50%) of diff not shown. | |||
| Offset 145, 77 lines modified | Offset 145, 77 lines modified | ||
| 145 | $·sudo·dnf·install·crypto-policies | 145 | $·sudo·dnf·install·crypto-policies |
| 146 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 146 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 147 | Severity: ··medium | 147 | Severity: ··medium |
| 148 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 148 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 149 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 149 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| 150 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 150 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 151 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 151 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 157 | include·install_crypto-policies | ||
| 158 | 157 | dnf·install·crypto-policies | |
| 159 | ··package·{·'crypto-policies': | ||
| 160 | ····ensure·=>·'installed', | ||
| 161 | ··} | ||
| 162 | } | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 163 | package·install·crypto-policies | ||
| 168 | -·name:·Ensure·crypto-policies·is·installed | ||
| 169 | ··package: | ||
| 170 | ····name:·crypto-policies | ||
| 171 | ····state:·present | ||
| 172 | ··tags: | ||
| 173 | ··-·enable_strategy | ||
| 174 | ··-·low_complexity | ||
| 175 | ··-·low_disruption | ||
| 176 | ··-·medium_severity | ||
| 177 | ··-·no_reboot_needed | ||
| 178 | ··-·package_crypto-policies_installed | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 180 | [[packages]] | 165 | [[packages]] |
| 181 | name·=·"crypto-policies" | 166 | name·=·"crypto-policies" |
| 182 | version·=·"*" | 167 | version·=·"*" |
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 188 | dnf·install·crypto-policies | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 194 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 173 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| 195 | ····dnf·install·-y·"crypto-policies" | 174 | ····dnf·install·-y·"crypto-policies" |
| 196 | fi | 175 | fi |
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | -·name:·Ensure·crypto-policies·is·installed | ||
| 182 | ··package: | ||
| 183 | ····name:·crypto-policies | ||
| 184 | ····state:·present | ||
| 185 | ··tags: | ||
| 186 | ··-·enable_strategy | ||
| 187 | ··-·low_complexity | ||
| 188 | ··-·low_disruption | ||
| 189 | ··-·medium_severity | ||
| 190 | ··-·no_reboot_needed | ||
| 191 | ··-·package_crypto-policies_installed | ||
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 202 | package·--add=crypto-policies | 197 | package·--add=crypto-policies |
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 203 | include·install_crypto-policies | ||
| 204 | class·install_crypto-policies·{ | ||
| 208 | package· | 205 | ··package·{·'crypto-policies': |
| 206 | ····ensure·=>·'installed', | ||
| 207 | ··} | ||
| 208 | } | ||
| 209 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 209 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 210 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 210 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| 211 | $·sudo·update-crypto-policies·--set·FIPS:OSPP | 211 | $·sudo·update-crypto-policies·--set·FIPS:OSPP |
| 212 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 212 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 213 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 213 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 214 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 214 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 215 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 215 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 226, 14 lines modified | Offset 226, 58 lines modified | ||
| 226 | ············_\x8i_\x8s_\x8m······1446 | 226 | ············_\x8i_\x8s_\x8m······1446 |
| 227 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 227 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 228 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 228 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 229 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 229 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 230 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 230 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 231 | ············_\x8c_\x8i_\x8s······1.6.1 | 231 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 232 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 232 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 234 | var_system_crypto_policy='FIPS:OSPP' | ||
| 235 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 236 | rc=$? | ||
| 237 | if·test·"$rc"·=·127;·then | ||
| 238 | » echo·"$stderr_of_call"·>&2 | ||
| 239 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 240 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 241 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 242 | » false··#·end·with·an·error·code | ||
| 243 | elif·test·"$rc"·!=·0;·then | ||
| 244 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 245 | » false··#·end·with·an·error·code | ||
| 246 | fi | ||
| Max diff block lines reached; 905116/913305 bytes (99.10%) of diff not shown. | |||
| Offset 15295, 408 lines modified | Offset 15295, 408 lines modified | ||
| 0003bbe0:·6765·743d·2223·6964·6d36·3939·3322·2074··get="#idm6993"·t | 0003bbe0:·6765·743d·2223·6964·6d36·3939·3322·2074··get="#idm6993"·t | ||
| 0003bbf0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003bbf0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003bc00:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003bc00:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003bc10:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003bc10:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003bc20:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003bc20:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003bc30:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003bc30:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003bc40:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003bc40:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003bc50:·20 | 0003bc50:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | ||
| 0003bc60:· | 0003bc60:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003bc70:· | 0003bc70:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003bc80:· | 0003bc80:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003bc90:· | 0003bc90:·3d22·6964·6d36·3939·3322·3e3c·7072·653e··="idm6993"><pre> | ||
| 0003bca0:· | 0003bca0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | ||
| 0003bcb0:·6 | 0003bcb0:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | ||
| 0003bcc0:· | 0003bcc0:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | ||
| 0003bcd0:·6 | 0003bcd0:·6e20·706c·6174·666f·726d·730a·6966·2021··n·platforms.if·! | ||
| 0003bce0:· | 0003bce0:·2028·207b·2072·706d·202d·2d71·7569·6574···(·{·rpm·--quiet | ||
| 0003bcf0:· | 0003bcf0:·202d·7120·6b65·726e·656c·203b·7d20·2661···-q·kernel·;}·&a | ||
| 0003bd00:·3 | 0003bd00:·6d70·3b26·616d·703b·207b·2072·706d·202d··mp;&·{·rpm·- | ||
| 0003bd10:· | 0003bd10:·2d71·7569·6574·202d·7120·7270·6d2d·6f73··-quiet·-q·rpm-os | ||
| 0003bd20:· | 0003bd20:·7472·6565·203b·7d20·2661·6d70·3b26·616d··tree·;}·&&am | ||
| 0003bd30:· | 0003bd30:·703b·207b·2072·706d·202d·2d71·7569·6574··p;·{·rpm·--quiet | ||
| 0003bd40:· | 0003bd40:·202d·7120·626f·6f74·6320·3b7d·2026·616d···-q·bootc·;}·&am | ||
| 0003bd50:· | 0003bd50:·703b·2661·6d70·3b20·7b20·2120·7270·6d20··p;&·{·!·rpm· | ||
| 0003bd60:· | 0003bd60:·2d2d·7175·6965·7420·2d71·206f·7065·6e73··--quiet·-q·opens | ||
| 0003bd70:· | 0003bd70:·6869·6674·2d6b·7562·656c·6574·203b·7d20··hift-kubelet·;}· | ||
| 0003bd80:·2 | 0003bd80:·293b·2074·6865·6e0a·0a23·2046·696e·6420··);·then..#·Find· | ||
| 0003bd90:· | 0003bd90:·7768·6963·6820·6669·6c65·7320·6861·7665··which·files·have | ||
| 0003bda0:· | 0003bda0:·2069·6e63·6f72·7265·6374·2068·6173·6820···incorrect·hash· | ||
| 0003bdb0:· | 0003bdb0:·286e·6f74·2069·6e20·2f65·7463·2c20·6265··(not·in·/etc,·be | ||
| 0003bdc0:·6 | 0003bdc0:·6361·7573·6520·6f66·2074·6865·2073·7973··cause·of·the·sys | ||
| 0003bdd0:· | 0003bdd0:·7465·6d20·7265·6c61·7465·6420·636f·6e66··tem·related·conf | ||
| 0003bde0:· | 0003bde0:·6967·2066·696c·6573·2920·616e·6420·7468··ig·files)·and·th | ||
| 0003bdf0:· | 0003bdf0:·656e·2067·6574·2066·696c·6573·206e·616d··en·get·files·nam | ||
| 0003be00:· | 0003be00:·6573·0a66·696c·6573·5f77·6974·685f·696e··es.files_with_in | ||
| 0003be10:· | 0003be10:·636f·7272·6563·745f·6861·7368·3d22·2428··correct_hash="$( | ||
| 0003be20:· | 0003be20:·7270·6d20·2d56·6120·2d2d·6e6f·636f·6e66··rpm·-Va·--noconf | ||
| 0003be30:· | 0003be30:·6967·207c·2067·7265·7020·2d45·2027·5e2e··ig·|·grep·-E·'^. | ||
| 0003be40:·2 | 0003be40:·2e35·2720·7c20·6177·6b20·277b·7072·696e··.5'·|·awk·'{prin | ||
| 0003be50:· | 0003be50:·7420·244e·467d·2720·2922·0a0a·6966·205b··t·$NF}'·)"..if·[ | ||
| 0003be60:·2 | 0003be60:·202d·6e20·2224·6669·6c65·735f·7769·7468···-n·"$files_with | ||
| 0003be70:· | 0003be70:·5f69·6e63·6f72·7265·6374·5f68·6173·6822··_incorrect_hash" | ||
| 0003be80:·534 | 0003be80:·205d·3b20·7468·656e·0a20·2020·2023·2046···];·then.····#·F | ||
| 0003be90:· | 0003be90:·726f·6d20·6669·6c65·7320·6e61·6d65·7320··rom·files·names· | ||
| 0003bea0:· | 0003bea0:·6765·7420·7061·636b·6167·6520·6e61·6d65··get·package·name | ||
| 0003beb0:· | 0003beb0:·7320·616e·6420·6368·616e·6765·206e·6577··s·and·change·new | ||
| 0003bec0:· | 0003bec0:·6c69·6e65·2074·6f20·7370·6163·652c·2062··line·to·space,·b | ||
| 0003bed0:· | 0003bed0:·6563·6175·7365·2072·706d·2077·7269·7465··ecause·rpm·write | ||
| 0003bee0:· | 0003bee0:·7320·6561·6368·2070·6163·6b61·6765·2074··s·each·package·t | ||
| 0003bef0:· | 0003bef0:·6f20·6e65·7720·6c69·6e65·0a20·2020·2070··o·new·line.····p | ||
| 0003bf00:· | 0003bf00:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | ||
| 0003bf10:· | 0003bf10:·7461·6c6c·3d22·2428·7270·6d20·2d71·6620··tall="$(rpm·-qf· | ||
| 0003bf20:· | 0003bf20:·2466·696c·6573·5f77·6974·685f·696e·636f··$files_with_inco | ||
| 0003bf30:·2 | 0003bf30:·7272·6563·745f·6861·7368·207c·2074·7220··rrect_hash·|·tr· | ||
| 0003bf40:· | 0003bf40:·275c·6e27·2027·2027·2922·0a0a·2020·2020··'\n'·'·')"..···· | ||
| 0003bf50:· | 0003bf50:·0a20·2020·2064·6e66·2072·6569·6e73·7461··.····dnf·reinsta | ||
| 0003bf60:·6 | 0003bf60:·6c6c·202d·7920·2470·6163·6b61·6765·735f··ll·-y·$packages_ | ||
| 0003bf70:· | 0003bf70:·746f·5f72·6569·6e73·7461·6c6c·0a20·2020··to_reinstall.··· | ||
| 0003bf80:· | 0003bf80:·200a·6669·0a0a·656c·7365·0a20·2020·2026···.fi..else.····& | ||
| 0003bf90:·6 | 0003bf90:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | ||
| 0003bfa0:· | 0003bfa0:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | ||
| 0003bfb0:·6 | 0003bfb0:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | ||
| 0003bfc0:· | 0003bfc0:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | ||
| 0003bfd0:· | 0003bfd0:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | ||
| 0003bfe0:· | 0003bfe0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003bff0:·2 | 0003bff0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003c000:· | 0003c000:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003c010:· | 0003c010:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003c020:· | 0003c020:·7267·6574·3d22·2369·646d·3639·3934·2220··rget="#idm6994"· | ||
| 0003c030:· | 0003c030:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003c040:·6 | 0003c040:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003c050:·6 | 0003c050:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003c060:·20 | 0003c060:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003c070:· | 0003c070:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003c080:· | 0003c080:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003c090:·6 | 0003c090:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003c0a0:· | 0003c0a0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003c0b0:· | 0003c0b0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003c0c0:· | 0003c0c0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003c0d0:· | 0003c0d0:·2220·6964·3d22·6964·6d36·3939·3422·3e3c··"·id="idm6994">< | ||
| 0003c0e0:·7 | 0003c0e0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003c0f0:· | 0003c0f0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003c100:·20 | 0003c100:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003c110:· | 0003c110:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003c120:·3 | 0003c120:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003c130:· | 0003c130:·6974·793a·3c2f·7468·3e3c·7464·3e68·6967··ity:</th><td>hig | ||
| 0003c140:· | 0003c140:·683c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··h</td></tr><tr>< | ||
| 0003c150:· | 0003c150:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003c160:· | 0003c160:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | ||
| 0003c170:· | 0003c170:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003c180:· | 0003c180:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003c190:· | 0003c190:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003c1a0:· | 0003c1a0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003c1b0:· | 0003c1b0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 0003c1c0:· | 0003c1c0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003c1d0:· | 0003c1d0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003c1e0:· | 0003c1e0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | ||
| 0003c1f0:·706 | 0003c1f0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | ||
| 0003c200:· | 0003c200:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | ||
| 0003c210:· | 0003c210:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | ||
| 0003c220:· | 0003c220:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003c230:· | 0003c230:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003c240:· | 0003c240:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003c250:· | 0003c250:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003c260:· | 0003c260:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003c270:· | 0003c270:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003c280:· | 0003c280:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c290:· | 0003c290:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003c2a0:· | 0003c2a0:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003c2b0:· | 0003c2b0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c2c0:· | 0003c2c0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003c2d0:· | 0003c2d0:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003c2e0:·2 | 0003c2e0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003c2f0:·2 | 0003c2f0:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003c300:· | 0003c300:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003c310:· | 0003c310:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003c320:· | 0003c320:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003c330:· | 0003c330:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003c340:· | 0003c340:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003c350:· | 0003c350:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003c360:· | 0003c360:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003c370:· | 0003c370:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003c380:· | 0003c380:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003c390:· | 0003c390:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| 0003c3a0:· | 0003c3a0:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | ||
| 0003c3b0:· | 0003c3b0:·2050·6163·6b61·6765·206d·616e·6167·6572···Package·manager | ||
| Max diff block lines reached; 16442550/16497502 bytes (99.67%) of diff not shown. | |||
| Offset 15212, 279 lines modified | Offset 15212, 279 lines modified | ||
| 0003b6b0:·7461·7267·6574·3d22·2369·646d·3733·3331··target="#idm7331 | 0003b6b0:·7461·7267·6574·3d22·2369·646d·3733·3331··target="#idm7331 | ||
| 0003b6c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b6c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b6d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b6d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b6e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b6e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b6f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b6f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b700:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b700:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b710:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b710:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b720:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0003b720:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b730:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b740:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b750:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b760:·6522·2069·643d·2269·646d·3733·3331·223e··e"·id="idm7331"> | |||
| 0003b770:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b780:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b790:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b7a0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b7b0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b7c0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b7d0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b7e0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b7f0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b800:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b810:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b820:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b830:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b840:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b850:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b860:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b870:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b880:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b890:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b8a0:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b8b0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b8c0:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b8d0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b8e0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b8f0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b900:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b910:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b920:·6d37·3333·3222·2074·6162·696e·6465·783d··m7332"·tabindex= | |||
| 0003b930:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b940:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b950:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b960:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b970:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b980:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b990:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b | 0003b730:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b | 0003b740:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b | 0003b750:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b | 0003b760:·646d·3733·3331·223e·3c74·6162·6c65·2063··dm7331"><table·c | ||
| 0003b | 0003b770:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b | 0003b780:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b | 0003b790:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b | 0003b7a0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003b | 0003b7b0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003b | 0003b7c0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b | 0003b7d0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b | 0003b7e0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b | 0003b7f0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b | 0003b800:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b | 0003b810:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b | 0003b820:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b | 0003b830:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003b | 0003b840:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003b | 0003b850:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b860:·0a64·6e66·2069·6e73·7461·6c6c·2061·6964··.dnf·install·aid | |||
| 0003bad0:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003bae0:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003baf0:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003bb00:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003bb10:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | |||
| 0003bb20:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003bb30:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003bb40:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003bb50:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003bb60:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003bb70:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003bb80:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003bb90:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003bba0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003bbb0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003bbc0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003bbd0:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003bbe0:·655f·696e·7374·616c·6c65·640a·0a2d·206e··e_installed..-·n | |||
| 0003bbf0:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003bc00:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003bc10:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003bc20:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003bc30:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003bc40:·6e3a·2027·226b·6572·6e65·6c22·2069·6e20··n:·'"kernel"·in· | |||
| 0003bc50:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003bc60:·636b·6167·6573·270a·2020·7461·6773·3a0a··ckages'.··tags:. | |||
| 0003bc70:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003bc80:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003bc90:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003bca0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003bcb0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003bcc0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003bcd0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003bce0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003bcf0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003bd00:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003bd10:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003bd20:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003bd30:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b | 0003b870:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | ||
| 0003b | 0003b880:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003b | 0003b890:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003b | 0003b8a0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003b | 0003b8b0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003b | 0003b8c0:·6574·3d22·2369·646d·3733·3332·2220·7461··et="#idm7332"·ta | ||
| 0003b | 0003b8d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b | 0003b8e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b | 0003b8f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b | 0003b900:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b | 0003b910:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b | 0003b920:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b930:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b940:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b950:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b960:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | |||
| 0003b970:·3332·223e·3c74·6162·6c65·2063·6c61·7373··32"><table·class | |||
| 0003b980:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b990:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b9a0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| Max diff block lines reached; 33253784/33290934 bytes (99.89%) of diff not shown. | |||
| Offset 15207, 279 lines modified | Offset 15207, 279 lines modified | ||
| 0003b660:·612d·7461·7267·6574·3d22·2369·646d·3733··a-target="#idm73 | 0003b660:·612d·7461·7267·6574·3d22·2369·646d·3733··a-target="#idm73 | ||
| 0003b670:·3331·2220·7461·6269·6e64·6578·3d22·3022··31"·tabindex="0" | 0003b670:·3331·2220·7461·6269·6e64·6578·3d22·3022··31"·tabindex="0" | ||
| 0003b680:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b680:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b690:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b690:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b6a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b6a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b6b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b6b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b6c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b6c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b6d0:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0003b6d0:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b6e0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b6f0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b700:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b710:·7073·6522·2069·643d·2269·646d·3733·3331··pse"·id="idm7331 | |||
| 0003b720:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b730:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b740:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b750:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b760:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b770:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b780:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b790:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b7a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b7b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b7c0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b7d0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b7e0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b7f0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b800:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b810:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003b820:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003b830:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b840:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b850:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b860:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b870:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003b880:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b890:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b8a0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b8b0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b8c0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b8d0:·6964·6d37·3333·3222·2074·6162·696e·6465··idm7332"·tabinde | |||
| 0003b8e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b8f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b900:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b910:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b920:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b930:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b940:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b | 0003b6e0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b | 0003b6f0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b | 0003b700:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b | 0003b710:·2269·646d·3733·3331·223e·3c74·6162·6c65··"idm7331"><table | ||
| 0003b | 0003b720:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003b730:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003b740:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003b750:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003b760:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003b770:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003b780:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b | 0003b790:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b | 0003b7a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b | 0003b7b0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b | 0003b7c0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b | 0003b7d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b | 0003b7e0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003b | 0003b7f0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003b | 0003b800:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003b810:·653e·0a64·6e66·2069·6e73·7461·6c6c·2061··e>.dnf·install·a | |||
| 0003ba80:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003ba90:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003baa0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003bab0:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003bac0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003bad0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003bae0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003baf0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003bb00:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003bb10:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003bb20:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003bb30:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003bb40:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003bb50:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003bb60:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003bb70:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003bb80:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003bb90:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003bba0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003bbb0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003bbc0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003bbd0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003bbe0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003bbf0:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003bc00:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003bc10:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003bc20:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003bc30:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003bc40:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003bc50:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003bc60:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003bc70:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003bc80:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003bc90:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003bca0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003bcb0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003bcc0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003bcd0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003bce0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b | 0003b820:·6964·650a·3c2f·636f·6465·3e3c·2f70·7265··ide.</code></pre | ||
| 0003b | 0003b830:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b | 0003b840:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b | 0003b850:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b | 0003b860:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003b | 0003b870:·7267·6574·3d22·2369·646d·3733·3332·2220··rget="#idm7332"· | ||
| 0003b | 0003b880:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b | 0003b890:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b | 0003b8a0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b | 0003b8b0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b | 0003b8c0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b | 0003b8d0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b8e0:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | |||
| 0003b8f0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b900:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b910:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b920:·3733·3332·223e·3c74·6162·6c65·2063·6c61··7332"><table·cla | |||
| 0003b930:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b940:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b950:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| Max diff block lines reached; 33120975/33158125 bytes (99.89%) of diff not shown. | |||
| Offset 15181, 283 lines modified | Offset 15181, 283 lines modified | ||
| 0003b4c0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b4c0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b4d0:·3d22·2369·646d·3834·3830·2220·7461·6269··="#idm8480"·tabi | 0003b4d0:·3d22·2369·646d·3834·3830·2220·7461·6269··="#idm8480"·tabi | ||
| 0003b4e0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b4e0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b4f0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b4f0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b500:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b500:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b510:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b510:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b520:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b520:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b530:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003b540:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b550:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b560:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b570:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b580:·2269·646d·3834·3830·223e·3c74·6162·6c65··"idm8480"><table | |||
| 0003b590:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b5a0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b5b0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b5c0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b5d0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b5e0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b5f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b600:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b610:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b620:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b630:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b640:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b650:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b660:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b670:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b680:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003b690:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003b6a0:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003b6b0:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b6c0:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003b6d0:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003b6e0:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003b6f0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b700:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b710:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b720:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b730:·6172·6765·743d·2223·6964·6d38·3438·3122··arget="#idm8481" | |||
| 0003b740:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b750:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b760:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b770:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b780:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b790:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b7a0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b7b0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b7c0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b7d0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b7e0:·6522·2069·643d·2269·646d·3834·3831·223e··e"·id="idm8481"> | |||
| 0003b7f0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b800:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b810:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b820:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b830:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b840:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b850:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b860:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b870:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b880:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b890:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b8a0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b8b0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b8c0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b8d0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b8e0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b8f0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b900:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b910:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b920:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b930:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b940:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b950:·5449·472d·5248·454c·2d30·392d·3635·3130··TIG-RHEL-09-6510 | |||
| 0003b960:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b970:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b980:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b990:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b9a0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b9b0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b9c0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b9d0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b9e0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b9f0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003ba00:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003ba10:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003ba20:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003ba30:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003ba40:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003ba50:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003ba60:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003ba70:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003ba80:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003ba90:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003baa0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003bab0:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003bac0:·412d·5354·4947·2d52·4845·4c2d·3039·2d36··A-STIG-RHEL-09-6 | |||
| 0003bad0:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003bae0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003baf0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003bb00:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003bb10:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003bb20:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003bb30:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003bb40:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003bb50:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003bb60:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003bb70:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003bb80:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003bb90:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003bba0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003bbb0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003bbc0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003bbd0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003bbe0:·7461·7267·6574·3d22·2369·646d·3834·3832··target="#idm8482 | |||
| 0003bbf0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003bc00:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003bc10:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003bc20:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003bc30:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003bc40:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003bc50:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003bc60:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003bc70:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bc80:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bc90:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bca0:·3d22·6964·6d38·3438·3222·3e3c·7072·653e··="idm8482"><pre> | |||
| Max diff block lines reached; 22687968/22725670 bytes (99.83%) of diff not shown. | |||
| Offset 15187, 282 lines modified | Offset 15187, 282 lines modified | ||
| 0003b520:·6765·743d·2223·6964·6d38·3438·3022·2074··get="#idm8480"·t | 0003b520:·6765·743d·2223·6964·6d38·3438·3022·2074··get="#idm8480"·t | ||
| 0003b530:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b530:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b540:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b540:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b550:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b550:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b560:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b560:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b570:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b570:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b580:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b580:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b590:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003b5a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b5b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b5c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b5d0:·6964·3d22·6964·6d38·3438·3022·3e3c·7461··id="idm8480"><ta | |||
| 0003b5e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b5f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b600:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b610:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b620:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b630:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b640:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b650:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b660:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b670:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b680:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b690:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b6a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b6b0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b6c0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b6d0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b6e0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b6f0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b700:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b710:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b720:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b730:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003b740:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b750:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b760:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b770:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b780:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 0003b790:·3831·2220·7461·6269·6e64·6578·3d22·3022··81"·tabindex="0" | |||
| 0003b7a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b7b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b7c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b7d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b7e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b7f0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b800:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b810:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b820:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b830:·6170·7365·2220·6964·3d22·6964·6d38·3438··apse"·id="idm848 | |||
| 0003b840:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003b850:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b860:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b870:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b880:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b890:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b8a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b8b0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b8c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b8d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b8e0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b8f0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b900:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b910:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b920:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b930:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b940:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b950:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b960:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b970:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b980:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b990:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b9a0:·412d·5354·4947·2d52·4845·4c2d·3039·2d36··A-STIG-RHEL-09-6 | |||
| 0003b9b0:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b9c0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b9d0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b9e0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b9f0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003ba00:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003ba10:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003ba20:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003ba30:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003ba40:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003ba50:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003ba60:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003ba70:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003ba80:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003ba90:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003baa0:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003bab0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003bac0:·7365·6e74·0a20·2077·6865·6e3a·2027·226b··sent.··when:·'"k | |||
| 0003bad0:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | |||
| 0003bae0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003baf0:·270a·2020·7461·6773·3a0a·2020·2d20·434a··'.··tags:.··-·CJ | |||
| 0003bb00:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003bb10:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003bb20:·392d·3635·3130·3130·0a20·202d·204e·4953··9-651010.··-·NIS | |||
| 0003bb30:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003bb40:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003bb50:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003bb60:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003bb70:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003bb80:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003bb90:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003bba0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003bbb0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003bbc0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003bbd0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003bbe0:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003bbf0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003bc00:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003bc10:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003bc20:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003bc30:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003bc40:·3438·3222·2074·6162·696e·6465·783d·2230··482"·tabindex="0 | |||
| 0003bc50:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003bc60:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003bc70:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003bc80:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003bc90:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003bca0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003bcb0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003bcc0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bcd0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bce0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bcf0:·2069·643d·2269·646d·3834·3832·223e·3c70···id="idm8482"><p | |||
| 0003bd00:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| Max diff block lines reached; 23118135/23155699 bytes (99.84%) of diff not shown. | |||
| Offset 15177, 283 lines modified | Offset 15177, 283 lines modified | ||
| 0003b480:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b480:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b490:·6964·6d38·3438·3022·2074·6162·696e·6465··idm8480"·tabinde | 0003b490:·6964·6d38·3438·3022·2074·6162·696e·6465··idm8480"·tabinde | ||
| 0003b4a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b4a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b4b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b4b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b4c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b4c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b4d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b4d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b4e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b4e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b4f0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b500:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b510:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b520:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b530:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b540:·6d38·3438·3022·3e3c·7461·626c·6520·636c··m8480"><table·cl | |||
| 0003b550:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b560:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b570:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b580:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b590:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b5a0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b5b0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b5c0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b5d0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b5e0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b5f0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b600:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b610:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b620:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b630:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b640:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b650:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b660:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b670:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b680:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b690:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b6a0:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003b6b0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b6c0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b6d0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b6e0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b6f0:·6574·3d22·2369·646d·3834·3831·2220·7461··et="#idm8481"·ta | |||
| 0003b700:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b710:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b720:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b730:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b740:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b750:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b760:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b770:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b780:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b790:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b7a0:·6964·3d22·6964·6d38·3438·3122·3e3c·7461··id="idm8481"><ta | |||
| 0003b7b0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b7c0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b7d0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b7e0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b7f0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b800:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b810:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b820:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b830:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b840:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b850:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b860:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b870:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b880:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b890:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b8a0:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b8b0:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b8c0:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b8d0:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b8e0:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b8f0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b900:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b910:·2d52·4845·4c2d·3039·2d36·3531·3031·300a··-RHEL-09-651010. | |||
| 0003b920:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b930:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b940:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b950:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b960:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b970:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b980:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b990:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b9a0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b9b0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b9c0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b9d0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b9e0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003b9f0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003ba00:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003ba10:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003ba20:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003ba30:·2077·6865·6e3a·2027·226b·6572·6e65·6c22···when:·'"kernel" | |||
| 0003ba40:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003ba50:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 0003ba60:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003ba70:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003ba80:·5449·472d·5248·454c·2d30·392d·3635·3130··TIG-RHEL-09-6510 | |||
| 0003ba90:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003baa0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003bab0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003bac0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003bad0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003bae0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003baf0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003bb00:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003bb10:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003bb20:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003bb30:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003bb40:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003bb50:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003bb60:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003bb70:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003bb80:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003bb90:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003bba0:·6765·743d·2223·6964·6d38·3438·3222·2074··get="#idm8482"·t | |||
| 0003bbb0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003bbc0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003bbd0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003bbe0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003bbf0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003bc00:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003bc10:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003bc20:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003bc30:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bc40:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bc50:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bc60:·646d·3834·3832·223e·3c70·7265·3e3c·636f··dm8482"><pre><co | |||
| Max diff block lines reached; 9842427/9880129 bytes (99.62%) of diff not shown. | |||
| Offset 135, 26 lines modified | Offset 135, 48 lines modified | ||
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 139 | ············_\x8c_\x8i_\x8s············6.1.1 | 139 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | include·install_aide | ||
| 148 | class·install_aide·{ | ||
| 149 | ··package·{·'aide': | ||
| 150 | ····ensure·=>·'installed', | ||
| 151 | ··} | ||
| 152 | 147 | dnf·install·aide | |
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | package·install·aide | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 164 | if·rpm·--quiet·-q·kernel;·then | ||
| 165 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 166 | ····dnf·install·-y·"aide" | ||
| 167 | fi | ||
| 168 | else | ||
| 169 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 170 | fi | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 158 | -·name:·Gather·the·package·facts | 176 | -·name:·Gather·the·package·facts |
| 159 | ··package_facts: | 177 | ··package_facts: |
| Offset 185, 55 lines modified | Offset 207, 33 lines modified | ||
| 185 | ··-·PCI-DSSv4-11.5.2 | 207 | ··-·PCI-DSSv4-11.5.2 |
| 186 | ··-·enable_strategy | 208 | ··-·enable_strategy |
| 187 | ··-·low_complexity | 209 | ··-·low_complexity |
| 188 | ··-·low_disruption | 210 | ··-·low_disruption |
| 189 | ··-·medium_severity | 211 | ··-·medium_severity |
| 190 | ··-·no_reboot_needed | 212 | ··-·no_reboot_needed |
| 191 | ··-·package_aide_installed | 213 | ··-·package_aide_installed |
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 193 | [[packages]] | ||
| 194 | name·=·"aide" | ||
| 195 | version·=·"*" | ||
| 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 197 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 198 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 199 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 200 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 201 | dnf·install·aide | ||
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 207 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 208 | if·rpm·--quiet·-q·kernel;·then | ||
| 209 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 210 | ····dnf·install·-y·"aide" | ||
| 211 | fi | ||
| 212 | else | ||
| 213 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 214 | fi | ||
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 215 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 216 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 217 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 218 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 220 | package·--add=aide | 219 | package·--add=aide |
| 221 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 222 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 221 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 223 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 222 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 224 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 223 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 225 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 224 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 225 | include·install_aide | ||
| 226 | 226 | class·install_aide·{ | |
| 227 | ··package·{·'aide': | ||
| 228 | ····ensure·=>·'installed', | ||
| 229 | ··} | ||
| 230 | } | ||
| 227 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 231 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 228 | Run·the·following·command·to·generate·a·new·database: | 232 | Run·the·following·command·to·generate·a·new·database: |
| 229 | $·sudo·/usr/sbin/aide·--init | 233 | $·sudo·/usr/sbin/aide·--init |
| 230 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 234 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 231 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 235 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 232 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 236 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 233 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 237 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 259, 14 lines modified | Offset 259, 28 lines modified | ||
| 259 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 259 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 260 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 260 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 261 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 261 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 262 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 262 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 263 | ············_\x8c_\x8i_\x8s············6.1.1 | 263 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 265 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 265 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 266 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 267 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 268 | if·rpm·--quiet·-q·kernel;·then | ||
| 269 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| Max diff block lines reached; 1112491/1117754 bytes (99.53%) of diff not shown. | |||
| Offset 14856, 295 lines modified | Offset 14856, 295 lines modified | ||
| 0003a070:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003a070:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003a080:·6964·6d31·3236·3731·2220·7461·6269·6e64··idm12671"·tabind | 0003a080:·6964·6d31·3236·3731·2220·7461·6269·6e64··idm12671"·tabind | ||
| 0003a090:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003a090:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003a0a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003a0a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003a0b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003a0b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003a0c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003a0c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003a0d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003a0d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003a0e0:·5265·6d65·6469·6174·696f·6e20· | 0003a0e0:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | ||
| 0003a0f0:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003a100:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003a110:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003a120:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003a130:·646d·3132·3637·3122·3e3c·7461·626c·6520··dm12671"><table· | |||
| 0003a140:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003a150:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003a160:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003a170:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003a180:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003a190:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003a1a0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003a1b0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003a1c0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003a1d0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003a1e0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003a1f0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003a200:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003a210:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003a220:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003a230:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003a240:·5f64·6e66·2d61·7574·6f6d·6174·6963·0a0a··_dnf-automatic.. | |||
| 0003a250:·636c·6173·7320·696e·7374·616c·6c5f·646e··class·install_dn | |||
| 0003a260:·662d·6175·746f·6d61·7469·6320·7b0a·2020··f-automatic·{.·· | |||
| 0003a270:·7061·636b·6167·6520·7b20·2764·6e66·2d61··package·{·'dnf-a | |||
| 0003a280:·7574·6f6d·6174·6963·273a·0a20·2020·2065··utomatic':.····e | |||
| 0003a290:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003a2a0:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003a2b0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003a2c0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003a2d0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003a2e0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003a2f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003a300:·2223·6964·6d31·3236·3732·2220·7461·6269··"#idm12672"·tabi | |||
| 0003a310:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003a320:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003a330:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003a340:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003a350:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003a360:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003a370:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003a380:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003a390:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003a3a0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003a3b0:·3d22·6964·6d31·3236·3732·223e·3c74·6162··="idm12672"><tab | |||
| 0003a3c0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003a3d0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003a3e0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003a3f0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003a400:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003a410:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a420:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003a430:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003a440:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003a450:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003a460:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003a470:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003a480:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003a490:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003a4a0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003a4b0:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003a4c0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003a4d0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003a4e0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003a4f0:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003a500:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003a510:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003a520:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003a530:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003a540:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003a550:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003a560:·6564·0a20·202d·2070·6163·6b61·6765·5f64··ed.··-·package_d | |||
| 0003a570:·6e66·2d61·7574·6f6d·6174·6963·5f69·6e73··nf-automatic_ins | |||
| 0003a580:·7461·6c6c·6564·0a0a·2d20·6e61·6d65·3a20··talled..-·name:· | |||
| 0003a590:·456e·7375·7265·2064·6e66·2d61·7574·6f6d··Ensure·dnf-autom | |||
| 0003a5a0:·6174·6963·2069·7320·696e·7374·616c·6c65··atic·is·installe | |||
| 0003a5b0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003a5c0:·206e·616d·653a·2064·6e66·2d61·7574·6f6d···name:·dnf-autom | |||
| 0003a5d0:·6174·6963·0a20·2020·2073·7461·7465·3a20··atic.····state:· | |||
| 0003a5e0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003a5f0:·6e6f·7420·2820·226b·6572·6e65·6c22·2069··not·(·"kernel"·i | |||
| 0003a600:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003a610:·7061·636b·6167·6573·2061·6e64·2022·7270··packages·and·"rp | |||
| 0003a620:·6d2d·6f73·7472·6565·2220·696e·2061·6e73··m-ostree"·in·ans | |||
| 0003a630:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003a640:·6765·730a·2020·2020·616e·6420·2262·6f6f··ges.····and·"boo | |||
| 0003a650:·7463·2220·696e·2061·6e73·6962·6c65·5f66··tc"·in·ansible_f | |||
| 0003a660:·6163·7473·2e70·6163·6b61·6765·7320·616e··acts.packages·an | |||
| 0003a670:·6420·6e6f·7420·226f·7065·6e73·6869·6674··d·not·"openshift | |||
| 0003a680:·2d6b·7562·656c·6574·2220·696e·2061·6e73··-kubelet"·in·ans | |||
| 0003a690:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003a6a0:·6765·730a·2020·2020·290a·2020·7461·6773··ges.····).··tags | |||
| 0003a6b0:·3a0a·2020·2d20·656e·6162·6c65·5f73·7472··:.··-·enable_str | |||
| 0003a6c0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003a6d0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003a6e0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003a6f0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003a700:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003a710:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003a720:·5f64·6e66·2d61·7574·6f6d·6174·6963·5f69··_dnf-automatic_i | |||
| 0003a730:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003a740:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003a750:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003a760:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003a770:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003a780:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 0003a790:·3236·3733·2220·7461·6269·6e64·6578·3d22··2673"·tabindex=" | |||
| 0003a7a0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003a7b0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003a7c0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003a7d0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003a7e0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003a7f0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003a800:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003a810:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003a820:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003a830:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003a840:·2220·6964·3d22·6964·6d31·3236·3733·223e··"·id="idm12673"> | |||
| 0003a850:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| Max diff block lines reached; 3375652/3415010 bytes (98.85%) of diff not shown. | |||
| Offset 101, 26 lines modified | Offset 101, 49 lines modified | ||
| 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 102 | ············suitable·for·automatic,·regular·execution. | 102 | ············suitable·for·automatic,·regular·execution. |
| 103 | Severity: ··medium | 103 | Severity: ··medium |
| 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 105 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 105 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 113 | include·install_dnf-automatic | ||
| 113 | dnf·install·dnf-automatic | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 114 | c | 119 | package·install·dnf-automatic |
| 115 | ··package·{·'dnf-automatic': | ||
| 116 | ····ensure·=>·'installed', | ||
| 117 | ··} | ||
| 118 | 120 | _.R_.e_.m_.e_.d_.i_.a_.t_.i_.o_.n_.·_.O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_.t_.·_.s_.n_.i_.p_.p_.e_.t_.·_.⇲ | |
| 121 | [[packages]] | ||
| 122 | name·=·"dnf-automatic" | ||
| 123 | version·=·"*" | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 130 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 131 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 132 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 133 | ····dnf·install·-y·"dnf-automatic" | ||
| 134 | fi | ||
| 135 | else | ||
| 136 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 137 | fi | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 124 | -·name:·Gather·the·package·facts | 143 | -·name:·Gather·the·package·facts |
| 125 | ··package_facts: | 144 | ··package_facts: |
| Offset 144, 56 lines modified | Offset 167, 33 lines modified | ||
| 144 | ··tags: | 167 | ··tags: |
| 145 | ··-·enable_strategy | 168 | ··-·enable_strategy |
| 146 | ··-·low_complexity | 169 | ··-·low_complexity |
| 147 | ··-·low_disruption | 170 | ··-·low_disruption |
| 148 | ··-·medium_severity | 171 | ··-·medium_severity |
| 149 | ··-·no_reboot_needed | 172 | ··-·no_reboot_needed |
| 150 | ··-·package_dnf-automatic_installed | 173 | ··-·package_dnf-automatic_installed |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | [[packages]] | ||
| 153 | name·=·"dnf-automatic" | ||
| 154 | version·=·"*" | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | dnf·install·dnf-automatic | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 167 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 168 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 169 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 170 | ····dnf·install·-y·"dnf-automatic" | ||
| 171 | fi | ||
| 172 | else | ||
| 173 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 174 | fi | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 180 | package·--add=dnf-automatic | 179 | package·--add=dnf-automatic |
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 185 | include·install_dnf-automatic | ||
| 186 | class·install_dnf-automatic·{ | ||
| 186 | package· | 187 | ··package·{·'dnf-automatic': |
| 188 | ····ensure·=>·'installed', | ||
| 189 | ··} | ||
| 190 | } | ||
| 187 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 188 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 192 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 189 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 193 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 190 | automatic.conf. | 194 | automatic.conf. |
| 191 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 195 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 192 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 196 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 193 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 197 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 203, 54 lines modified | Offset 203, 14 lines modified | ||
| 203 | Severity: ··medium | 203 | Severity: ··medium |
| 204 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 204 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 205 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 205 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 206 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 206 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 207 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 207 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 208 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 | 208 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 |
| 209 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 209 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 210 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 211 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 212 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 213 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| Max diff block lines reached; 241800/248245 bytes (97.40%) of diff not shown. | |||
| Offset 15233, 251 lines modified | Offset 15233, 251 lines modified | ||
| 0003b800:·612d·7461·7267·6574·3d22·2369·646d·3932··a-target="#idm92 | 0003b800:·612d·7461·7267·6574·3d22·2369·646d·3932··a-target="#idm92 | ||
| 0003b810:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | 0003b810:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | ||
| 0003b820:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b820:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b830:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b830:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b840:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b840:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b850:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b850:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b860:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b860:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b870:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b880:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b890:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b8a0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b8b0:·6522·2069·643d·2269·646d·3932·3530·223e··e"·id="idm9250"> | |||
| 0003b8c0:·3c70·7265·3e3c·636f·6465·3e0a·7661·725f··<pre><code>.var_ | |||
| 0003b8d0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 0003b8e0:·6c69·6379·3d27·3c61·6262·7220·7469·746c··licy='<abbr·titl | |||
| 0003b8f0:·653d·2266·726f·6d20·5072·6f66·696c·652f··e="from·Profile/ | |||
| 0003b900:·7265·6669·6e65·2d76·616c·7565·3a20·7863··refine-value:·xc | |||
| 0003b910:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | |||
| 0003b920:·6374·2e63·6f6e·7465·6e74·5f76·616c·7565··ct.content_value | |||
| 0003b870:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b880:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b890:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b8a0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b8b0:·6170·7365·2220·6964·3d22·6964·6d39·3235··apse"·id="idm925 | |||
| 0003b8c0:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003b8d0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b8e0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b8f0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b900:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b910:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b920:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b930:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b940:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b950:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b960:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b970:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b980:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b990:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003b9a0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b9b0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b9c0:·616d·653a·2058·4343·4446·2056·616c·7565··ame:·XCCDF·Value | |||
| 0003b9 | 0003b930:·5f76·6172·5f73·7973·7465·6d5f·6372·7970··_var_system_cryp | ||
| 0003b9e0:·746f·5f70·6f6c·6963·7920·2320·7072·6f6d··to_policy·#·prom | |||
| 0003b9f0:·6f74·6520·746f·2076·6172·6961·626c·650a··ote·to·variable. | |||
| 0003b | 0003b940:·746f·5f70·6f6c·6963·7922·3e44·4546·4155··to_policy">DEFAU | ||
| 0003b950:·4c54·3c2f·6162·6272·3e27·0a0a·0a73·7464··LT</abbr>'...std | |||
| 0003b960:·6572·725f·6f66·5f63·616c·6c3d·2428·7570··err_of_call=$(up | |||
| 0003b970:·6461·7465·2d63·7279·7074·6f2d·706f·6c69··date-crypto-poli | |||
| 0003b980:·6369·6573·202d·2d73·6574·2024·7b76·6172··cies·--set·${var | |||
| 0003b990:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 0003b9a0:·6f6c·6963·797d·2032·2667·743b·2661·6d70··olicy}·2>& | |||
| 0003b9b0:·3b31·2026·6774·3b20·2f64·6576·2f6e·756c··;1·>·/dev/nul | |||
| 0003b9c0:·6c29·0a72·633d·243f·0a0a·6966·2074·6573··l).rc=$?..if·tes | |||
| 0003b9d0:·7420·2224·7263·2220·3d20·3132·373b·2074··t·"$rc"·=·127;·t | |||
| 0003b9e0:·6865·6e0a·0965·6368·6f20·2224·7374·6465··hen..echo·"$stde | |||
| 0003b9f0:·7272·5f6f·665f·6361·6c6c·2220·2667·743b··rr_of_call"·> | |||
| 0003ba00:·2661·6d70·3b32·0a09·6563·686f·2022·4d61··&2..echo·"Ma | |||
| 0003ba10:·6b65·2073·7572·6520·7468·6174·2074·6865··ke·sure·that·the | |||
| 0003ba20:·2073·6372·6970·7420·6973·2069·6e73·7461···script·is·insta | |||
| 0003ba30:·6c6c·6564·206f·6e20·7468·6520·7265·6d65··lled·on·the·reme | |||
| 0003ba40:·6469·6174·6564·2073·7973·7465·6d2e·2220··diated·system."· | |||
| 0003ba50:·2667·743b·2661·6d70·3b32·0a09·6563·686f··>&2..echo | |||
| 0003ba60:·2022·5365·6520·6f75·7470·7574·206f·6620···"See·output·of· | |||
| 0003ba70:·7468·6520·2764·6e66·2070·726f·7669·6465··the·'dnf·provide | |||
| 0003ba80:·7320·7570·6461·7465·2d63·7279·7074·6f2d··s·update-crypto- | |||
| 0003ba90:·706f·6c69·6369·6573·2720·636f·6d6d·616e··policies'·comman | |||
| 0003baa0:·6422·2026·6774·3b26·616d·703b·320a·0965··d"·>&2..e | |||
| 0003bab0:·6368·6f20·2274·6f20·7365·6520·7768·6174··cho·"to·see·what | |||
| 0003bac0:·2070·6163·6b61·6765·2074·6f20·2872·6529···package·to·(re) | |||
| 0003bad0:·696e·7374·616c·6c22·2026·6774·3b26·616d··install"·>&am | |||
| 0003bae0:·703b·320a·0a09·6661·6c73·6520·2023·2065··p;2...false··#·e | |||
| 0003baf0:·6e64·2077·6974·6820·616e·2065·7272·6f72··nd·with·an·error | |||
| 0003bb00:·2063·6f64·650a·656c·6966·2074·6573·7420···code.elif·test· | |||
| 0003bb10:·2224·7263·2220·213d·2030·3b20·7468·656e··"$rc"·!=·0;·then | |||
| 0003bb20:·0a09·6563·686f·2022·4572·726f·7220·696e··..echo·"Error·in | |||
| 0003bb30:·766f·6b69·6e67·2074·6865·2075·7064·6174··voking·the·updat | |||
| 0003bb40:·652d·6372·7970·746f·2d70·6f6c·6963·6965··e-crypto-policie | |||
| 0003bb50:·7320·7363·7269·7074·3a20·2473·7464·6572··s·script:·$stder | |||
| 0003bb60:·725f·6f66·5f63·616c·6c22·2026·6774·3b26··r_of_call"·>& | |||
| 0003bb70:·616d·703b·320a·0966·616c·7365·2020·2320··amp;2..false··#· | |||
| 0003bb80:·656e·6420·7769·7468·2061·6e20·6572·726f··end·with·an·erro | |||
| 0003bb90:·7220·636f·6465·0a66·690a·3c2f·636f·6465··r·code.fi.</code | |||
| 0003bba0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003bbb0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003bbc0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003bbd0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003bbe0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003bbf0:·3932·3532·2220·7461·6269·6e64·6578·3d22··9252"·tabindex=" | |||
| 0003bc00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003bc10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003bc20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003bc30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003bc40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003bc50:·6469·6174·696f·6e20·4b75·6265·726e·6574··diation·Kubernet | |||
| 0003bc60:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 0003bc70:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bc80:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bc90:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bca0:·646d·3932·3532·223e·3c74·6162·6c65·2063··dm9252"><table·c | |||
| 0003bcb0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003bcc0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003bcd0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003bce0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003bcf0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bd00:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bd10:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003bd20:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003bd30:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bd40:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003bd50:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | |||
| 0003bd60:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003bd70:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003bd80:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003bd90:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003bda0:·3e2d·2d2d·0a61·7069·5665·7273·696f·6e3a··>---.apiVersion: | |||
| 0003bdb0:·206d·6163·6869·6e65·636f·6e66·6967·7572···machineconfigur | |||
| 0003bdc0:·6174·696f·6e2e·6f70·656e·7368·6966·742e··ation.openshift. | |||
| 0003bdd0:·696f·2f76·310a·6b69·6e64·3a20·4d61·6368··io/v1.kind:·Mach | |||
| 0003bde0:·696e·6543·6f6e·6669·670a·7370·6563·3a0a··ineConfig.spec:. | |||
| 0003bdf0:·2020·636f·6e66·6967·3a0a·2020·2020·6967····config:.····ig | |||
| 0003be00:·6e69·7469·6f6e·3a0a·2020·2020·2020·7665··nition:.······ve | |||
| 0003be10:·7273·696f·6e3a·2033·2e31·2e30·0a20·2020··rsion:·3.1.0.··· | |||
| 0003be20:·2073·7973·7465·6d64·3a0a·2020·2020·2020···systemd:.······ | |||
| 0003be30:·756e·6974·733a·0a20·2020·2020·2020·202d··units:.········- | |||
| 0003be40:·206e·616d·653a·2063·6f6e·6669·6775·7265···name:·configure | |||
| 0003be50:·2d63·7279·7074·6f2d·706f·6c69·6379·2e73··-crypto-policy.s | |||
| 0003be60:·6572·7669·6365·0a20·2020·2020·2020·2020··ervice.········· | |||
| Max diff block lines reached; 13136156/13169442 bytes (99.75%) of diff not shown. | |||
| Offset 120, 14 lines modified | Offset 120, 58 lines modified | ||
| 120 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 120 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 121 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 121 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 122 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 122 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 124 | ············_\x8c_\x8i_\x8s······1.6.1 | 124 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | var_system_crypto_policy='DEFAULT' | ||
| 129 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 130 | rc=$? | ||
| 131 | if·test·"$rc"·=·127;·then | ||
| 132 | » echo·"$stderr_of_call"·>&2 | ||
| 133 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 134 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 135 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 136 | » false··#·end·with·an·error·code | ||
| 137 | elif·test·"$rc"·!=·0;·then | ||
| 138 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 139 | » false··#·end·with·an·error·code | ||
| 140 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 146 | --- | ||
| 147 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 148 | kind:·MachineConfig | ||
| 149 | spec: | ||
| 150 | ··config: | ||
| 151 | ····ignition: | ||
| 152 | ······version:·3.1.0 | ||
| 153 | ····systemd: | ||
| 154 | ······units: | ||
| 155 | ········-·name:·configure-crypto-policy.service | ||
| 156 | ··········enabled:·true | ||
| 157 | ··········contents:·| | ||
| 158 | ············[Unit] | ||
| 159 | ············Before=kubelet.service | ||
| 160 | ············[Service] | ||
| 161 | ············Type=oneshot | ||
| 162 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 163 | ············RemainAfterExit=yes | ||
| 164 | ············[Install] | ||
| 165 | ············WantedBy=multi-user.target | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 132 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 171 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 133 | ··set_fact: | 172 | ··set_fact: |
| Offset 178, 58 lines modified | Offset 222, 14 lines modified | ||
| 178 | ··-·PCI-DSSv4-2.2.7 | 222 | ··-·PCI-DSSv4-2.2.7 |
| 179 | ··-·configure_crypto_policy | 223 | ··-·configure_crypto_policy |
| 180 | ··-·high_severity | 224 | ··-·high_severity |
| 181 | ··-·low_complexity | 225 | ··-·low_complexity |
| 182 | ··-·low_disruption | 226 | ··-·low_disruption |
| 183 | ··-·no_reboot_needed | 227 | ··-·no_reboot_needed |
| 184 | ··-·restrict_strategy | 228 | ··-·restrict_strategy |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 190 | --- | ||
| 191 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 192 | kind:·MachineConfig | ||
| 193 | spec: | ||
| 194 | ··config: | ||
| 195 | ····ignition: | ||
| 196 | ······version:·3.1.0 | ||
| 197 | ····systemd: | ||
| 198 | ······units: | ||
| 199 | ········-·name:·configure-crypto-policy.service | ||
| 200 | ··········enabled:·true | ||
| 201 | ··········contents:·| | ||
| 202 | ············[Unit] | ||
| 203 | ············Before=kubelet.service | ||
| 204 | ············[Service] | ||
| 205 | ············Type=oneshot | ||
| 206 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 207 | ············RemainAfterExit=yes | ||
| 208 | ············[Install] | ||
| 209 | ············WantedBy=multi-user.target | ||
| 210 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 211 | var_system_crypto_policy='DEFAULT' | ||
| 212 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 213 | rc=$? | ||
| 214 | if·test·"$rc"·=·127;·then | ||
| 215 | » echo·"$stderr_of_call"·>&2 | ||
| 216 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 217 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 218 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 219 | » false··#·end·with·an·error·code | ||
| 220 | elif·test·"$rc"·!=·0;·then | ||
| 221 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 222 | » false··#·end·with·an·error·code | ||
| 223 | fi | ||
| 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 229 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 225 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 230 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 226 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 231 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 227 | Severity: ··medium | 232 | Severity: ··medium |
| 228 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 233 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 229 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 234 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 230 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 235 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 237, 14 lines modified | Offset 237, 19 lines modified | ||
| 237 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 237 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 238 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 238 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 240 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 240 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 241 | ············_\x8c_\x8i_\x8s······1.6.2 | 241 | ············_\x8c_\x8i_\x8s······1.6.2 |
| 242 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 242 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 243 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule | 243 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule |
| 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1175779/1181382 bytes (99.53%) of diff not shown. | |||
| Offset 15193, 251 lines modified | Offset 15193, 251 lines modified | ||
| 0003b580:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | 0003b580:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | ||
| 0003b590:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | 0003b590:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | ||
| 0003b5a0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b5a0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b5b0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b5b0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b5c0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b5c0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b5d0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b5d0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b5e0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b5e0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b5f0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b600:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b610:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b620:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b630:·7365·2220·6964·3d22·6964·6d39·3235·3022··se"·id="idm9250" | |||
| 0003b640:·3e3c·7072·653e·3c63·6f64·653e·0a76·6172··><pre><code>.var | |||
| 0003b650:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 0003b660:·6f6c·6963·793d·273c·6162·6272·2074·6974··olicy='<abbr·tit | |||
| 0003b670:·6c65·3d22·6672·6f6d·2050·726f·6669·6c65··le="from·Profile | |||
| 0003b680:·2f72·6566·696e·652d·7661·6c75·653a·2078··/refine-value:·x | |||
| 0003b690:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | |||
| 0003b6a0:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | |||
| 0003b6b0:·655f·7661·725f·7379·7374·656d·5f63·7279··e_var_system_cry | |||
| 0003b6c0:·7074·6f5f·706f·6c69·6379·223e·4445·4641··pto_policy">DEFA | |||
| 0003b6d0:·554c·543c·2f61·6262·723e·270a·0a0a·7374··ULT</abbr>'...st | |||
| 0003b6e0:·6465·7272·5f6f·665f·6361·6c6c·3d24·2875··derr_of_call=$(u | |||
| 0003b6f0:·7064·6174·652d·6372·7970·746f·2d70·6f6c··pdate-crypto-pol | |||
| 0003b700:·6963·6965·7320·2d2d·7365·7420·247b·7661··icies·--set·${va | |||
| 0003b710:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | |||
| 0003b720:·706f·6c69·6379·7d20·3226·6774·3b26·616d··policy}·2>&am | |||
| 0003b730:·703b·3120·2667·743b·202f·6465·762f·6e75··p;1·>·/dev/nu | |||
| 0003b740:·6c6c·290a·7263·3d24·3f0a·0a69·6620·7465··ll).rc=$?..if·te | |||
| 0003b750:·7374·2022·2472·6322·203d·2031·3237·3b20··st·"$rc"·=·127;· | |||
| 0003b760:·7468·656e·0a09·6563·686f·2022·2473·7464··then..echo·"$std | |||
| 0003b770:·6572·725f·6f66·5f63·616c·6c22·2026·6774··err_of_call"·> | |||
| 0003b780:·3b26·616d·703b·320a·0965·6368·6f20·224d··;&2..echo·"M | |||
| 0003b790:·616b·6520·7375·7265·2074·6861·7420·7468··ake·sure·that·th | |||
| 0003b7a0:·6520·7363·7269·7074·2069·7320·696e·7374··e·script·is·inst | |||
| 0003b7b0:·616c·6c65·6420·6f6e·2074·6865·2072·656d··alled·on·the·rem | |||
| 0003b7c0:·6564·6961·7465·6420·7379·7374·656d·2e22··ediated·system." | |||
| 0003b7d0:·2026·6774·3b26·616d·703b·320a·0965·6368···>&2..ech | |||
| 0003b7e0:·6f20·2253·6565·206f·7574·7075·7420·6f66··o·"See·output·of | |||
| 0003b7f0:·2074·6865·2027·646e·6620·7072·6f76·6964···the·'dnf·provid | |||
| 0003b800:·6573·2075·7064·6174·652d·6372·7970·746f··es·update-crypto | |||
| 0003b810:·2d70·6f6c·6963·6965·7327·2063·6f6d·6d61··-policies'·comma | |||
| 0003b820:·6e64·2220·2667·743b·2661·6d70·3b32·0a09··nd"·>&2.. | |||
| 0003b830:·6563·686f·2022·746f·2073·6565·2077·6861··echo·"to·see·wha | |||
| 0003b840:·7420·7061·636b·6167·6520·746f·2028·7265··t·package·to·(re | |||
| 0003b850:·2969·6e73·7461·6c6c·2220·2667·743b·2661··)install"·>&a | |||
| 0003b860:·6d70·3b32·0a0a·0966·616c·7365·2020·2320··mp;2...false··#· | |||
| 0003b870:·656e·6420·7769·7468·2061·6e20·6572·726f··end·with·an·erro | |||
| 0003b880:·7220·636f·6465·0a65·6c69·6620·7465·7374··r·code.elif·test | |||
| 0003b890:·2022·2472·6322·2021·3d20·303b·2074·6865···"$rc"·!=·0;·the | |||
| 0003b8a0:·6e0a·0965·6368·6f20·2245·7272·6f72·2069··n..echo·"Error·i | |||
| 0003b8b0:·6e76·6f6b·696e·6720·7468·6520·7570·6461··nvoking·the·upda | |||
| 0003b8c0:·7465·2d63·7279·7074·6f2d·706f·6c69·6369··te-crypto-polici | |||
| 0003b8d0:·6573·2073·6372·6970·743a·2024·7374·6465··es·script:·$stde | |||
| 0003b8e0:·7272·5f6f·665f·6361·6c6c·2220·2667·743b··rr_of_call"·> | |||
| 0003b8f0:·2661·6d70·3b32·0a09·6661·6c73·6520·2023··&2..false··# | |||
| 0003b900:·2065·6e64·2077·6974·6820·616e·2065·7272···end·with·an·err | |||
| 0003b910:·6f72·2063·6f64·650a·6669·0a3c·2f63·6f64··or·code.fi.</cod | |||
| 0003b920:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b930:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b940:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b950:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b960:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b970:·6d39·3235·3222·2074·6162·696e·6465·783d··m9252"·tabindex= | |||
| 0003b980:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b990:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b9a0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b9b0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b9c0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b9d0:·6564·6961·7469·6f6e·204b·7562·6572·6e65··ediation·Kuberne | |||
| 0003b9e0:·7465·7320·736e·6970·7065·7420·e287·b23c··tes·snippet·...< | |||
| 0003b9f0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003ba00:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003ba10:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003ba20:·6964·6d39·3235·3222·3e3c·7461·626c·6520··idm9252"><table· | |||
| 0003ba30:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003ba40:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003ba50:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003ba60:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003ba70:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003ba80:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ba90:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003baa0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003bab0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bac0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003bad0:·3e3c·7464·3e74·7275·653c·2f74·643e·3c2f··><td>true</td></ | |||
| 0003bae0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003baf0:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | |||
| 0003bb00:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | |||
| 0003bb10:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003bb20:·653e·2d2d·2d0a·6170·6956·6572·7369·6f6e··e>---.apiVersion | |||
| 0003bb30:·3a20·6d61·6368·696e·6563·6f6e·6669·6775··:·machineconfigu | |||
| 0003bb40:·7261·7469·6f6e·2e6f·7065·6e73·6869·6674··ration.openshift | |||
| 0003bb50:·2e69·6f2f·7631·0a6b·696e·643a·204d·6163··.io/v1.kind:·Mac | |||
| 0003bb60:·6869·6e65·436f·6e66·6967·0a73·7065·633a··hineConfig.spec: | |||
| 0003bb70:·0a20·2063·6f6e·6669·673a·0a20·2020·2069··.··config:.····i | |||
| 0003bb80:·676e·6974·696f·6e3a·0a20·2020·2020·2076··gnition:.······v | |||
| 0003bb90:·6572·7369·6f6e·3a20·332e·312e·300a·2020··ersion:·3.1.0.·· | |||
| 0003bba0:·2020·7379·7374·656d·643a·0a20·2020·2020····systemd:.····· | |||
| 0003bbb0:·2075·6e69·7473·3a0a·2020·2020·2020·2020···units:.········ | |||
| 0003bbc0:·2d20·6e61·6d65·3a20·636f·6e66·6967·7572··-·name:·configur | |||
| 0003bbd0:·652d·6372·7970·746f·2d70·6f6c·6963·792e··e-crypto-policy. | |||
| 0003bbe0:·7365·7276·6963·650a·2020·2020·2020·2020··service.········ | |||
| 0003bbf0:·2020·656e·6162·6c65·643a·2074·7275·650a····enabled:·true. | |||
| 0003bc00:·2020·2020·2020·2020·2020·636f·6e74·656e············conten | |||
| 0003bc10:·7473·3a20·7c0a·2020·2020·2020·2020·2020··ts:·|.·········· | |||
| 0003bc20:·2020·5b55·6e69·745d·0a20·2020·2020·2020····[Unit].······· | |||
| 0003bc30:·2020·2020·2042·6566·6f72·653d·6b75·6265·······Before=kube | |||
| 0003bc40:·6c65·742e·7365·7276·6963·650a·2020·2020··let.service.···· | |||
| 0003bc50:·2020·2020·2020·2020·5b53·6572·7669·6365··········[Service | |||
| 0003bc60:·5d0a·2020·2020·2020·2020·2020·2020·5479··].············Ty | |||
| 0003bc70:·7065·3d6f·6e65·7368·6f74·0a20·2020·2020··pe=oneshot.····· | |||
| 0003bc80:·2020·2020·2020·2045·7865·6353·7461·7274·········ExecStart | |||
| 0003bc90:·3d75·7064·6174·652d·6372·7970·746f·2d70··=update-crypto-p | |||
| 0003bca0:·6f6c·6963·6965·7320·2d2d·7365·7420·7b7b··olicies·--set·{{ | |||
| 0003bcb0:·2e76·6172·5f73·7973·7465·6d5f·6372·7970··.var_system_cryp | |||
| 0003bcc0:·746f·5f70·6f6c·6963·797d·7d0a·2020·2020··to_policy}}.···· | |||
| 0003bcd0:·2020·2020·2020·2020·5265·6d61·696e·4166··········RemainAf | |||
| 0003bce0:·7465·7245·7869·743d·7965·730a·2020·2020··terExit=yes.···· | |||
| 0003bcf0:·2020·2020·2020·2020·5b49·6e73·7461·6c6c··········[Install | |||
| 0003bd00:·5d0a·2020·2020·2020·2020·2020·2020·5761··].············Wa | |||
| 0003bd10:·6e74·6564·4279·3d6d·756c·7469·2d75·7365··ntedBy=multi-use | |||
| 0003bd20:·722e·7461·7267·6574·0a3c·2f63·6f64·653e··r.target.</code> | |||
| 0003bd30:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003bd40:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003bd50:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003bd60:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| Max diff block lines reached; 8973079/9006365 bytes (99.63%) of diff not shown. | |||
| Offset 112, 14 lines modified | Offset 112, 58 lines modified | ||
| 112 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 112 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 113 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 113 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 114 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 114 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 116 | ············_\x8c_\x8i_\x8s······1.6.1 | 116 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 120 | var_system_crypto_policy='DEFAULT' | ||
| 121 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 122 | rc=$? | ||
| 123 | if·test·"$rc"·=·127;·then | ||
| 124 | » echo·"$stderr_of_call"·>&2 | ||
| 125 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 126 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 127 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 128 | » false··#·end·with·an·error·code | ||
| 129 | elif·test·"$rc"·!=·0;·then | ||
| 130 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 131 | » false··#·end·with·an·error·code | ||
| 132 | fi | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 138 | --- | ||
| 139 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 140 | kind:·MachineConfig | ||
| 141 | spec: | ||
| 142 | ··config: | ||
| 143 | ····ignition: | ||
| 144 | ······version:·3.1.0 | ||
| 145 | ····systemd: | ||
| 146 | ······units: | ||
| 147 | ········-·name:·configure-crypto-policy.service | ||
| 148 | ··········enabled:·true | ||
| 149 | ··········contents:·| | ||
| 150 | ············[Unit] | ||
| 151 | ············Before=kubelet.service | ||
| 152 | ············[Service] | ||
| 153 | ············Type=oneshot | ||
| 154 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 155 | ············RemainAfterExit=yes | ||
| 156 | ············[Install] | ||
| 157 | ············WantedBy=multi-user.target | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 124 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 163 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 125 | ··set_fact: | 164 | ··set_fact: |
| Offset 170, 58 lines modified | Offset 214, 14 lines modified | ||
| 170 | ··-·PCI-DSSv4-2.2.7 | 214 | ··-·PCI-DSSv4-2.2.7 |
| 171 | ··-·configure_crypto_policy | 215 | ··-·configure_crypto_policy |
| 172 | ··-·high_severity | 216 | ··-·high_severity |
| 173 | ··-·low_complexity | 217 | ··-·low_complexity |
| 174 | ··-·low_disruption | 218 | ··-·low_disruption |
| 175 | ··-·no_reboot_needed | 219 | ··-·no_reboot_needed |
| 176 | ··-·restrict_strategy | 220 | ··-·restrict_strategy |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 182 | --- | ||
| 183 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 184 | kind:·MachineConfig | ||
| 185 | spec: | ||
| 186 | ··config: | ||
| 187 | ····ignition: | ||
| 188 | ······version:·3.1.0 | ||
| 189 | ····systemd: | ||
| 190 | ······units: | ||
| 191 | ········-·name:·configure-crypto-policy.service | ||
| 192 | ··········enabled:·true | ||
| 193 | ··········contents:·| | ||
| 194 | ············[Unit] | ||
| 195 | ············Before=kubelet.service | ||
| 196 | ············[Service] | ||
| 197 | ············Type=oneshot | ||
| 198 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 199 | ············RemainAfterExit=yes | ||
| 200 | ············[Install] | ||
| 201 | ············WantedBy=multi-user.target | ||
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 203 | var_system_crypto_policy='DEFAULT' | ||
| 204 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 205 | rc=$? | ||
| 206 | if·test·"$rc"·=·127;·then | ||
| 207 | » echo·"$stderr_of_call"·>&2 | ||
| 208 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 209 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 210 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 211 | » false··#·end·with·an·error·code | ||
| 212 | elif·test·"$rc"·!=·0;·then | ||
| 213 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 214 | » false··#·end·with·an·error·code | ||
| 215 | fi | ||
| 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 221 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 217 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 222 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 218 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 223 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 219 | Severity: ··medium | 224 | Severity: ··medium |
| 220 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 225 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 221 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 226 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 222 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 227 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 229, 14 lines modified | Offset 229, 19 lines modified | ||
| 229 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 229 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 230 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 230 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 231 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 231 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 233 | ············_\x8c_\x8i_\x8s······1.6.2 | 233 | ············_\x8c_\x8i_\x8s······1.6.2 |
| 234 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 234 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 235 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule | 235 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 875098/880701 bytes (99.36%) of diff not shown. | |||
| Offset 15234, 251 lines modified | Offset 15234, 251 lines modified | ||
| 0003b810:·612d·7461·7267·6574·3d22·2369·646d·3932··a-target="#idm92 | 0003b810:·612d·7461·7267·6574·3d22·2369·646d·3932··a-target="#idm92 | ||
| 0003b820:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | 0003b820:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | ||
| 0003b830:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b830:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b840:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b840:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b850:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b850:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b860:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b860:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b870:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b870:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b880:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b890:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b8a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b8b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b8c0:·6522·2069·643d·2269·646d·3932·3530·223e··e"·id="idm9250"> | |||
| 0003b8d0:·3c70·7265·3e3c·636f·6465·3e0a·7661·725f··<pre><code>.var_ | |||
| 0003b8e0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 0003b8f0:·6c69·6379·3d27·3c61·6262·7220·7469·746c··licy='<abbr·titl | |||
| 0003b900:·653d·2266·726f·6d20·5072·6f66·696c·652f··e="from·Profile/ | |||
| 0003b910:·7265·6669·6e65·2d76·616c·7565·3a20·7863··refine-value:·xc | |||
| 0003b920:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | |||
| 0003b930:·6374·2e63·6f6e·7465·6e74·5f76·616c·7565··ct.content_value | |||
| 0003b880:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b890:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b8a0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b8b0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b8c0:·6170·7365·2220·6964·3d22·6964·6d39·3235··apse"·id="idm925 | |||
| 0003b8d0:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003b8e0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b8f0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b900:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b910:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b920:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b930:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b940:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b950:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b960:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b970:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b980:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b990:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b9a0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003b9b0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b9c0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b9d0:·616d·653a·2058·4343·4446·2056·616c·7565··ame:·XCCDF·Value | |||
| 0003b9 | 0003b940:·5f76·6172·5f73·7973·7465·6d5f·6372·7970··_var_system_cryp | ||
| 0003b9f0:·746f·5f70·6f6c·6963·7920·2320·7072·6f6d··to_policy·#·prom | |||
| 0003ba00:·6f74·6520·746f·2076·6172·6961·626c·650a··ote·to·variable. | |||
| 0003b | 0003b950:·746f·5f70·6f6c·6963·7922·3e44·4546·4155··to_policy">DEFAU | ||
| 0003b960:·4c54·3c2f·6162·6272·3e27·0a0a·0a73·7464··LT</abbr>'...std | |||
| 0003b970:·6572·725f·6f66·5f63·616c·6c3d·2428·7570··err_of_call=$(up | |||
| 0003b980:·6461·7465·2d63·7279·7074·6f2d·706f·6c69··date-crypto-poli | |||
| 0003b990:·6369·6573·202d·2d73·6574·2024·7b76·6172··cies·--set·${var | |||
| 0003b9a0:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 0003b9b0:·6f6c·6963·797d·2032·2667·743b·2661·6d70··olicy}·2>& | |||
| 0003b9c0:·3b31·2026·6774·3b20·2f64·6576·2f6e·756c··;1·>·/dev/nul | |||
| 0003b9d0:·6c29·0a72·633d·243f·0a0a·6966·2074·6573··l).rc=$?..if·tes | |||
| 0003b9e0:·7420·2224·7263·2220·3d20·3132·373b·2074··t·"$rc"·=·127;·t | |||
| 0003b9f0:·6865·6e0a·0965·6368·6f20·2224·7374·6465··hen..echo·"$stde | |||
| 0003ba00:·7272·5f6f·665f·6361·6c6c·2220·2667·743b··rr_of_call"·> | |||
| 0003ba10:·2661·6d70·3b32·0a09·6563·686f·2022·4d61··&2..echo·"Ma | |||
| 0003ba20:·6b65·2073·7572·6520·7468·6174·2074·6865··ke·sure·that·the | |||
| 0003ba30:·2073·6372·6970·7420·6973·2069·6e73·7461···script·is·insta | |||
| 0003ba40:·6c6c·6564·206f·6e20·7468·6520·7265·6d65··lled·on·the·reme | |||
| 0003ba50:·6469·6174·6564·2073·7973·7465·6d2e·2220··diated·system."· | |||
| 0003ba60:·2667·743b·2661·6d70·3b32·0a09·6563·686f··>&2..echo | |||
| 0003ba70:·2022·5365·6520·6f75·7470·7574·206f·6620···"See·output·of· | |||
| 0003ba80:·7468·6520·2764·6e66·2070·726f·7669·6465··the·'dnf·provide | |||
| 0003ba90:·7320·7570·6461·7465·2d63·7279·7074·6f2d··s·update-crypto- | |||
| 0003baa0:·706f·6c69·6369·6573·2720·636f·6d6d·616e··policies'·comman | |||
| 0003bab0:·6422·2026·6774·3b26·616d·703b·320a·0965··d"·>&2..e | |||
| 0003bac0:·6368·6f20·2274·6f20·7365·6520·7768·6174··cho·"to·see·what | |||
| 0003bad0:·2070·6163·6b61·6765·2074·6f20·2872·6529···package·to·(re) | |||
| 0003bae0:·696e·7374·616c·6c22·2026·6774·3b26·616d··install"·>&am | |||
| 0003baf0:·703b·320a·0a09·6661·6c73·6520·2023·2065··p;2...false··#·e | |||
| 0003bb00:·6e64·2077·6974·6820·616e·2065·7272·6f72··nd·with·an·error | |||
| 0003bb10:·2063·6f64·650a·656c·6966·2074·6573·7420···code.elif·test· | |||
| 0003bb20:·2224·7263·2220·213d·2030·3b20·7468·656e··"$rc"·!=·0;·then | |||
| 0003bb30:·0a09·6563·686f·2022·4572·726f·7220·696e··..echo·"Error·in | |||
| 0003bb40:·766f·6b69·6e67·2074·6865·2075·7064·6174··voking·the·updat | |||
| 0003bb50:·652d·6372·7970·746f·2d70·6f6c·6963·6965··e-crypto-policie | |||
| 0003bb60:·7320·7363·7269·7074·3a20·2473·7464·6572··s·script:·$stder | |||
| 0003bb70:·725f·6f66·5f63·616c·6c22·2026·6774·3b26··r_of_call"·>& | |||
| 0003bb80:·616d·703b·320a·0966·616c·7365·2020·2320··amp;2..false··#· | |||
| 0003bb90:·656e·6420·7769·7468·2061·6e20·6572·726f··end·with·an·erro | |||
| 0003bba0:·7220·636f·6465·0a66·690a·3c2f·636f·6465··r·code.fi.</code | |||
| 0003bbb0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003bbc0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003bbd0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003bbe0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003bbf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003bc00:·3932·3532·2220·7461·6269·6e64·6578·3d22··9252"·tabindex=" | |||
| 0003bc10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003bc20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003bc30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003bc40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003bc50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003bc60:·6469·6174·696f·6e20·4b75·6265·726e·6574··diation·Kubernet | |||
| 0003bc70:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 0003bc80:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bc90:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bca0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bcb0:·646d·3932·3532·223e·3c74·6162·6c65·2063··dm9252"><table·c | |||
| 0003bcc0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003bcd0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003bce0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003bcf0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003bd00:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bd10:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bd20:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003bd30:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003bd40:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bd50:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003bd60:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | |||
| 0003bd70:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003bd80:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003bd90:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003bda0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003bdb0:·3e2d·2d2d·0a61·7069·5665·7273·696f·6e3a··>---.apiVersion: | |||
| 0003bdc0:·206d·6163·6869·6e65·636f·6e66·6967·7572···machineconfigur | |||
| 0003bdd0:·6174·696f·6e2e·6f70·656e·7368·6966·742e··ation.openshift. | |||
| 0003bde0:·696f·2f76·310a·6b69·6e64·3a20·4d61·6368··io/v1.kind:·Mach | |||
| 0003bdf0:·696e·6543·6f6e·6669·670a·7370·6563·3a0a··ineConfig.spec:. | |||
| 0003be00:·2020·636f·6e66·6967·3a0a·2020·2020·6967····config:.····ig | |||
| 0003be10:·6e69·7469·6f6e·3a0a·2020·2020·2020·7665··nition:.······ve | |||
| 0003be20:·7273·696f·6e3a·2033·2e31·2e30·0a20·2020··rsion:·3.1.0.··· | |||
| 0003be30:·2073·7973·7465·6d64·3a0a·2020·2020·2020···systemd:.······ | |||
| 0003be40:·756e·6974·733a·0a20·2020·2020·2020·202d··units:.········- | |||
| 0003be50:·206e·616d·653a·2063·6f6e·6669·6775·7265···name:·configure | |||
| 0003be60:·2d63·7279·7074·6f2d·706f·6c69·6379·2e73··-crypto-policy.s | |||
| 0003be70:·6572·7669·6365·0a20·2020·2020·2020·2020··ervice.········· | |||
| Max diff block lines reached; 10278707/10311993 bytes (99.68%) of diff not shown. | |||
| Offset 120, 14 lines modified | Offset 120, 58 lines modified | ||
| 120 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 120 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 121 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 121 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 122 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 122 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 124 | ············_\x8c_\x8i_\x8s······1.6.1 | 124 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | var_system_crypto_policy='DEFAULT' | ||
| 129 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 130 | rc=$? | ||
| 131 | if·test·"$rc"·=·127;·then | ||
| 132 | » echo·"$stderr_of_call"·>&2 | ||
| 133 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 134 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 135 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 136 | » false··#·end·with·an·error·code | ||
| 137 | elif·test·"$rc"·!=·0;·then | ||
| 138 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 139 | » false··#·end·with·an·error·code | ||
| 140 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 146 | --- | ||
| 147 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 148 | kind:·MachineConfig | ||
| 149 | spec: | ||
| 150 | ··config: | ||
| 151 | ····ignition: | ||
| 152 | ······version:·3.1.0 | ||
| 153 | ····systemd: | ||
| 154 | ······units: | ||
| 155 | ········-·name:·configure-crypto-policy.service | ||
| 156 | ··········enabled:·true | ||
| 157 | ··········contents:·| | ||
| 158 | ············[Unit] | ||
| 159 | ············Before=kubelet.service | ||
| 160 | ············[Service] | ||
| 161 | ············Type=oneshot | ||
| 162 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 163 | ············RemainAfterExit=yes | ||
| 164 | ············[Install] | ||
| 165 | ············WantedBy=multi-user.target | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 132 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 171 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 133 | ··set_fact: | 172 | ··set_fact: |
| Offset 178, 58 lines modified | Offset 222, 14 lines modified | ||
| 178 | ··-·PCI-DSSv4-2.2.7 | 222 | ··-·PCI-DSSv4-2.2.7 |
| 179 | ··-·configure_crypto_policy | 223 | ··-·configure_crypto_policy |
| 180 | ··-·high_severity | 224 | ··-·high_severity |
| 181 | ··-·low_complexity | 225 | ··-·low_complexity |
| 182 | ··-·low_disruption | 226 | ··-·low_disruption |
| 183 | ··-·no_reboot_needed | 227 | ··-·no_reboot_needed |
| 184 | ··-·restrict_strategy | 228 | ··-·restrict_strategy |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 190 | --- | ||
| 191 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 192 | kind:·MachineConfig | ||
| 193 | spec: | ||
| 194 | ··config: | ||
| 195 | ····ignition: | ||
| 196 | ······version:·3.1.0 | ||
| 197 | ····systemd: | ||
| 198 | ······units: | ||
| 199 | ········-·name:·configure-crypto-policy.service | ||
| 200 | ··········enabled:·true | ||
| 201 | ··········contents:·| | ||
| 202 | ············[Unit] | ||
| 203 | ············Before=kubelet.service | ||
| 204 | ············[Service] | ||
| 205 | ············Type=oneshot | ||
| 206 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 207 | ············RemainAfterExit=yes | ||
| 208 | ············[Install] | ||
| 209 | ············WantedBy=multi-user.target | ||
| 210 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 211 | var_system_crypto_policy='DEFAULT' | ||
| 212 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 213 | rc=$? | ||
| 214 | if·test·"$rc"·=·127;·then | ||
| 215 | » echo·"$stderr_of_call"·>&2 | ||
| 216 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 217 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 218 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 219 | » false··#·end·with·an·error·code | ||
| 220 | elif·test·"$rc"·!=·0;·then | ||
| 221 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 222 | » false··#·end·with·an·error·code | ||
| 223 | fi | ||
| 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 229 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 225 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 230 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 226 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 231 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 227 | Severity: ··medium | 232 | Severity: ··medium |
| 228 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 233 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 229 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 234 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 230 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 235 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 237, 14 lines modified | Offset 237, 19 lines modified | ||
| 237 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 237 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 238 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 238 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 240 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 240 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 241 | ············_\x8c_\x8i_\x8s······1.6.2 | 241 | ············_\x8c_\x8i_\x8s······1.6.2 |
| 242 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 242 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 243 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule | 243 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule |
| 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1077075/1082678 bytes (99.48%) of diff not shown. | |||
| Offset 15238, 283 lines modified | Offset 15238, 283 lines modified | ||
| 0003b850:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b850:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b860:·3d22·2369·646d·3834·3830·2220·7461·6269··="#idm8480"·tabi | 0003b860:·3d22·2369·646d·3834·3830·2220·7461·6269··="#idm8480"·tabi | ||
| 0003b870:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b870:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b880:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b880:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b890:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b890:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b8a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b8a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b8b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b8b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b8c0:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003b8d0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b8e0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b8f0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b900:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b910:·2269·646d·3834·3830·223e·3c74·6162·6c65··"idm8480"><table | |||
| 0003b920:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b930:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b940:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b950:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b960:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b970:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b980:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b990:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b9a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b9b0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b9c0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b9d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b9e0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b9f0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003ba00:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003ba10:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003ba20:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003ba30:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003ba40:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003ba50:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003ba60:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003ba70:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003ba80:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003ba90:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003baa0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003bab0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003bac0:·6172·6765·743d·2223·6964·6d38·3438·3122··arget="#idm8481" | |||
| 0003bad0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003bae0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003baf0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bb00:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bb10:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bb20:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003bb30:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003bb40:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bb50:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bb60:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bb70:·6522·2069·643d·2269·646d·3834·3831·223e··e"·id="idm8481"> | |||
| 0003bb80:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003bb90:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003bba0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003bbb0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003bbc0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003bbd0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003bbe0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003bbf0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003bc00:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bc10:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003bc20:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003bc30:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003bc40:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003bc50:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003bc60:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003bc70:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003bc80:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003bc90:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003bca0:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003bcb0:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003bcc0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003bcd0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003bce0:·5449·472d·5248·454c·2d30·392d·3635·3130··TIG-RHEL-09-6510 | |||
| 0003bcf0:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003bd00:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003bd10:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003bd20:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003bd30:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003bd40:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003bd50:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003bd60:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003bd70:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003bd80:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003bd90:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003bda0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003bdb0:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003bdc0:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003bdd0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003bde0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003bdf0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003be00:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003be10:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003be20:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003be30:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003be40:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003be50:·412d·5354·4947·2d52·4845·4c2d·3039·2d36··A-STIG-RHEL-09-6 | |||
| 0003be60:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003be70:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003be80:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003be90:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003bea0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003beb0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003bec0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003bed0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003bee0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003bef0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003bf00:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003bf10:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003bf20:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003bf30:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003bf40:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003bf50:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003bf60:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003bf70:·7461·7267·6574·3d22·2369·646d·3834·3832··target="#idm8482 | |||
| 0003bf80:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003bf90:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003bfa0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003bfb0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003bfc0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003bfd0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003bfe0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003bff0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003c000:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003c010:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003c020:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003c030:·3d22·6964·6d38·3438·3222·3e3c·7072·653e··="idm8482"><pre> | |||
| Max diff block lines reached; 25971418/26009120 bytes (99.86%) of diff not shown. | |||
| Offset 15200, 283 lines modified | Offset 15200, 283 lines modified | ||
| 0003b5f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b5f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b600:·6d38·3438·3022·2074·6162·696e·6465·783d··m8480"·tabindex= | 0003b600:·6d38·3438·3022·2074·6162·696e·6465·783d··m8480"·tabindex= | ||
| 0003b610:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b610:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b620:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b620:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b630:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b630:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b640:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b640:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b650:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b650:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b660:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003b670:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b680:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b690:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b6a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b6b0:·3438·3022·3e3c·7461·626c·6520·636c·6173··480"><table·clas | |||
| 0003b6c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b6d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b6e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b6f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b700:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b710:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b720:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b730:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b740:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b750:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b760:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b770:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b780:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b790:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b7a0:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003b7b0:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003b7c0:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003b7d0:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003b7e0:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003b7f0:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003b800:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003b810:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b820:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b830:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b840:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b850:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b860:·3d22·2369·646d·3834·3831·2220·7461·6269··="#idm8481"·tabi | |||
| 0003b870:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b880:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b890:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b8a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b8b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b8c0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b8d0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b8e0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b8f0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b900:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b910:·3d22·6964·6d38·3438·3122·3e3c·7461·626c··="idm8481"><tabl | |||
| 0003b920:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b930:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b940:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b950:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b960:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b970:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b980:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b990:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b9a0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b9b0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b9c0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b9d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b9e0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b9f0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003ba00:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ba10:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003ba20:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003ba30:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003ba40:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003ba50:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003ba60:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003ba70:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003ba80:·4845·4c2d·3039·2d36·3531·3031·300a·2020··HEL-09-651010.·· | |||
| 0003ba90:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003baa0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003bab0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003bac0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003bad0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003bae0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003baf0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003bb00:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003bb10:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003bb20:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003bb30:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003bb40:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003bb50:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003bb60:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003bb70:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003bb80:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003bb90:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003bba0:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003bbb0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003bbc0:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003bbd0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003bbe0:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003bbf0:·472d·5248·454c·2d30·392d·3635·3130·3130··G-RHEL-09-651010 | |||
| 0003bc00:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003bc10:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003bc20:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003bc30:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003bc40:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003bc50:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003bc60:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003bc70:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003bc80:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003bc90:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003bca0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003bcb0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003bcc0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bcd0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bce0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bcf0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bd00:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bd10:·743d·2223·6964·6d38·3438·3222·2074·6162··t="#idm8482"·tab | |||
| 0003bd20:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bd30:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bd40:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bd50:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bd60:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bd70:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003bd80:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003bd90:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003bda0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003bdb0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003bdc0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003bdd0:·3834·3832·223e·3c70·7265·3e3c·636f·6465··8482"><pre><code | |||
| Max diff block lines reached; 11529730/11567432 bytes (99.67%) of diff not shown. | |||
| Offset 122, 26 lines modified | Offset 122, 48 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8c_\x8i_\x8s············6.1.1 | 126 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 128 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | include·install_aide | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | 134 | dnf·install·aide | |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | package·install·aide | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | [[packages]] | ||
| 143 | name·=·"aide" | ||
| 144 | version·=·"*" | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 151 | if·rpm·--quiet·-q·kernel;·then | ||
| 152 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 153 | ····dnf·install·-y·"aide" | ||
| 154 | fi | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | -·name:·Gather·the·package·facts | 163 | -·name:·Gather·the·package·facts |
| 146 | ··package_facts: | 164 | ··package_facts: |
| Offset 172, 55 lines modified | Offset 194, 33 lines modified | ||
| 172 | ··-·PCI-DSSv4-11.5.2 | 194 | ··-·PCI-DSSv4-11.5.2 |
| 173 | ··-·enable_strategy | 195 | ··-·enable_strategy |
| 174 | ··-·low_complexity | 196 | ··-·low_complexity |
| 175 | ··-·low_disruption | 197 | ··-·low_disruption |
| 176 | ··-·medium_severity | 198 | ··-·medium_severity |
| 177 | ··-·no_reboot_needed | 199 | ··-·no_reboot_needed |
| 178 | ··-·package_aide_installed | 200 | ··-·package_aide_installed |
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 180 | [[packages]] | ||
| 181 | name·=·"aide" | ||
| 182 | version·=·"*" | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 188 | dnf·install·aide | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 195 | if·rpm·--quiet·-q·kernel;·then | ||
| 196 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 197 | ····dnf·install·-y·"aide" | ||
| 198 | fi | ||
| 199 | else | ||
| 200 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 201 | fi | ||
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 207 | package·--add=aide | 206 | package·--add=aide |
| 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 209 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 210 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 211 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 212 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 212 | include·install_aide | ||
| 213 | 213 | class·install_aide·{ | |
| 214 | ··package·{·'aide': | ||
| 215 | ····ensure·=>·'installed', | ||
| 216 | ··} | ||
| 217 | } | ||
| 214 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 218 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 215 | Run·the·following·command·to·generate·a·new·database: | 219 | Run·the·following·command·to·generate·a·new·database: |
| 216 | $·sudo·/usr/sbin/aide·--init | 220 | $·sudo·/usr/sbin/aide·--init |
| 217 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 221 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 218 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 222 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 219 | To·initiate·a·manual·check,·run·the·following·command: | 223 | To·initiate·a·manual·check,·run·the·following·command: |
| 220 | $·sudo·/usr/sbin/aide·--check | 224 | $·sudo·/usr/sbin/aide·--check |
| Offset 239, 14 lines modified | Offset 239, 28 lines modified | ||
| 239 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 239 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 240 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 240 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 241 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 241 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 242 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 242 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 243 | ············_\x8c_\x8i_\x8s············6.1.1 | 243 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 244 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 244 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 245 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 245 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 246 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 247 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 248 | if·rpm·--quiet·-q·kernel;·then | ||
| 249 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| Max diff block lines reached; 1364778/1370190 bytes (99.61%) of diff not shown. | |||
| Offset 15191, 283 lines modified | Offset 15191, 283 lines modified | ||
| 0003b560:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003b560:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b570:·743d·2223·6964·6d38·3438·3022·2074·6162··t="#idm8480"·tab | 0003b570:·743d·2223·6964·6d38·3438·3022·2074·6162··t="#idm8480"·tab | ||
| 0003b580:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003b580:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b590:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003b590:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b5a0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003b5a0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b5b0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003b5b0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b5c0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003b5c0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b5d0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003b5e0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b5f0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b600:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b610:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b620:·3d22·6964·6d38·3438·3022·3e3c·7461·626c··="idm8480"><tabl | |||
| 0003b630:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b640:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b650:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b660:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b670:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b680:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b690:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b6a0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b6b0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b6c0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b6d0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b6e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b6f0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b700:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b710:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b720:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003b730:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003b740:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003b750:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003b760:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003b770:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003b780:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003b790:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b7a0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b7b0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b7c0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b7d0:·7461·7267·6574·3d22·2369·646d·3834·3831··target="#idm8481 | |||
| 0003b7e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b7f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b800:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b810:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b820:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b830:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b840:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b850:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b860:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b870:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b880:·7365·2220·6964·3d22·6964·6d38·3438·3122··se"·id="idm8481" | |||
| 0003b890:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b8a0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b8b0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b8c0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b8d0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b8e0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b8f0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b900:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b910:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b920:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b930:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b940:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b950:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b960:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b970:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b980:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b990:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003b9a0:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003b9b0:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003b9c0:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003b9d0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b9e0:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b9f0:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 0003ba00:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003ba10:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003ba20:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003ba30:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003ba40:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003ba50:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003ba60:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003ba70:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003ba80:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003ba90:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003baa0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003bab0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003bac0:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003bad0:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003bae0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003baf0:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003bb00:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003bb10:·6e74·0a20·2077·6865·6e3a·2027·226b·6572··nt.··when:·'"ker | |||
| 0003bb20:·6e65·6c22·2069·6e20·616e·7369·626c·655f··nel"·in·ansible_ | |||
| 0003bb30:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 0003bb40:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003bb50:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003bb60:·5341·2d53·5449·472d·5248·454c·2d30·392d··SA-STIG-RHEL-09- | |||
| 0003bb70:·3635·3130·3130·0a20·202d·204e·4953·542d··651010.··-·NIST- | |||
| 0003bb80:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003bb90:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003bba0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003bbb0:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003bbc0:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003bbd0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003bbe0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003bbf0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003bc00:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003bc10:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003bc20:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003bc30:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003bc40:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003bc50:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003bc60:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003bc70:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003bc80:·2d74·6172·6765·743d·2223·6964·6d38·3438··-target="#idm848 | |||
| 0003bc90:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003bca0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003bcb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003bcc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003bcd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003bce0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003bcf0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003bd00:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003bd10:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bd20:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bd30:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003bd40:·643d·2269·646d·3834·3832·223e·3c70·7265··d="idm8482"><pre | |||
| Max diff block lines reached; 11142597/11180299 bytes (99.66%) of diff not shown. | |||
| Offset 121, 26 lines modified | Offset 121, 48 lines modified | ||
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.1.1 | 125 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | include·install_aide | ||
| 134 | class·install_aide·{ | ||
| 135 | ··package·{·'aide': | ||
| 136 | ····ensure·=>·'installed', | ||
| 137 | ··} | ||
| 138 | 133 | dnf·install·aide | |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | package·install·aide | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | [[packages]] | ||
| 142 | name·=·"aide" | ||
| 143 | version·=·"*" | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 150 | if·rpm·--quiet·-q·kernel;·then | ||
| 151 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 152 | ····dnf·install·-y·"aide" | ||
| 153 | fi | ||
| 154 | else | ||
| 155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 156 | fi | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | -·name:·Gather·the·package·facts | 162 | -·name:·Gather·the·package·facts |
| 145 | ··package_facts: | 163 | ··package_facts: |
| Offset 171, 55 lines modified | Offset 193, 33 lines modified | ||
| 171 | ··-·PCI-DSSv4-11.5.2 | 193 | ··-·PCI-DSSv4-11.5.2 |
| 172 | ··-·enable_strategy | 194 | ··-·enable_strategy |
| 173 | ··-·low_complexity | 195 | ··-·low_complexity |
| 174 | ··-·low_disruption | 196 | ··-·low_disruption |
| 175 | ··-·medium_severity | 197 | ··-·medium_severity |
| 176 | ··-·no_reboot_needed | 198 | ··-·no_reboot_needed |
| 177 | ··-·package_aide_installed | 199 | ··-·package_aide_installed |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 179 | [[packages]] | ||
| 180 | name·=·"aide" | ||
| 181 | version·=·"*" | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 187 | dnf·install·aide | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 194 | if·rpm·--quiet·-q·kernel;·then | ||
| 195 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 196 | ····dnf·install·-y·"aide" | ||
| 197 | fi | ||
| 198 | else | ||
| 199 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 200 | fi | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 206 | package·--add=aide | 205 | package·--add=aide |
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 211 | include·install_aide | ||
| 212 | 212 | class·install_aide·{ | |
| 213 | ··package·{·'aide': | ||
| 214 | ····ensure·=>·'installed', | ||
| 215 | ··} | ||
| 216 | } | ||
| 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 217 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 214 | Run·the·following·command·to·generate·a·new·database: | 218 | Run·the·following·command·to·generate·a·new·database: |
| 215 | $·sudo·/usr/sbin/aide·--init | 219 | $·sudo·/usr/sbin/aide·--init |
| 216 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 220 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 217 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 221 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 218 | To·initiate·a·manual·check,·run·the·following·command: | 222 | To·initiate·a·manual·check,·run·the·following·command: |
| 219 | $·sudo·/usr/sbin/aide·--check | 223 | $·sudo·/usr/sbin/aide·--check |
| Offset 238, 14 lines modified | Offset 238, 28 lines modified | ||
| 238 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 238 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 240 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 240 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 241 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 241 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 242 | ············_\x8c_\x8i_\x8s············6.1.1 | 242 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 243 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 243 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 244 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 244 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 245 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 246 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 247 | if·rpm·--quiet·-q·kernel;·then | ||
| 248 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| Max diff block lines reached; 1313616/1319028 bytes (99.59%) of diff not shown. | |||
| Offset 15230, 283 lines modified | Offset 15230, 283 lines modified | ||
| 0003b7d0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b7d0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b7e0:·3834·3830·2220·7461·6269·6e64·6578·3d22··8480"·tabindex=" | 0003b7e0:·3834·3830·2220·7461·6269·6e64·6578·3d22··8480"·tabindex=" | ||
| 0003b7f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b7f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b840:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003b850:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b860:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b870:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b880:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003b890:·3830·223e·3c74·6162·6c65·2063·6c61·7373··80"><table·class | |||
| 0003b8a0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b8b0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b8c0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b8d0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b8e0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b8f0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b900:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b910:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b920:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b930:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b940:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b950:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b960:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b970:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b980:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b990:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003b9a0:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b9b0:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b9c0:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b9d0:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b9e0:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b9f0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003ba00:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003ba10:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003ba20:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003ba30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003ba40:·2223·6964·6d38·3438·3122·2074·6162·696e··"#idm8481"·tabin | |||
| 0003ba50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003ba60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003ba70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003ba80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003ba90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003baa0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003bab0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003bac0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bad0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bae0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003baf0:·2269·646d·3834·3831·223e·3c74·6162·6c65··"idm8481"><table | |||
| 0003bb00:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003bb10:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003bb20:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003bb30:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003bb40:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003bb50:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bb60:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003bb70:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003bb80:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003bb90:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003bba0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003bbb0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003bbc0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003bbd0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003bbe0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003bbf0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003bc00:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003bc10:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003bc20:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003bc30:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003bc40:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003bc50:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003bc60:·454c·2d30·392d·3635·3130·3130·0a20·202d··EL-09-651010.··- | |||
| 0003bc70:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003bc80:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003bc90:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003bca0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003bcb0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003bcc0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003bcd0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003bce0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003bcf0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003bd00:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003bd10:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003bd20:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003bd30:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003bd40:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003bd50:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003bd60:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003bd70:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003bd80:·656e·3a20·2722·6b65·726e·656c·2220·696e··en:·'"kernel"·in | |||
| 0003bd90:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003bda0:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003bdb0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003bdc0:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003bdd0:·2d52·4845·4c2d·3039·2d36·3531·3031·300a··-RHEL-09-651010. | |||
| 0003bde0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003bdf0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003be00:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003be10:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003be20:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003be30:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003be40:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003be50:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003be60:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003be70:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003be80:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003be90:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003bea0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003beb0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003bec0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003bed0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003bee0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003bef0:·3d22·2369·646d·3834·3832·2220·7461·6269··="#idm8482"·tabi | |||
| 0003bf00:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003bf10:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003bf20:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003bf30:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003bf40:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003bf50:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003bf60:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003bf70:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003bf80:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003bf90:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003bfa0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003bfb0:·3438·3222·3e3c·7072·653e·3c63·6f64·653e··482"><pre><code> | |||
| Max diff block lines reached; 25765693/25803395 bytes (99.85%) of diff not shown. | |||
| Offset 15836, 252 lines modified | Offset 15836, 252 lines modified | ||
| 0003ddb0:·7267·6574·3d22·2369·646d·3931·3633·2220··rget="#idm9163"· | 0003ddb0:·7267·6574·3d22·2369·646d·3931·3633·2220··rget="#idm9163"· | ||
| 0003ddc0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003ddc0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003ddd0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003ddd0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003dde0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003dde0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003ddf0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003ddf0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003de00:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003de00:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003de10:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003de10:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003de20:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003de30:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003de40:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003de50:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003de60:·2069·643d·2269·646d·3931·3633·223e·3c74···id="idm9163"><t | |||
| 0003de70:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003de80:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003de90:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003dea0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003deb0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003dec0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003ded0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003dee0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003def0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003df00:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003df10:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003df20:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003df30:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003df40:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003df50:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003df60:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003df70:·7374·616c·6c5f·6372·7970·746f·2d70·6f6c··stall_crypto-pol | |||
| 0003df80:·6963·6965·730a·0a63·6c61·7373·2069·6e73··icies..class·ins | |||
| 0003df90:·7461·6c6c·5f63·7279·7074·6f2d·706f·6c69··tall_crypto-poli | |||
| 0003dfa0:·6369·6573·207b·0a20·2070·6163·6b61·6765··cies·{.··package | |||
| 0003dfb0:·207b·2027·6372·7970·746f·2d70·6f6c·6963···{·'crypto-polic | |||
| 0003dfc0:·6965·7327·3a0a·2020·2020·656e·7375·7265··ies':.····ensure | |||
| 0003dfd0:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003dfe0:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003dff0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003e000:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003e010:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003e020:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003e030:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003e040:·3931·3634·2220·7461·6269·6e64·6578·3d22··9164"·tabindex=" | |||
| 0003e050:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003e060:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003e070:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003e080:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003e090:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003e0a0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003e0b0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003e0c0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003e0d0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003e0e0:·6c6c·6170·7365·2220·6964·3d22·6964·6d39··llapse"·id="idm9 | |||
| 0003e0f0:·3136·3422·3e3c·7461·626c·6520·636c·6173··164"><table·clas | |||
| 0003e100:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003e110:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003e120:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003e130:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003e140:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003e150:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003e160:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003e170:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003e180:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003e190:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003e1a0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003e1b0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003e1c0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003e1d0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003e1e0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003e1f0:·616d·653a·2045·6e73·7572·6520·6372·7970··ame:·Ensure·cryp | |||
| 0003e200:·746f·2d70·6f6c·6963·6965·7320·6973·2069··to-policies·is·i | |||
| 0003e210:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003e220:·6765·3a0a·2020·2020·6e61·6d65·3a20·6372··ge:.····name:·cr | |||
| 0003e230:·7970·746f·2d70·6f6c·6963·6965·730a·2020··ypto-policies.·· | |||
| 0003e240:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003e250:·0a20·2074·6167·733a·0a20·202d·2044·4953··.··tags:.··-·DIS | |||
| 0003e260:·412d·5354·4947·2d52·4845·4c2d·3039·2d32··A-STIG-RHEL-09-2 | |||
| 0003e270:·3135·3130·300a·2020·2d20·656e·6162·6c65··15100.··-·enable | |||
| 0003e280:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003e290:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003e2a0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003e2b0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003e2c0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003e2d0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003e2e0:·6b61·6765·5f63·7279·7074·6f2d·706f·6c69··kage_crypto-poli | |||
| 0003e2f0:·6369·6573·5f69·6e73·7461·6c6c·6564·0a3c··cies_installed.< | |||
| 0003e300:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003e310:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003e320:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003e330:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003e340:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003e350:·2223·6964·6d39·3136·3522·2074·6162·696e··"#idm9165"·tabin | |||
| 0003e360:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003e370:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003e380:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003e390:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003e3a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003e3b0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003e3c0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003e3d0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003e3e0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003e3f0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003e400:·6c61·7073·6522·2069·643d·2269·646d·3931··lapse"·id="idm91 | |||
| 0003e410:·3635·223e·3c70·7265·3e3c·636f·6465·3e0a··65"><pre><code>. | |||
| 0003e420:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003e430:·6520·3d20·2263·7279·7074·6f2d·706f·6c69··e·=·"crypto-poli | |||
| 0003e440:·6369·6573·220a·7665·7273·696f·6e20·3d20··cies".version·=· | |||
| 0003e450:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003e460:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003e470:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003e480:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003e490:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003e4a0:·7267·6574·3d22·2369·646d·3931·3636·2220··rget="#idm9166"· | |||
| 0003e4b0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003e4c0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003e4d0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003e4e0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003e4f0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003e500:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003 | 0003de20:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | ||
| 0003 | 0003de30:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003 | 0003de40:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003e5 | 0003de50:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003 | 0003de60:·3931·3633·223e·3c74·6162·6c65·2063·6c61··9163"><table·cla | ||
| 0003 | 0003de70:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003 | 0003de80:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003 | 0003de90:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003 | 0003dea0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| Max diff block lines reached; 6802482/6835906 bytes (99.51%) of diff not shown. | |||
| Offset 170, 78 lines modified | Offset 170, 78 lines modified | ||
| 170 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 170 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 171 | Severity: ··medium | 171 | Severity: ··medium |
| 172 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 172 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 173 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 | 173 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 |
| 174 | References:·_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 174 | References:·_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 175 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 175 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 176 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule | 176 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 182 | include·install_crypto-policies | ||
| 183 | 182 | dnf·install·crypto-policies | |
| 184 | ··package·{·'crypto-policies': | ||
| 185 | ····ensure·=>·'installed', | ||
| 186 | ··} | ||
| 187 | } | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 188 | package·install·crypto-policies | ||
| 193 | -·name:·Ensure·crypto-policies·is·installed | ||
| 194 | ··package: | ||
| 195 | ····name:·crypto-policies | ||
| 196 | ····state:·present | ||
| 197 | ··tags: | ||
| 198 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 199 | ··-·enable_strategy | ||
| 200 | ··-·low_complexity | ||
| 201 | ··-·low_disruption | ||
| 202 | ··-·medium_severity | ||
| 203 | ··-·no_reboot_needed | ||
| 204 | ··-·package_crypto-policies_installed | ||
| 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 206 | [[packages]] | 190 | [[packages]] |
| 207 | name·=·"crypto-policies" | 191 | name·=·"crypto-policies" |
| 208 | version·=·"*" | 192 | version·=·"*" |
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 214 | dnf·install·crypto-policies | ||
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 220 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 198 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| 221 | ····dnf·install·-y·"crypto-policies" | 199 | ····dnf·install·-y·"crypto-policies" |
| 222 | fi | 200 | fi |
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 206 | -·name:·Ensure·crypto-policies·is·installed | ||
| 207 | ··package: | ||
| 208 | ····name:·crypto-policies | ||
| 209 | ····state:·present | ||
| 210 | ··tags: | ||
| 211 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 212 | ··-·enable_strategy | ||
| 213 | ··-·low_complexity | ||
| 214 | ··-·low_disruption | ||
| 215 | ··-·medium_severity | ||
| 216 | ··-·no_reboot_needed | ||
| 217 | ··-·package_crypto-policies_installed | ||
| 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 228 | package·--add=crypto-policies | 223 | package·--add=crypto-policies |
| 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 230 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 231 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 232 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 233 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 229 | include·install_crypto-policies | ||
| 230 | class·install_crypto-policies·{ | ||
| 234 | package· | 231 | ··package·{·'crypto-policies': |
| 232 | ····ensure·=>·'installed', | ||
| 233 | ··} | ||
| 234 | } | ||
| 235 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 235 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 236 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS·policy,·run·the·following·command: | 236 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS·policy,·run·the·following·command: |
| 237 | $·sudo·update-crypto-policies·--set·FIPS | 237 | $·sudo·update-crypto-policies·--set·FIPS |
| 238 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 238 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 239 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 239 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 240 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 240 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 241 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 241 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 253, 14 lines modified | Offset 253, 58 lines modified | ||
| 253 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 253 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 254 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 254 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 255 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 255 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 256 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 256 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 257 | ············_\x8c_\x8i_\x8s······1.6.1 | 257 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 258 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 258 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 259 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 259 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 261 | var_system_crypto_policy='FIPS' | ||
| 262 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 263 | rc=$? | ||
| 264 | if·test·"$rc"·=·127;·then | ||
| 265 | » echo·"$stderr_of_call"·>&2 | ||
| 266 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 267 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 268 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 269 | » false··#·end·with·an·error·code | ||
| 270 | elif·test·"$rc"·!=·0;·then | ||
| 271 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| Max diff block lines reached; 911346/919654 bytes (99.10%) of diff not shown. | |||
| Offset 15267, 408 lines modified | Offset 15267, 408 lines modified | ||
| 0003ba20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003ba20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003ba30:·2223·6964·6d38·3134·3122·2074·6162·696e··"#idm8141"·tabin | 0003ba30:·2223·6964·6d38·3134·3122·2074·6162·696e··"#idm8141"·tabin | ||
| 0003ba40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003ba40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ba50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003ba50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003ba60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003ba60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003ba70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003ba70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003ba80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003ba80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003ba90:·3e52·656d·6564·6961·7469·6f6e·20 | 0003ba90:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003baa0:·6 | 0003baa0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003bab0:·3 | 0003bab0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003bac0:· | 0003bac0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003bad0:· | 0003bad0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003bae0:· | 0003bae0:·6d38·3134·3122·3e3c·7072·653e·3c63·6f64··m8141"><pre><cod | ||
| 0003baf0:· | 0003baf0:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003bb00:·6 | 0003bb00:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003bb10:·6 | 0003bb10:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003bb20:· | 0003bb20:·6174·666f·726d·730a·6966·2021·2028·207b··atforms.if·!·(·{ | ||
| 0003bb30:· | 0003bb30:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003bb40:· | 0003bb40:·6b65·726e·656c·203b·7d20·2661·6d70·3b26··kernel·;}·&& | ||
| 0003bb50:· | 0003bb50:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003bb60:·7 | 0003bb60:·6574·202d·7120·7270·6d2d·6f73·7472·6565··et·-q·rpm-ostree | ||
| 0003bb70:· | 0003bb70:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003bb80:· | 0003bb80:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003bb90:· | 0003bb90:·626f·6f74·6320·3b7d·2026·616d·703b·2661··bootc·;}·&&a | ||
| 0003bba0:· | 0003bba0:·6d70·3b20·7b20·2120·7270·6d20·2d2d·7175··mp;·{·!·rpm·--qu | ||
| 0003bbb0:· | 0003bbb0:·6965·7420·2d71·206f·7065·6e73·6869·6674··iet·-q·openshift | ||
| 0003bbc0:· | 0003bbc0:·2d6b·7562·656c·6574·203b·7d20·293b·2074··-kubelet·;}·);·t | ||
| 0003bbd0:· | 0003bbd0:·6865·6e0a·0a23·2046·696e·6420·7768·6963··hen..#·Find·whic | ||
| 0003bbe0:·6 | 0003bbe0:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | ||
| 0003bbf0:· | 0003bbf0:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | ||
| 0003bc00:· | 0003bc00:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | ||
| 0003bc10:·6 | 0003bc10:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | ||
| 0003bc20:· | 0003bc20:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | ||
| 0003bc30:·6 | 0003bc30:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | ||
| 0003bc40:· | 0003bc40:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | ||
| 0003bc50:· | 0003bc50:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003bc60:· | 0003bc60:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | ||
| 0003bc70:· | 0003bc70:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | ||
| 0003bc80:·2 | 0003bc80:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | ||
| 0003bc90:· | 0003bc90:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | ||
| 0003bca0:· | 0003bca0:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | ||
| 0003bcb0:·2 | 0003bcb0:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | ||
| 0003bcc0:· | 0003bcc0:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | ||
| 0003bcd0:· | 0003bcd0:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | ||
| 0003bce0:· | 0003bce0:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | ||
| 0003bcf0:· | 0003bcf0:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | ||
| 0003bd00:· | 0003bd00:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | ||
| 0003bd10:·2 | 0003bd10:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | ||
| 0003bd20:· | 0003bd20:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | ||
| 0003bd30:·6 | 0003bd30:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | ||
| 0003bd40:· | 0003bd40:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | ||
| 0003bd50:· | 0003bd50:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003bd60:· | 0003bd60:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | ||
| 0003bd70:·6 | 0003bd70:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003bd80:·7 | 0003bd80:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | ||
| 0003bd90:· | 0003bd90:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | ||
| 0003bda0:· | 0003bda0:·2064·6e66·2072·6569·6e73·7461·6c6c·202d···dnf·reinstall·- | ||
| 0003bdb0:· | 0003bdb0:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | ||
| 0003bdc0:·6 | 0003bdc0:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | ||
| 0003bdd0:· | 0003bdd0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | ||
| 0003bde0:· | 0003bde0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | ||
| 0003bdf0:·6 | 0003bdf0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | ||
| 0003be00:· | 0003be00:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | ||
| 0003be10:·6 | 0003be10:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | ||
| 0003be20:· | 0003be20:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003be30:· | 0003be30:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003be40:· | 0003be40:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003be50:· | 0003be50:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003be60:·7 | 0003be60:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003be70:· | 0003be70:·3d22·2369·646d·3831·3432·2220·7461·6269··="#idm8142"·tabi | ||
| 0003be80:· | 0003be80:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003be90:· | 0003be90:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003bea0:· | 0003bea0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003beb0:· | 0003beb0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003bec0:· | 0003bec0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003bed0:· | 0003bed0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003bee0:· | 0003bee0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003bef0:· | 0003bef0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003bf00:· | 0003bf00:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003bf10:· | 0003bf10:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003bf20:· | 0003bf20:·3d22·6964·6d38·3134·3222·3e3c·7461·626c··="idm8142"><tabl | ||
| 0003bf30:· | 0003bf30:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003bf40:· | 0003bf40:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003bf50:· | 0003bf50:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003bf60:· | 0003bf60:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003bf70:·3 | 0003bf70:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003bf80:· | 0003bf80:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003bf90:· | 0003bf90:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003bfa0:· | 0003bfa0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003bfb0:· | 0003bfb0:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003bfc0:· | 0003bfc0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003bfd0:· | 0003bfd0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003bfe0:·3 | 0003bfe0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bff0:· | 0003bff0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003c000:· | 0003c000:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003c010:· | 0003c010:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003c020:· | 0003c020:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003c030:·20 | 0003c030:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003c040:·6 | 0003c040:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003c050:·65 | 0003c050:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003c060:· | 0003c060:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003c070:·6 | 0003c070:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003c080:· | 0003c080:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003c090:· | 0003c090:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003c0a0:· | 0003c0a0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003c0b0:· | 0003c0b0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003c0c0:· | 0003c0c0:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003c0d0:·20 | 0003c0d0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003c0e0:· | 0003c0e0:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003c0f0:· | 0003c0f0:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003c100:· | 0003c100:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003c110:· | 0003c110:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003c120:· | 0003c120:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003c130:· | 0003c130:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003c140:· | 0003c140:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003c150:· | 0003c150:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003c160:· | 0003c160:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003c170:· | 0003c170:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003c180:· | 0003c180:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003c190:· | 0003c190:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003c1a0:· | 0003c1a0:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003c1b0:·6 | 0003c1b0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003c1c0:· | 0003c1c0:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003c1d0:· | 0003c1d0:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003c1e0:·7 | 0003c1e0:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| 0003c1f0:· | 0003c1f0:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| Max diff block lines reached; 6801918/6856870 bytes (99.20%) of diff not shown. | |||
| Offset 121, 14 lines modified | Offset 121, 33 lines modified | ||
| 121 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 121 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 122 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 122 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 130 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 131 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 132 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 133 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 134 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 135 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 136 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 137 | fi | ||
| 138 | else | ||
| 139 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 140 | fi | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 133 | -·name:·Gather·the·package·facts | 146 | -·name:·Gather·the·package·facts |
| 134 | ··package_facts: | 147 | ··package_facts: |
| Offset 295, 33 lines modified | Offset 314, 14 lines modified | ||
| 295 | ··-·PCI-DSSv4-11.5.2 | 314 | ··-·PCI-DSSv4-11.5.2 |
| 296 | ··-·high_complexity | 315 | ··-·high_complexity |
| 297 | ··-·high_severity | 316 | ··-·high_severity |
| 298 | ··-·medium_disruption | 317 | ··-·medium_disruption |
| 299 | ··-·no_reboot_needed | 318 | ··-·no_reboot_needed |
| 300 | ··-·restrict_strategy | 319 | ··-·restrict_strategy |
| 301 | ··-·rpm_verify_hashes | 320 | ··-·rpm_verify_hashes |
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 303 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 304 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 305 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 306 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 307 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 308 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 309 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 310 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 311 | fi | ||
| 312 | else | ||
| 313 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 314 | fi | ||
| 315 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 321 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 316 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 322 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 317 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 323 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 318 | run·the·following·command·to·determine·which·package·owns·it: | 324 | run·the·following·command·to·determine·which·package·owns·it: |
| 319 | $·rpm·-qf·FILENAME | 325 | $·rpm·-qf·FILENAME |
| 320 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 326 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 321 | $·sudo·rpm·--restore·PACKAGENAME | 327 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 340, 14 lines modified | Offset 340, 46 lines modified | ||
| 340 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 340 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 341 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 341 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 342 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 342 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 343 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 343 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 344 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 344 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 345 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 345 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 346 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 346 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 348 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 349 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 350 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 351 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 352 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 353 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 354 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 355 | declare·-A·SETPERMS_RPM_DICT | ||
| 356 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 357 | #·is·expected·by·the·RPM·database | ||
| 358 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 359 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 360 | do | ||
| 361 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 362 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 363 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 364 | done | ||
| 365 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 366 | #·correct·values | ||
| 367 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 368 | do | ||
| 369 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 370 | done | ||
| 371 | else | ||
| 372 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 373 | fi | ||
| 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 348 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 349 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 350 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 351 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 352 | -·name:·Gather·the·package·facts | 379 | -·name:·Gather·the·package·facts |
| 353 | ··package_facts: | 380 | ··package_facts: |
| Offset 455, 46 lines modified | Offset 487, 14 lines modified | ||
| 455 | ··-·PCI-DSSv4-11.5.2 | 487 | ··-·PCI-DSSv4-11.5.2 |
| 456 | ··-·high_complexity | 488 | ··-·high_complexity |
| 457 | ··-·high_severity | 489 | ··-·high_severity |
| 458 | ··-·medium_disruption | 490 | ··-·medium_disruption |
| 459 | ··-·no_reboot_needed | 491 | ··-·no_reboot_needed |
| 460 | ··-·restrict_strategy | 492 | ··-·restrict_strategy |
| 461 | ··-·rpm_verify_ownership | 493 | ··-·rpm_verify_ownership |
| 462 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 463 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 464 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 465 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 466 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 739439/747150 bytes (98.97%) of diff not shown. | |||
| Offset 15288, 408 lines modified | Offset 15288, 408 lines modified | ||
| 0003bb70:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003bb70:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003bb80:·2223·6964·6d38·3134·3122·2074·6162·696e··"#idm8141"·tabin | 0003bb80:·2223·6964·6d38·3134·3122·2074·6162·696e··"#idm8141"·tabin | ||
| 0003bb90:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003bb90:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003bba0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003bba0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003bbb0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003bbb0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003bbc0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003bbc0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003bbd0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003bbd0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003bbe0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003bbe0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003bbf0:·6 | 0003bbf0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003bc00:·3 | 0003bc00:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003bc10:· | 0003bc10:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003bc20:· | 0003bc20:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003bc30:· | 0003bc30:·6d38·3134·3122·3e3c·7072·653e·3c63·6f64··m8141"><pre><cod | ||
| 0003bc40:· | 0003bc40:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003bc50:·6 | 0003bc50:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003bc60:·6 | 0003bc60:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003bc70:· | 0003bc70:·6174·666f·726d·730a·6966·2021·2028·207b··atforms.if·!·(·{ | ||
| 0003bc80:· | 0003bc80:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003bc90:· | 0003bc90:·6b65·726e·656c·203b·7d20·2661·6d70·3b26··kernel·;}·&& | ||
| 0003bca0:· | 0003bca0:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003bcb0:·7 | 0003bcb0:·6574·202d·7120·7270·6d2d·6f73·7472·6565··et·-q·rpm-ostree | ||
| 0003bcc0:· | 0003bcc0:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003bcd0:· | 0003bcd0:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003bce0:· | 0003bce0:·626f·6f74·6320·3b7d·2026·616d·703b·2661··bootc·;}·&&a | ||
| 0003bcf0:· | 0003bcf0:·6d70·3b20·7b20·2120·7270·6d20·2d2d·7175··mp;·{·!·rpm·--qu | ||
| 0003bd00:· | 0003bd00:·6965·7420·2d71·206f·7065·6e73·6869·6674··iet·-q·openshift | ||
| 0003bd10:· | 0003bd10:·2d6b·7562·656c·6574·203b·7d20·293b·2074··-kubelet·;}·);·t | ||
| 0003bd20:· | 0003bd20:·6865·6e0a·0a23·2046·696e·6420·7768·6963··hen..#·Find·whic | ||
| 0003bd30:·6 | 0003bd30:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | ||
| 0003bd40:· | 0003bd40:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | ||
| 0003bd50:· | 0003bd50:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | ||
| 0003bd60:·6 | 0003bd60:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | ||
| 0003bd70:· | 0003bd70:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | ||
| 0003bd80:·6 | 0003bd80:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | ||
| 0003bd90:· | 0003bd90:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | ||
| 0003bda0:· | 0003bda0:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003bdb0:· | 0003bdb0:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | ||
| 0003bdc0:· | 0003bdc0:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | ||
| 0003bdd0:·2 | 0003bdd0:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | ||
| 0003bde0:· | 0003bde0:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | ||
| 0003bdf0:· | 0003bdf0:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | ||
| 0003be00:·2 | 0003be00:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | ||
| 0003be10:· | 0003be10:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | ||
| 0003be20:· | 0003be20:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | ||
| 0003be30:· | 0003be30:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | ||
| 0003be40:· | 0003be40:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | ||
| 0003be50:· | 0003be50:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | ||
| 0003be60:·2 | 0003be60:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | ||
| 0003be70:· | 0003be70:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | ||
| 0003be80:·6 | 0003be80:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | ||
| 0003be90:· | 0003be90:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | ||
| 0003bea0:· | 0003bea0:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003beb0:· | 0003beb0:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | ||
| 0003bec0:·6 | 0003bec0:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003bed0:·7 | 0003bed0:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | ||
| 0003bee0:· | 0003bee0:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | ||
| 0003bef0:· | 0003bef0:·2064·6e66·2072·6569·6e73·7461·6c6c·202d···dnf·reinstall·- | ||
| 0003bf00:· | 0003bf00:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | ||
| 0003bf10:·6 | 0003bf10:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | ||
| 0003bf20:· | 0003bf20:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | ||
| 0003bf30:· | 0003bf30:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | ||
| 0003bf40:·6 | 0003bf40:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | ||
| 0003bf50:· | 0003bf50:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | ||
| 0003bf60:·6 | 0003bf60:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | ||
| 0003bf70:· | 0003bf70:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003bf80:· | 0003bf80:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003bf90:· | 0003bf90:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003bfa0:· | 0003bfa0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003bfb0:·7 | 0003bfb0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003bfc0:· | 0003bfc0:·3d22·2369·646d·3831·3432·2220·7461·6269··="#idm8142"·tabi | ||
| 0003bfd0:· | 0003bfd0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003bfe0:· | 0003bfe0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003bff0:· | 0003bff0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003c000:· | 0003c000:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003c010:· | 0003c010:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003c020:· | 0003c020:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003c030:· | 0003c030:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003c040:· | 0003c040:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003c050:· | 0003c050:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003c060:· | 0003c060:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003c070:· | 0003c070:·3d22·6964·6d38·3134·3222·3e3c·7461·626c··="idm8142"><tabl | ||
| 0003c080:· | 0003c080:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003c090:· | 0003c090:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003c0a0:· | 0003c0a0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003c0b0:· | 0003c0b0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003c0c0:·3 | 0003c0c0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003c0d0:· | 0003c0d0:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003c0e0:· | 0003c0e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003c0f0:· | 0003c0f0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003c100:· | 0003c100:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003c110:· | 0003c110:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003c120:· | 0003c120:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003c130:·3 | 0003c130:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003c140:· | 0003c140:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003c150:· | 0003c150:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003c160:· | 0003c160:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003c170:· | 0003c170:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003c180:·20 | 0003c180:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003c190:·6 | 0003c190:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003c1a0:·65 | 0003c1a0:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003c1b0:· | 0003c1b0:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003c1c0:·6 | 0003c1c0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003c1d0:· | 0003c1d0:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003c1e0:· | 0003c1e0:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003c1f0:· | 0003c1f0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003c200:· | 0003c200:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003c210:· | 0003c210:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003c220:·20 | 0003c220:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003c230:· | 0003c230:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003c240:· | 0003c240:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003c250:· | 0003c250:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003c260:· | 0003c260:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003c270:· | 0003c270:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003c280:· | 0003c280:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003c290:· | 0003c290:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003c2a0:· | 0003c2a0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003c2b0:· | 0003c2b0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003c2c0:· | 0003c2c0:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003c2d0:· | 0003c2d0:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003c2e0:· | 0003c2e0:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003c2f0:· | 0003c2f0:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003c300:·6 | 0003c300:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003c310:· | 0003c310:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003c320:· | 0003c320:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003c330:·7 | 0003c330:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| 0003c340:· | 0003c340:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| Max diff block lines reached; 17291857/17346809 bytes (99.68%) of diff not shown. | |||
| Offset 126, 14 lines modified | Offset 126, 33 lines modified | ||
| 126 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 126 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 127 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 127 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 128 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 128 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 129 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 129 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 131 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 131 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 135 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 136 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 137 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 138 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 139 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 140 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 141 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 142 | fi | ||
| 143 | else | ||
| 144 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 145 | fi | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 138 | -·name:·Gather·the·package·facts | 151 | -·name:·Gather·the·package·facts |
| 139 | ··package_facts: | 152 | ··package_facts: |
| Offset 300, 33 lines modified | Offset 319, 14 lines modified | ||
| 300 | ··-·PCI-DSSv4-11.5.2 | 319 | ··-·PCI-DSSv4-11.5.2 |
| 301 | ··-·high_complexity | 320 | ··-·high_complexity |
| 302 | ··-·high_severity | 321 | ··-·high_severity |
| 303 | ··-·medium_disruption | 322 | ··-·medium_disruption |
| 304 | ··-·no_reboot_needed | 323 | ··-·no_reboot_needed |
| 305 | ··-·restrict_strategy | 324 | ··-·restrict_strategy |
| 306 | ··-·rpm_verify_hashes | 325 | ··-·rpm_verify_hashes |
| 307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 308 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 309 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 310 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 311 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 312 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 313 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 314 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 315 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 316 | fi | ||
| 317 | else | ||
| 318 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 319 | fi | ||
| 320 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 326 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 321 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 327 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 322 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 328 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 323 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 329 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 324 | $·rpm·-qf·FILENAME | 330 | $·rpm·-qf·FILENAME |
| 325 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 331 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 347, 14 lines modified | Offset 347, 50 lines modified | ||
| 347 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 347 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 348 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 348 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 349 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 349 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 350 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 350 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 351 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 351 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 352 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 352 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 353 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 353 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 355 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 356 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 357 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 358 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 359 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 360 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 361 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 362 | declare·-A·SETPERMS_RPM_DICT | ||
| 363 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 364 | #·is·expected·by·the·RPM·database | ||
| 365 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 366 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 367 | do | ||
| 368 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 369 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 370 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 371 | ········do | ||
| 372 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 373 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 374 | ········done | ||
| 375 | done | ||
| 376 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 377 | #·correct·values | ||
| 378 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 379 | do | ||
| 380 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 381 | done | ||
| 382 | else | ||
| 383 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 384 | fi | ||
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 355 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 386 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 356 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 387 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 357 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 388 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 358 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 389 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 359 | -·name:·Gather·the·package·facts | 390 | -·name:·Gather·the·package·facts |
| 360 | ··package_facts: | 391 | ··package_facts: |
| Offset 466, 50 lines modified | Offset 502, 14 lines modified | ||
| 466 | ··-·PCI-DSSv4-11.5.2 | 502 | ··-·PCI-DSSv4-11.5.2 |
| 467 | ··-·high_complexity | 503 | ··-·high_complexity |
| 468 | ··-·high_severity | 504 | ··-·high_severity |
| 469 | ··-·medium_disruption | 505 | ··-·medium_disruption |
| 470 | ··-·no_reboot_needed | 506 | ··-·no_reboot_needed |
| 471 | ··-·restrict_strategy | 507 | ··-·restrict_strategy |
| 472 | ··-·rpm_verify_permissions | 508 | ··-·rpm_verify_permissions |
| 473 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1334054/1342138 bytes (99.40%) of diff not shown. | |||
| Offset 15302, 408 lines modified | Offset 15302, 408 lines modified | ||
| 0003bc50:·7267·6574·3d22·2369·646d·3831·3431·2220··rget="#idm8141"· | 0003bc50:·7267·6574·3d22·2369·646d·3831·3431·2220··rget="#idm8141"· | ||
| 0003bc60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003bc60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003bc70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003bc70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bc80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bc80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003bc90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003bc90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bca0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bca0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003bcb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bcb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bcc0:·6e20· | 0003bcc0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | ||
| 0003bcd0:· | 0003bcd0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003bce0:· | 0003bce0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003bcf0:·6 | 0003bcf0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003bd00:· | 0003bd00:·643d·2269·646d·3831·3431·223e·3c70·7265··d="idm8141"><pre | ||
| 0003bd10:· | 0003bd10:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 0003bd20:· | 0003bd20:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 0003bd30:· | 0003bd30:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 0003bd40:· | 0003bd40:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 0003bd50:· | 0003bd50:·2120·2820·7b20·7270·6d20·2d2d·7175·6965··!·(·{·rpm·--quie | ||
| 0003bd60:· | 0003bd60:·7420·2d71·206b·6572·6e65·6c20·3b7d·2026··t·-q·kernel·;}·& | ||
| 0003bd70:·6 | 0003bd70:·616d·703b·2661·6d70·3b20·7b20·7270·6d20··amp;&·{·rpm· | ||
| 0003bd80:· | 0003bd80:·2d2d·7175·6965·7420·2d71·2072·706d·2d6f··--quiet·-q·rpm-o | ||
| 0003bd90:·7 | 0003bd90:·7374·7265·6520·3b7d·2026·616d·703b·2661··stree·;}·&&a | ||
| 0003bda0:·6 | 0003bda0:·6d70·3b20·7b20·7270·6d20·2d2d·7175·6965··mp;·{·rpm·--quie | ||
| 0003bdb0:· | 0003bdb0:·7420·2d71·2062·6f6f·7463·203b·7d20·2661··t·-q·bootc·;}·&a | ||
| 0003bdc0:·6 | 0003bdc0:·6d70·3b26·616d·703b·207b·2021·2072·706d··mp;&·{·!·rpm | ||
| 0003bdd0:· | 0003bdd0:·202d·2d71·7569·6574·202d·7120·6f70·656e···--quiet·-q·open | ||
| 0003bde0:· | 0003bde0:·7368·6966·742d·6b75·6265·6c65·7420·3b7d··shift-kubelet·;} | ||
| 0003bdf0:· | 0003bdf0:·2029·3b20·7468·656e·0a0a·2320·4669·6e64···);·then..#·Find | ||
| 0003be00:· | 0003be00:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | ||
| 0003be10:·6 | 0003be10:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | ||
| 0003be20:· | 0003be20:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | ||
| 0003be30:· | 0003be30:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | ||
| 0003be40:· | 0003be40:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | ||
| 0003be50:· | 0003be50:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | ||
| 0003be60:· | 0003be60:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | ||
| 0003be70:· | 0003be70:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | ||
| 0003be80:· | 0003be80:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | ||
| 0003be90:· | 0003be90:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | ||
| 0003bea0:· | 0003bea0:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | ||
| 0003beb0:· | 0003beb0:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | ||
| 0003bec0:· | 0003bec0:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | ||
| 0003bed0:·5 | 0003bed0:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | ||
| 0003bee0:· | 0003bee0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003bef0:·2 | 0003bef0:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | ||
| 0003bf00:· | 0003bf00:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | ||
| 0003bf10:·2 | 0003bf10:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | ||
| 0003bf20:· | 0003bf20:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | ||
| 0003bf30:· | 0003bf30:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | ||
| 0003bf40:· | 0003bf40:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | ||
| 0003bf50:· | 0003bf50:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | ||
| 0003bf60:· | 0003bf60:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | ||
| 0003bf70:· | 0003bf70:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | ||
| 0003bf80:· | 0003bf80:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | ||
| 0003bf90:· | 0003bf90:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | ||
| 0003bfa0:· | 0003bfa0:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | ||
| 0003bfb0:· | 0003bfb0:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | ||
| 0003bfc0:· | 0003bfc0:·200a·2020·2020·646e·6620·7265·696e·7374···.····dnf·reinst | ||
| 0003bfd0:·6 | 0003bfd0:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | ||
| 0003bfe0:· | 0003bfe0:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | ||
| 0003bff0:·20 | 0003bff0:·2020·0a66·690a·0a65·6c73·650a·2020·2020····.fi..else.···· | ||
| 0003c000:· | 0003c000:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | ||
| 0003c010:·2 | 0003c010:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | ||
| 0003c020:·6 | 0003c020:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | ||
| 0003c030:·6 | 0003c030:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | ||
| 0003c040:·20 | 0003c040:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | ||
| 0003c050:·6 | 0003c050:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | ||
| 0003c060:· | 0003c060:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | ||
| 0003c070:·7 | 0003c070:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003c080:·6 | 0003c080:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 0003c090:·6 | 0003c090:·6172·6765·743d·2223·6964·6d38·3134·3222··arget="#idm8142" | ||
| 0003c0a0:· | 0003c0a0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003c0b0:· | 0003c0b0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003c0c0:· | 0003c0c0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003c0d0:· | 0003c0d0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003c0e0:· | 0003c0e0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003c0f0:·6 | 0003c0f0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003c100:·6 | 0003c100:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003c110:· | 0003c110:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003c120:·6 | 0003c120:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003c130:· | 0003c130:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003c140:· | 0003c140:·6522·2069·643d·2269·646d·3831·3432·223e··e"·id="idm8142"> | ||
| 0003c150:· | 0003c150:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003c160:· | 0003c160:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003c170:· | 0003c170:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003c180:·2 | 0003c180:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003c190:· | 0003c190:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003c1a0:· | 0003c1a0:·7869·7479·3a3c·2f74·683e·3c74·643e·6869··xity:</th><td>hi | ||
| 0003c1b0:· | 0003c1b0:·6768·3c2f·7464·3e3c·2f74·723e·3c74·723e··gh</td></tr><tr> | ||
| 0003c1c0:·3 | 0003c1c0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003c1d0:·2 | 0003c1d0:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | ||
| 0003c1e0:· | 0003c1e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003c1f0:· | 0003c1f0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003c200:· | 0003c200:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003c210:· | 0003c210:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003c220:·3 | 0003c220:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | ||
| 0003c230:·43 | 0003c230:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | ||
| 0003c240:· | 0003c240:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | ||
| 0003c250:· | 0003c250:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | ||
| 0003c260:· | 0003c260:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | ||
| 0003c270:· | 0003c270:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | ||
| 0003c280:· | 0003c280:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | ||
| 0003c290:· | 0003c290:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | ||
| 0003c2a0:· | 0003c2a0:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | ||
| 0003c2b0:· | 0003c2b0:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | ||
| 0003c2c0:· | 0003c2c0:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | ||
| 0003c2d0:· | 0003c2d0:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | ||
| 0003c2e0:· | 0003c2e0:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | ||
| 0003c2f0:· | 0003c2f0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c300:· | 0003c300:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | ||
| 0003c310:· | 0003c310:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | ||
| 0003c320:·2 | 0003c320:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c330:· | 0003c330:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | ||
| 0003c340:· | 0003c340:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | ||
| 0003c350:· | 0003c350:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003c360:· | 0003c360:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | ||
| 0003c370:· | 0003c370:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003c380:· | 0003c380:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003c390:· | 0003c390:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | ||
| 0003c3a0:· | 0003c3a0:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | ||
| 0003c3b0:· | 0003c3b0:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | ||
| 0003c3c0:· | 0003c3c0:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0003c3d0:· | 0003c3d0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| 0003c3e0:·6 | 0003c3e0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 0003c3f0:· | 0003c3f0:·7472·6174·6567·790a·2020·2d20·7270·6d5f··trategy.··-·rpm_ | ||
| 0003c400:·6 | 0003c400:·7665·7269·6679·5f68·6173·6865·730a·0a2d··verify_hashes..- | ||
| 0003c410:· | 0003c410:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003c420:· | 0003c420:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| Max diff block lines reached; 10129961/10184913 bytes (99.46%) of diff not shown. | |||
| Offset 128, 14 lines modified | Offset 128, 33 lines modified | ||
| 128 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 128 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 129 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 129 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 130 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 130 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 137 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 138 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 139 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 140 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 141 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 142 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 143 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 144 | fi | ||
| 145 | else | ||
| 146 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 147 | fi | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 140 | -·name:·Gather·the·package·facts | 153 | -·name:·Gather·the·package·facts |
| 141 | ··package_facts: | 154 | ··package_facts: |
| Offset 302, 33 lines modified | Offset 321, 14 lines modified | ||
| 302 | ··-·PCI-DSSv4-11.5.2 | 321 | ··-·PCI-DSSv4-11.5.2 |
| 303 | ··-·high_complexity | 322 | ··-·high_complexity |
| 304 | ··-·high_severity | 323 | ··-·high_severity |
| 305 | ··-·medium_disruption | 324 | ··-·medium_disruption |
| 306 | ··-·no_reboot_needed | 325 | ··-·no_reboot_needed |
| 307 | ··-·restrict_strategy | 326 | ··-·restrict_strategy |
| 308 | ··-·rpm_verify_hashes | 327 | ··-·rpm_verify_hashes |
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 310 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 311 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 312 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 313 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 314 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 315 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 316 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 317 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 318 | fi | ||
| 319 | else | ||
| 320 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 321 | fi | ||
| 322 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 328 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 323 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 329 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 324 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 330 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 325 | run·the·following·command·to·determine·which·package·owns·it: | 331 | run·the·following·command·to·determine·which·package·owns·it: |
| 326 | $·rpm·-qf·FILENAME | 332 | $·rpm·-qf·FILENAME |
| 327 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 333 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 328 | $·sudo·rpm·--restore·PACKAGENAME | 334 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 347, 14 lines modified | Offset 347, 46 lines modified | ||
| 347 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 347 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 348 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 348 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 349 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 349 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 350 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 350 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 351 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 351 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 352 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 352 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 353 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 353 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 355 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 356 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 357 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 358 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 359 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 360 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 361 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 362 | declare·-A·SETPERMS_RPM_DICT | ||
| 363 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 364 | #·is·expected·by·the·RPM·database | ||
| 365 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 366 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 367 | do | ||
| 368 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 369 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 370 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 371 | done | ||
| 372 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 373 | #·correct·values | ||
| 374 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 375 | do | ||
| 376 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 377 | done | ||
| 378 | else | ||
| 379 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 380 | fi | ||
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 381 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 355 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 382 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 356 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 383 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 357 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 384 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 358 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 385 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 359 | -·name:·Gather·the·package·facts | 386 | -·name:·Gather·the·package·facts |
| 360 | ··package_facts: | 387 | ··package_facts: |
| Offset 462, 46 lines modified | Offset 494, 14 lines modified | ||
| 462 | ··-·PCI-DSSv4-11.5.2 | 494 | ··-·PCI-DSSv4-11.5.2 |
| 463 | ··-·high_complexity | 495 | ··-·high_complexity |
| 464 | ··-·high_severity | 496 | ··-·high_severity |
| 465 | ··-·medium_disruption | 497 | ··-·medium_disruption |
| 466 | ··-·no_reboot_needed | 498 | ··-·no_reboot_needed |
| 467 | ··-·restrict_strategy | 499 | ··-·restrict_strategy |
| 468 | ··-·rpm_verify_ownership | 500 | ··-·rpm_verify_ownership |
| 469 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 470 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 471 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 472 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 473 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1036353/1044064 bytes (99.26%) of diff not shown. | |||
| Offset 15804, 252 lines modified | Offset 15804, 252 lines modified | ||
| 0003dbb0:·6172·6765·743d·2223·6964·6d39·3136·3322··arget="#idm9163" | 0003dbb0:·6172·6765·743d·2223·6964·6d39·3136·3322··arget="#idm9163" | ||
| 0003dbc0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003dbc0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003dbd0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003dbd0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003dbe0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003dbe0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003dbf0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003dbf0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003dc00:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003dc00:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003dc10:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003dc10:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003dc20:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003dc30:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003dc40:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003dc50:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003dc60:·2220·6964·3d22·6964·6d39·3136·3322·3e3c··"·id="idm9163">< | |||
| 0003dc70:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003dc80:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003dc90:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003dca0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003dcb0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003dcc0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003dcd0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003dce0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003dcf0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003dd00:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003dd10:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003dd20:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003dd30:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003dd40:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003dd50:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003dd60:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003dd70:·6e73·7461·6c6c·5f63·7279·7074·6f2d·706f··nstall_crypto-po | |||
| 0003dd80:·6c69·6369·6573·0a0a·636c·6173·7320·696e··licies..class·in | |||
| 0003dd90:·7374·616c·6c5f·6372·7970·746f·2d70·6f6c··stall_crypto-pol | |||
| 0003dda0:·6963·6965·7320·7b0a·2020·7061·636b·6167··icies·{.··packag | |||
| 0003ddb0:·6520·7b20·2763·7279·7074·6f2d·706f·6c69··e·{·'crypto-poli | |||
| 0003ddc0:·6369·6573·273a·0a20·2020·2065·6e73·7572··cies':.····ensur | |||
| 0003ddd0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003dde0:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003ddf0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003de00:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003de10:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003de20:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003de30:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003de40:·6d39·3136·3422·2074·6162·696e·6465·783d··m9164"·tabindex= | |||
| 0003de50:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003de60:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003de70:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003de80:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003de90:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003dea0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003deb0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003dec0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ded0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003dee0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003def0:·3931·3634·223e·3c74·6162·6c65·2063·6c61··9164"><table·cla | |||
| 0003df00:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003df10:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003df20:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003df30:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003df40:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003df50:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003df60:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003df70:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003df80:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003df90:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003dfa0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003dfb0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003dfc0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003dfd0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003dfe0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003dff0:·6e61·6d65·3a20·456e·7375·7265·2063·7279··name:·Ensure·cry | |||
| 0003e000:·7074·6f2d·706f·6c69·6369·6573·2069·7320··pto-policies·is· | |||
| 0003e010:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003e020:·6167·653a·0a20·2020·206e·616d·653a·2063··age:.····name:·c | |||
| 0003e030:·7279·7074·6f2d·706f·6c69·6369·6573·0a20··rypto-policies.· | |||
| 0003e040:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003e050:·740a·2020·7461·6773·3a0a·2020·2d20·4449··t.··tags:.··-·DI | |||
| 0003e060:·5341·2d53·5449·472d·5248·454c·2d30·392d··SA-STIG-RHEL-09- | |||
| 0003e070:·3231·3531·3030·0a20·202d·2065·6e61·626c··215100.··-·enabl | |||
| 0003e080:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003e090:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003e0a0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003e0b0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003e0c0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003e0d0:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003e0e0:·636b·6167·655f·6372·7970·746f·2d70·6f6c··ckage_crypto-pol | |||
| 0003e0f0:·6963·6965·735f·696e·7374·616c·6c65·640a··icies_installed. | |||
| 0003e100:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003e110:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003e120:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003e130:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003e140:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003e150:·3d22·2369·646d·3931·3635·2220·7461·6269··="#idm9165"·tabi | |||
| 0003e160:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003e170:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003e180:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003e190:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003e1a0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003e1b0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003e1c0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003e1d0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003e1e0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003e1f0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003e200:·6c6c·6170·7365·2220·6964·3d22·6964·6d39··llapse"·id="idm9 | |||
| 0003e210:·3136·3522·3e3c·7072·653e·3c63·6f64·653e··165"><pre><code> | |||
| 0003e220:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003e230:·6d65·203d·2022·6372·7970·746f·2d70·6f6c··me·=·"crypto-pol | |||
| 0003e240:·6963·6965·7322·0a76·6572·7369·6f6e·203d··icies".version·= | |||
| 0003e250:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003e260:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003e270:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003e280:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003e290:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003e2a0:·6172·6765·743d·2223·6964·6d39·3136·3622··arget="#idm9166" | |||
| 0003e2b0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003e2c0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003e2d0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003e2e0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003e2f0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003e300:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003 | 0003dc20:·6f6e·2073·6372·6970·7420·e287·b23c·2f61··on·script·...</a | ||
| 0003 | 0003dc30:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003 | 0003dc40:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003 | 0003dc50:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003 | 0003dc60:·6d39·3136·3322·3e3c·7461·626c·6520·636c··m9163"><table·cl | ||
| 0003 | 0003dc70:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003 | 0003dc80:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003 | 0003dc90:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003 | 0003dca0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| Max diff block lines reached; 6801583/6835007 bytes (99.51%) of diff not shown. | |||
| Offset 161, 78 lines modified | Offset 161, 78 lines modified | ||
| 161 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 161 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 162 | Severity: ··medium | 162 | Severity: ··medium |
| 163 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 163 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 164 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 | 164 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 |
| 165 | References:·_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 165 | References:·_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 166 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 166 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 167 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule | 167 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | include·install_crypto-policies | ||
| 174 | 173 | dnf·install·crypto-policies | |
| 175 | ··package·{·'crypto-policies': | ||
| 176 | ····ensure·=>·'installed', | ||
| 177 | ··} | ||
| 178 | } | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 179 | package·install·crypto-policies | ||
| 184 | -·name:·Ensure·crypto-policies·is·installed | ||
| 185 | ··package: | ||
| 186 | ····name:·crypto-policies | ||
| 187 | ····state:·present | ||
| 188 | ··tags: | ||
| 189 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 190 | ··-·enable_strategy | ||
| 191 | ··-·low_complexity | ||
| 192 | ··-·low_disruption | ||
| 193 | ··-·medium_severity | ||
| 194 | ··-·no_reboot_needed | ||
| 195 | ··-·package_crypto-policies_installed | ||
| 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 197 | [[packages]] | 181 | [[packages]] |
| 198 | name·=·"crypto-policies" | 182 | name·=·"crypto-policies" |
| 199 | version·=·"*" | 183 | version·=·"*" |
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 205 | dnf·install·crypto-policies | ||
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 211 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 189 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| 212 | ····dnf·install·-y·"crypto-policies" | 190 | ····dnf·install·-y·"crypto-policies" |
| 213 | fi | 191 | fi |
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 197 | -·name:·Ensure·crypto-policies·is·installed | ||
| 198 | ··package: | ||
| 199 | ····name:·crypto-policies | ||
| 200 | ····state:·present | ||
| 201 | ··tags: | ||
| 202 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 203 | ··-·enable_strategy | ||
| 204 | ··-·low_complexity | ||
| 205 | ··-·low_disruption | ||
| 206 | ··-·medium_severity | ||
| 207 | ··-·no_reboot_needed | ||
| 208 | ··-·package_crypto-policies_installed | ||
| 214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 215 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 216 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 217 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 218 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 219 | package·--add=crypto-policies | 214 | package·--add=crypto-policies |
| 220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 221 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 222 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 223 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 224 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 220 | include·install_crypto-policies | ||
| 221 | class·install_crypto-policies·{ | ||
| 225 | package· | 222 | ··package·{·'crypto-policies': |
| 223 | ····ensure·=>·'installed', | ||
| 224 | ··} | ||
| 225 | } | ||
| 226 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 226 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 227 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 227 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| 228 | $·sudo·update-crypto-policies·--set·FIPS:OSPP | 228 | $·sudo·update-crypto-policies·--set·FIPS:OSPP |
| 229 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 229 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 230 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 230 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 231 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 231 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 232 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 232 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 244, 14 lines modified | Offset 244, 58 lines modified | ||
| 244 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 244 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 245 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 245 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 246 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 246 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 247 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 247 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 248 | ············_\x8c_\x8i_\x8s······1.6.1 | 248 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 249 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 249 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 250 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 250 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 251 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 252 | var_system_crypto_policy='FIPS:OSPP' | ||
| 253 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 254 | rc=$? | ||
| 255 | if·test·"$rc"·=·127;·then | ||
| 256 | » echo·"$stderr_of_call"·>&2 | ||
| 257 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 258 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 259 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 260 | » false··#·end·with·an·error·code | ||
| 261 | elif·test·"$rc"·!=·0;·then | ||
| 262 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| Max diff block lines reached; 911351/919674 bytes (99.10%) of diff not shown. | |||
| Offset 15294, 408 lines modified | Offset 15294, 408 lines modified | ||
| 0003bbd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003bbd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003bbe0:·2369·646d·3831·3431·2220·7461·6269·6e64··#idm8141"·tabind | 0003bbe0:·2369·646d·3831·3431·2220·7461·6269·6e64··#idm8141"·tabind | ||
| 0003bbf0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003bbf0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003bc00:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003bc00:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003bc10:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003bc10:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003bc20:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003bc20:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003bc30:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003bc30:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003bc40:·5265·6d65·6469·6174·696f·6e20· | 0003bc40:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003bc50:·6 | 0003bc50:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | ||
| 0003bc60:· | 0003bc60:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003bc70:·7 | 0003bc70:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003bc80:·6 | 0003bc80:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003bc90:· | 0003bc90:·3831·3431·223e·3c70·7265·3e3c·636f·6465··8141"><pre><code | ||
| 0003bca0:· | 0003bca0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | ||
| 0003bcb0:· | 0003bcb0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | ||
| 0003bcc0:· | 0003bcc0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | ||
| 0003bcd0:· | 0003bcd0:·7466·6f72·6d73·0a69·6620·2120·2820·7b20··tforms.if·!·(·{· | ||
| 0003bce0:·7 | 0003bce0:·7270·6d20·2d2d·7175·6965·7420·2d71·206b··rpm·--quiet·-q·k | ||
| 0003bcf0:· | 0003bcf0:·6572·6e65·6c20·3b7d·2026·616d·703b·2661··ernel·;}·&&a | ||
| 0003bd00:· | 0003bd00:·6d70·3b20·7b20·7270·6d20·2d2d·7175·6965··mp;·{·rpm·--quie | ||
| 0003bd10:·727 | 0003bd10:·7420·2d71·2072·706d·2d6f·7374·7265·6520··t·-q·rpm-ostree· | ||
| 0003bd20:·3 | 0003bd20:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003bd30:· | 0003bd30:·7270·6d20·2d2d·7175·6965·7420·2d71·2062··rpm·--quiet·-q·b | ||
| 0003bd40:· | 0003bd40:·6f6f·7463·203b·7d20·2661·6d70·3b26·616d··ootc·;}·&&am | ||
| 0003bd50:·7 | 0003bd50:·703b·207b·2021·2072·706d·202d·2d71·7569··p;·{·!·rpm·--qui | ||
| 0003bd60:· | 0003bd60:·6574·202d·7120·6f70·656e·7368·6966·742d··et·-q·openshift- | ||
| 0003bd70:·6 | 0003bd70:·6b75·6265·6c65·7420·3b7d·2029·3b20·7468··kubelet·;}·);·th | ||
| 0003bd80:· | 0003bd80:·656e·0a0a·2320·4669·6e64·2077·6869·6368··en..#·Find·which | ||
| 0003bd90:· | 0003bd90:·2066·696c·6573·2068·6176·6520·696e·636f···files·have·inco | ||
| 0003bda0:· | 0003bda0:·7272·6563·7420·6861·7368·2028·6e6f·7420··rrect·hash·(not· | ||
| 0003bdb0:·6 | 0003bdb0:·696e·202f·6574·632c·2062·6563·6175·7365··in·/etc,·because | ||
| 0003bdc0:· | 0003bdc0:·206f·6620·7468·6520·7379·7374·656d·2072···of·the·system·r | ||
| 0003bdd0:·6 | 0003bdd0:·656c·6174·6564·2063·6f6e·6669·6720·6669··elated·config·fi | ||
| 0003bde0:· | 0003bde0:·6c65·7329·2061·6e64·2074·6865·6e20·6765··les)·and·then·ge | ||
| 0003bdf0:· | 0003bdf0:·7420·6669·6c65·7320·6e61·6d65·730a·6669··t·files·names.fi | ||
| 0003be00:· | 0003be00:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003be10:· | 0003be10:·6374·5f68·6173·683d·2224·2872·706d·202d··ct_hash="$(rpm·- | ||
| 0003be20:· | 0003be20:·5661·202d·2d6e·6f63·6f6e·6669·6720·7c20··Va·--noconfig·|· | ||
| 0003be30:· | 0003be30:·6772·6570·202d·4520·275e·2e2e·3527·207c··grep·-E·'^..5'·| | ||
| 0003be40:· | 0003be40:·2061·776b·2027·7b70·7269·6e74·2024·4e46···awk·'{print·$NF | ||
| 0003be50:· | 0003be50:·7d27·2029·220a·0a69·6620·5b20·2d6e·2022··}'·)"..if·[·-n·" | ||
| 0003be60:· | 0003be60:·2466·696c·6573·5f77·6974·685f·696e·636f··$files_with_inco | ||
| 0003be70:· | 0003be70:·7272·6563·745f·6861·7368·2220·5d3b·2074··rrect_hash"·];·t | ||
| 0003be80:· | 0003be80:·6865·6e0a·2020·2020·2320·4672·6f6d·2066··hen.····#·From·f | ||
| 0003be90:· | 0003be90:·696c·6573·206e·616d·6573·2067·6574·2070··iles·names·get·p | ||
| 0003bea0:· | 0003bea0:·6163·6b61·6765·206e·616d·6573·2061·6e64··ackage·names·and | ||
| 0003beb0:·20 | 0003beb0:·2063·6861·6e67·6520·6e65·776c·696e·6520···change·newline· | ||
| 0003bec0:· | 0003bec0:·746f·2073·7061·6365·2c20·6265·6361·7573··to·space,·becaus | ||
| 0003bed0:· | 0003bed0:·6520·7270·6d20·7772·6974·6573·2065·6163··e·rpm·writes·eac | ||
| 0003bee0:·6 | 0003bee0:·6820·7061·636b·6167·6520·746f·206e·6577··h·package·to·new | ||
| 0003bef0:·2 | 0003bef0:·206c·696e·650a·2020·2020·7061·636b·6167···line.····packag | ||
| 0003bf00:· | 0003bf00:·6573·5f74·6f5f·7265·696e·7374·616c·6c3d··es_to_reinstall= | ||
| 0003bf10:· | 0003bf10:·2224·2872·706d·202d·7166·2024·6669·6c65··"$(rpm·-qf·$file | ||
| 0003bf20:· | 0003bf20:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003bf30:· | 0003bf30:·5f68·6173·6820·7c20·7472·2027·5c6e·2720··_hash·|·tr·'\n'· | ||
| 0003bf40:· | 0003bf40:·2720·2729·220a·0a20·2020·200a·2020·2020··'·')"..····.···· | ||
| 0003bf50:·6 | 0003bf50:·646e·6620·7265·696e·7374·616c·6c20·2d79··dnf·reinstall·-y | ||
| 0003bf60:·2 | 0003bf60:·2024·7061·636b·6167·6573·5f74·6f5f·7265···$packages_to_re | ||
| 0003bf70:·6 | 0003bf70:·696e·7374·616c·6c0a·2020·2020·0a66·690a··install.····.fi. | ||
| 0003bf80:· | 0003bf80:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | ||
| 0003bf90:· | 0003bf90:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | ||
| 0003bfa0:·6 | 0003bfa0:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | ||
| 0003bfb0:· | 0003bfb0:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | ||
| 0003bfc0:· | 0003bfc0:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | ||
| 0003bfd0:· | 0003bfd0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003bfe0:· | 0003bfe0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003bff0:·62 | 0003bff0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003c000:·6 | 0003c000:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003c010:· | 0003c010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003c020:· | 0003c020:·2223·6964·6d38·3134·3222·2074·6162·696e··"#idm8142"·tabin | ||
| 0003c030:· | 0003c030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003c040:· | 0003c040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003c050:·6 | 0003c050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003c060:· | 0003c060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003c070:·657 | 0003c070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003c080:· | 0003c080:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003c090:· | 0003c090:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003c0a0:· | 0003c0a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003c0b0:· | 0003c0b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003c0c0:· | 0003c0c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003c0d0:·22 | 0003c0d0:·2269·646d·3831·3432·223e·3c74·6162·6c65··"idm8142"><table | ||
| 0003c0e0:·20 | 0003c0e0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003c0f0:· | 0003c0f0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003c100:· | 0003c100:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003c110:· | 0003c110:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003c120:·3 | 0003c120:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003c130:·2 | 0003c130:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003c140:· | 0003c140:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003c150:· | 0003c150:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003c160:· | 0003c160:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003c170:· | 0003c170:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003c180:· | 0003c180:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003c190:· | 0003c190:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003c1a0:· | 0003c1a0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003c1b0:· | 0003c1b0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003c1c0:· | 0003c1c0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003c1d0:· | 0003c1d0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003c1e0:· | 0003c1e0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | ||
| 0003c1f0:· | 0003c1f0:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | ||
| 0003c200:·7 | 0003c200:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | ||
| 0003c210:·6 | 0003c210:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | ||
| 0003c220:·6 | 0003c220:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003c230:· | 0003c230:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003c240:· | 0003c240:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003c250:· | 0003c250:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003c260:· | 0003c260:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003c270:· | 0003c270:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003c280:· | 0003c280:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003c290:· | 0003c290:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003c2a0:· | 0003c2a0:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003c2b0:· | 0003c2b0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003c2c0:· | 0003c2c0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c2d0:· | 0003c2d0:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003c2e0:· | 0003c2e0:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003c2f0:· | 0003c2f0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003c300:· | 0003c300:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003c310:· | 0003c310:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003c320:· | 0003c320:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003c330:· | 0003c330:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003c340:· | 0003c340:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003c350:·7 | 0003c350:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003c360:·6 | 0003c360:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003c370:· | 0003c370:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 0003c380:· | 0003c380:·790a·2020·2d20·7270·6d5f·7665·7269·6679··y.··-·rpm_verify | ||
| 0003c390:· | 0003c390:·5f68·6173·6865·730a·0a2d·206e·616d·653a··_hashes..-·name: | ||
| 0003c3a0:· | 0003c3a0:·2027·5365·7420·6661·6374·3a20·5061·636b···'Set·fact:·Pack | ||
| Max diff block lines reached; 17801677/17856629 bytes (99.69%) of diff not shown. | |||
| Offset 15233, 282 lines modified | Offset 15233, 282 lines modified | ||
| 0003b800:·6765·743d·2223·6964·6d38·3438·3022·2074··get="#idm8480"·t | 0003b800:·6765·743d·2223·6964·6d38·3438·3022·2074··get="#idm8480"·t | ||
| 0003b810:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b810:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b820:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b820:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b830:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b830:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b840:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b840:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b850:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b850:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b860:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b860:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b870:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003b880:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b890:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b8a0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b8b0:·6964·3d22·6964·6d38·3438·3022·3e3c·7461··id="idm8480"><ta | |||
| 0003b8c0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b8d0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b8e0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b8f0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b900:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b910:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b920:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b930:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b940:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b950:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b960:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b970:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b980:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b990:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b9a0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b9b0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b9c0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b9d0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b9e0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b9f0:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003ba00:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003ba10:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003ba20:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003ba30:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003ba40:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003ba50:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003ba60:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 0003ba70:·3831·2220·7461·6269·6e64·6578·3d22·3022··81"·tabindex="0" | |||
| 0003ba80:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003ba90:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003baa0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003bab0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003bac0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003bad0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b | 0003b870:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0003b | 0003b880:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b | 0003b890:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b | 0003b8a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | ||
| 0003b | 0003b8b0:·3438·3022·3e3c·7461·626c·6520·636c·6173··480"><table·clas | ||
| 0003b | 0003b8c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b | 0003b8d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b | 0003b8e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b | 0003b8f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b | 0003b900:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b | 0003b910:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003b920:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b930:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b940:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b950:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b960:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b970:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b980:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b990:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b9a0:·653e·3c70·7265·3e3c·636f·6465·3e0a·646e··e><pre><code>.dn | |||
| 0003b9b0:·6620·696e·7374·616c·6c20·6169·6465·0a3c··f·install·aide.< | |||
| 0003b9c0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b9d0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b9e0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b9f0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003ba00:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003ba10:·2223·6964·6d38·3438·3122·2074·6162·696e··"#idm8481"·tabin | |||
| 0003ba20:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003ba30:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003ba40:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003ba50:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003ba60:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003ba70:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | |||
| 0003ba80:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003ba90:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003baa0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003bab0:·7365·2220·6964·3d22·6964·6d38·3438·3122··se"·id="idm8481" | |||
| 0003bac0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003bad0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003bae0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003baf0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003bb00:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003bb10:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003bb20:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bb30:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003bb | 0003bb40:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003bb | 0003bb50:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003bb | 0003bb60:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003bb | 0003bb70:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003bb | 0003bb80:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003bb | 0003bb90:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | ||
| 0003b | 0003bba0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003bbb0:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 0003bbc0:·6520·696e·7374·616c·6c20·6169·6465·0a3c··e·install·aide.< | |||
| 0003bbd0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003bbe0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003bbf0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003bc00:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003bc10:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bc20:·2223·6964·6d38·3438·3222·2074·6162·696e··"#idm8482"·tabin | |||
| 0003bc30:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bc40:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bc50:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bc60:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bc70:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003bc80:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003bc90:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003bca0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003bcb0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bcc0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bcd0:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003bce0:·3832·223e·3c70·7265·3e3c·636f·6465·3e0a··82"><pre><code>. | |||
| 0003bcf0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003bd00:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003bd10:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003bc10:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003bc20:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003bc30:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003bc40:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003bc50:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003bc60:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| Max diff block lines reached; 32471454/32509018 bytes (99.88%) of diff not shown. | |||
| Offset 15251, 283 lines modified | Offset 15251, 283 lines modified | ||
| 0003b920:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b920:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b930:·646d·3834·3830·2220·7461·6269·6e64·6578··dm8480"·tabindex | 0003b930:·646d·3834·3830·2220·7461·6269·6e64·6578··dm8480"·tabindex | ||
| 0003b940:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b940:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b950:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b950:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b960:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b960:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b970:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b970:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b980:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b980:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b990:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b9a0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b9b0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b9c0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b9d0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b9e0:·3834·3830·223e·3c74·6162·6c65·2063·6c61··8480"><table·cla | |||
| 0003b9f0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003ba00:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003ba10:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003ba20:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003ba30:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003ba40:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ba50:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003ba60:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003ba70:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ba80:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003ba90:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003baa0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003bab0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003bac0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003bad0:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003bae0:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003baf0:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003bb00:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003bb10:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003bb20:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003bb30:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003bb40:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bb50:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bb60:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bb70:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bb80:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bb90:·743d·2223·6964·6d38·3438·3122·2074·6162··t="#idm8481"·tab | |||
| 0003bba0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bbb0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bbc0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bbd0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bbe0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bbf0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003bc00:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003bc10:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bc20:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bc30:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003bc40:·643d·2269·646d·3834·3831·223e·3c74·6162··d="idm8481"><tab | |||
| 0003bc50:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003bc60:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003bc70:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003bc80:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003bc90:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003bca0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003bcb0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003bcc0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003bcd0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003bce0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003bcf0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003bd00:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003bd10:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003bd20:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003bd30:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003bd40:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003bd50:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003bd60:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003bd70:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003bd80:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003bd90:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003bda0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003bdb0:·5248·454c·2d30·392d·3635·3130·3130·0a20··RHEL-09-651010.· | |||
| 0003bdc0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003bdd0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003bde0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003bdf0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003be00:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003be10:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003be20:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003be30:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003be40:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003be50:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003be60:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003be70:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003be80:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003be90:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003bea0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003beb0:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003bec0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003bed0:·7768·656e·3a20·2722·6b65·726e·656c·2220··when:·'"kernel"· | |||
| 0003bee0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0003bef0:·2e70·6163·6b61·6765·7327·0a20·2074·6167··.packages'.··tag | |||
| 0003bf00:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003bf10:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003bf20:·4947·2d52·4845·4c2d·3039·2d36·3531·3031··IG-RHEL-09-65101 | |||
| 0003bf30:·300a·2020·2d20·4e49·5354·2d38·3030·2d35··0.··-·NIST-800-5 | |||
| 0003bf40:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003bf50:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003bf60:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003bf70:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003bf80:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003bf90:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003bfa0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003bfb0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003bfc0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003bfd0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003bfe0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003bff0:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003c000:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003c010:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003c020:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003c030:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003c040:·6574·3d22·2369·646d·3834·3832·2220·7461··et="#idm8482"·ta | |||
| 0003c050:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003c060:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003c070:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003c080:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003c090:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003c0a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003c0b0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003c0c0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003c0d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003c0e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003c0f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003c100:·6d38·3438·3222·3e3c·7072·653e·3c63·6f64··m8482"><pre><cod | |||
| Max diff block lines reached; 32384838/32422540 bytes (99.88%) of diff not shown. | |||
| Offset 15023, 195 lines modified | Offset 15023, 195 lines modified | ||
| 0003aae0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003aae0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003aaf0:·3d22·2369·646d·3235·3130·2220·7461·6269··="#idm2510"·tabi | 0003aaf0:·3d22·2369·646d·3235·3130·2220·7461·6269··="#idm2510"·tabi | ||
| 0003ab00:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ab00:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003ab10:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003ab10:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ab20:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ab20:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ab30:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ab30:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ab40:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ab40:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ab50:·223e·5265·6d65·6469·6174·696f·6e20· | 0003ab50:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | ||
| 0003ab60:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003ab70:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ab80:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ab90:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003aba0:·646d·3235·3130·223e·3c70·7265·3e3c·636f··dm2510"><pre><co | |||
| 0003abb0:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 0003abc0:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 0003abd0:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003abe0:·6c61·7466·6f72·6d73·0a69·6620·7270·6d20··latforms.if·rpm· | |||
| 0003abf0:·2d2d·7175·6965·7420·2d71·2062·696e·643b··--quiet·-q·bind; | |||
| 0003ac00:·2074·6865·6e0a·0a66·756e·6374·696f·6e20···then..function· | |||
| 0003ac10:·7265·6d65·6469·6174·655f·6269·6e64·5f63··remediate_bind_c | |||
| 0003ac20:·7279·7074·6f5f·706f·6c69·6379·2829·207b··rypto_policy()·{ | |||
| 0003ac30:·0a09·434f·4e46·4947·5f46·494c·453d·222f··..CONFIG_FILE="/ | |||
| 0003ac40:·6574·632f·6e61·6d65·642e·636f·6e66·220a··etc/named.conf". | |||
| 0003ac50:·0969·6620·7465·7374·202d·6620·2224·434f··.if·test·-f·"$CO | |||
| 0003ac60:·4e46·4947·5f46·494c·4522·3b20·7468·656e··NFIG_FILE";·then | |||
| 0003ac70:·0a09·0973·6564·202d·6920·2773·7c6f·7074··...sed·-i·'s|opt | |||
| 0003ac80:·696f·6e73·207b·7c26·616d·703b·5c6e·5c74··ions·{|&\n\t | |||
| 0003ac90:·696e·636c·7564·6520·222f·6574·632f·6372··include·"/etc/cr | |||
| 0003aca0:·7970·746f·2d70·6f6c·6963·6965·732f·6261··ypto-policies/ba | |||
| 0003acb0:·636b·2d65·6e64·732f·6269·6e64·2e63·6f6e··ck-ends/bind.con | |||
| 0003acc0:·6669·6722·3b7c·2720·2224·434f·4e46·4947··fig";|'·"$CONFIG | |||
| 0003acd0:·5f46·494c·4522·0a09·0972·6574·7572·6e20··_FILE"...return· | |||
| 0003ace0:·300a·0965·6c73·650a·0909·6563·686f·2022··0..else...echo·" | |||
| 0003ab60:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ab70:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ab80:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ab90:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003aba0:·3d22·6964·6d32·3531·3022·3e3c·7461·626c··="idm2510"><tabl | |||
| 0003abb0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003abc0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003abd0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003abe0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003abf0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ac00:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ac10:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ac20:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ac30:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ac40:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ac50:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ac60:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003ac70:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ac80:·636f·6e66·6967·7572·653c·2f74·643e·3c2f··configure</td></ | |||
| 0003ac90:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003aca0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003acb0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003acc0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003acd0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003ace0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003acf0:·3a0a·2020·2d20·4e49·5354·2d38·3030·2d35··:.··-·NIST-800-5 | |||
| 0003ad00:·332d·5343·2d31·3228·3229·0a20·202d·204e··3-SC-12(2).··-·N | |||
| 0003ad10:·4953·542d·3830·302d·3533·2d53·432d·3132··IST-800-53-SC-12 | |||
| 0003ad20:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | |||
| 0003ad30:·2d35·332d·5343·2d31·330a·2020·2d20·636f··-53-SC-13.··-·co | |||
| 0003ad40:·6e66·6967·7572·655f·6269·6e64·5f63·7279··nfigure_bind_cry | |||
| 0003ad50:·7074·6f5f·706f·6c69·6379·0a20·202d·2063··pto_policy.··-·c | |||
| 0003ad60:·6f6e·6669·6775·7265·5f73·7472·6174·6567··onfigure_strateg | |||
| 0003ad70:·790a·2020·2d20·6869·6768·5f73·6576·6572··y.··-·high_sever | |||
| 0003ad80:·6974·790a·2020·2d20·6c6f·775f·636f·6d70··ity.··-·low_comp | |||
| 0003ad90:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003ada0:·6973·7275·7074·696f·6e0a·2020·2d20·6e6f··isruption.··-·no | |||
| 0003adb0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a0a··_reboot_needed.. | |||
| 0003adc0:·2d20·6e61·6d65·3a20·436f·6e66·6967·7572··-·name:·Configur | |||
| 0003add0:·6520·4249·4e44·2074·6f20·7573·6520·5379··e·BIND·to·use·Sy | |||
| 0003ade0:·7374·656d·2043·7279·7074·6f20·506f·6c69··stem·Crypto·Poli | |||
| 0003adf0:·6379·202d·2043·6865·636b·2042·494e·4420··cy·-·Check·BIND· | |||
| 0003ae00:·636f·6e66·6967·7572·6174·696f·6e20·6669··configuration·fi | |||
| 0003ae10:·6c65·0a20·2020·2065·7869·7374·730a·2020··le.····exists.·· | |||
| 0003ae20:·616e·7369·626c·652e·6275·696c·7469·6e2e··ansible.builtin. | |||
| 0003ae30:·7374·6174·3a0a·2020·2020·7061·7468·3a20··stat:.····path:· | |||
| 0003ae40:·2f65·7463·2f6e·616d·6564·2e63·6f6e·660a··/etc/named.conf. | |||
| 0003ae50:·2020·7265·6769·7374·6572·3a20·6269·6e64····register:·bind | |||
| 0003ae60:·5f63·6f6e·6669·675f·6669·6c65·0a20·2077··_config_file.··w | |||
| 0003ae70:·6865·6e3a·2027·2262·696e·6422·2069·6e20··hen:·'"bind"·in· | |||
| 0003ae80:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003ae90:·636b·6167·6573·270a·2020·7461·6773·3a0a··ckages'.··tags:. | |||
| 0003aea0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003aeb0:·5343·2d31·3228·3229·0a20·202d·204e·4953··SC-12(2).··-·NIS | |||
| 0003aec0:·542d·3830·302d·3533·2d53·432d·3132·2833··T-800-53-SC-12(3 | |||
| 0003aed0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003aee0:·332d·5343·2d31·330a·2020·2d20·636f·6e66··3-SC-13.··-·conf | |||
| 0003aef0:·6967·7572·655f·6269·6e64·5f63·7279·7074··igure_bind_crypt | |||
| 0003af00:·6f5f·706f·6c69·6379·0a20·202d·2063·6f6e··o_policy.··-·con | |||
| 0003af10:·6669·6775·7265·5f73·7472·6174·6567·790a··figure_strategy. | |||
| 0003af20:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | |||
| 0003af30:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003af40:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003af50:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | |||
| 0003af60:·6562·6f6f·745f·6e65·6564·6564·0a0a·2d20··eboot_needed..-· | |||
| 0003af70:·6e61·6d65·3a20·436f·6e66·6967·7572·6520··name:·Configure· | |||
| 0003af80:·4249·4e44·2074·6f20·7573·6520·5379·7374··BIND·to·use·Syst | |||
| 0003af90:·656d·2043·7279·7074·6f20·506f·6c69·6379··em·Crypto·Policy | |||
| 0003afa0:·202d·2041·626f·7274·696e·6720·7265·6d65···-·Aborting·reme | |||
| 0003afb0:·6469·6174·696f·6e2c·2066·696c·6520·6e6f··diation,·file·no | |||
| 0003afc0:·740a·2020·2020·666f·756e·640a·2020·616e··t.····found.··an | |||
| 0003afd0:·7369·626c·652e·6275·696c·7469·6e2e·6465··sible.builtin.de | |||
| 0003afe0:·6275·673a·0a20·2020·206d·7367·3a20·4162··bug:.····msg:·Ab | |||
| 0003a | 0003acf0:·4162·6f72·7469·6e67·2072·656d·6564·6961··Aborting·remedia | ||
| 0003b000:·6f6e·2061·7320·272f·6574·632f·6e61·6d65··on·as·'/etc/name | |||
| 0003b010:·642e·636f·6e66·2720·7761·7320·6e6f·7420··d.conf'·was·not· | |||
| 0003b020:·666f·756e·642e·0a20·2077·6865·6e3a·0a20··found..··when:.· | |||
| 0003b030:·202d·2027·2262·696e·6422·2069·6e20·616e···-·'"bind"·in·an | |||
| 0003b040:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003b050:·6167·6573·270a·2020·2d20·6e6f·7420·6269··ages'.··-·not·bi | |||
| 0003b060:·6e64·5f63·6f6e·6669·675f·6669·6c65·2e73··nd_config_file.s | |||
| 0003b070:·7461·742e·6578·6973·7473·0a20·2074·6167··tat.exists.··tag | |||
| 0003b080:·733a·0a20·202d·204e·4953·542d·3830·302d··s:.··-·NIST-800- | |||
| 0003b090:·3533·2d53·432d·3132·2832·290a·2020·2d20··53-SC-12(2).··-· | |||
| 0003b0a0:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003b0b0:·3228·3329·0a20·202d·204e·4953·542d·3830··2(3).··-·NIST-80 | |||
| 0003b0c0:·302d·3533·2d53·432d·3133·0a20·202d·2063··0-53-SC-13.··-·c | |||
| 0003b0d0:·6f6e·6669·6775·7265·5f62·696e·645f·6372··onfigure_bind_cr | |||
| 0003b0e0:·7970·746f·5f70·6f6c·6963·790a·2020·2d20··ypto_policy.··-· | |||
| 0003b0f0:·636f·6e66·6967·7572·655f·7374·7261·7465··configure_strate | |||
| 0003b100:·6779·0a20·202d·2068·6967·685f·7365·7665··gy.··-·high_seve | |||
| 0003b110:·7269·7479·0a20·202d·206c·6f77·5f63·6f6d··rity.··-·low_com | |||
| 0003b120:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b130:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | |||
| Max diff block lines reached; 18695945/18721503 bytes (99.86%) of diff not shown. | |||
| Offset 15236, 408 lines modified | Offset 15236, 408 lines modified | ||
| 0003b830:·6574·3d22·2369·646d·3138·3836·2220·7461··et="#idm1886"·ta | 0003b830:·6574·3d22·2369·646d·3138·3836·2220·7461··et="#idm1886"·ta | ||
| 0003b840:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b840:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b850:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b850:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b860:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b860:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b870:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b870:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b880:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b880:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b890:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b890:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b8a0:· | 0003b8a0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 0003b8b0:· | 0003b8b0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b8c0:· | 0003b8c0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b8d0:· | 0003b8d0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b8e0:· | 0003b8e0:·2269·646d·3138·3836·223e·3c70·7265·3e3c··"idm1886"><pre>< | ||
| 0003b8f0:·6 | 0003b8f0:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 0003b900:· | 0003b900:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | ||
| 0003b910:· | 0003b910:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | ||
| 0003b920:· | 0003b920:·2070·6c61·7466·6f72·6d73·0a69·6620·2120···platforms.if·!· | ||
| 0003b930:· | 0003b930:·2820·7b20·7270·6d20·2d2d·7175·6965·7420··(·{·rpm·--quiet· | ||
| 0003b940:· | 0003b940:·2d71·206b·6572·6e65·6c20·3b7d·2026·616d··-q·kernel·;}·&am | ||
| 0003b950:· | 0003b950:·703b·2661·6d70·3b20·7b20·7270·6d20·2d2d··p;&·{·rpm·-- | ||
| 0003b960:· | 0003b960:·7175·6965·7420·2d71·2072·706d·2d6f·7374··quiet·-q·rpm-ost | ||
| 0003b970:· | 0003b970:·7265·6520·3b7d·2026·616d·703b·2661·6d70··ree·;}·&& | ||
| 0003b980:·3 | 0003b980:·3b20·7b20·7270·6d20·2d2d·7175·6965·7420··;·{·rpm·--quiet· | ||
| 0003b990:· | 0003b990:·2d71·2062·6f6f·7463·203b·7d20·2661·6d70··-q·bootc·;}·& | ||
| 0003b9a0:· | 0003b9a0:·3b26·616d·703b·207b·2021·2072·706d·202d··;&·{·!·rpm·- | ||
| 0003b9b0:· | 0003b9b0:·2d71·7569·6574·202d·7120·6f70·656e·7368··-quiet·-q·opensh | ||
| 0003b9c0:·6 | 0003b9c0:·6966·742d·6b75·6265·6c65·7420·3b7d·2029··ift-kubelet·;}·) | ||
| 0003b9d0:· | 0003b9d0:·3b20·7468·656e·0a0a·2320·4669·6e64·2077··;·then..#·Find·w | ||
| 0003b9e0:· | 0003b9e0:·6869·6368·2066·696c·6573·2068·6176·6520··hich·files·have· | ||
| 0003b9f0:·6 | 0003b9f0:·696e·636f·7272·6563·7420·6861·7368·2028··incorrect·hash·( | ||
| 0003ba00:·6 | 0003ba00:·6e6f·7420·696e·202f·6574·632c·2062·6563··not·in·/etc,·bec | ||
| 0003ba10:·6 | 0003ba10:·6175·7365·206f·6620·7468·6520·7379·7374··ause·of·the·syst | ||
| 0003ba20:· | 0003ba20:·656d·2072·656c·6174·6564·2063·6f6e·6669··em·related·confi | ||
| 0003ba30:· | 0003ba30:·6720·6669·6c65·7329·2061·6e64·2074·6865··g·files)·and·the | ||
| 0003ba40:· | 0003ba40:·6e20·6765·7420·6669·6c65·7320·6e61·6d65··n·get·files·name | ||
| 0003ba50:· | 0003ba50:·730a·6669·6c65·735f·7769·7468·5f69·6e63··s.files_with_inc | ||
| 0003ba60:· | 0003ba60:·6f72·7265·6374·5f68·6173·683d·2224·2872··orrect_hash="$(r | ||
| 0003ba70:· | 0003ba70:·706d·202d·5661·202d·2d6e·6f63·6f6e·6669··pm·-Va·--noconfi | ||
| 0003ba80:· | 0003ba80:·6720·7c20·6772·6570·202d·4520·275e·2e2e··g·|·grep·-E·'^.. | ||
| 0003ba90:· | 0003ba90:·3527·207c·2061·776b·2027·7b70·7269·6e74··5'·|·awk·'{print | ||
| 0003baa0:· | 0003baa0:·2024·4e46·7d27·2029·220a·0a69·6620·5b20···$NF}'·)"..if·[· | ||
| 0003bab0:· | 0003bab0:·2d6e·2022·2466·696c·6573·5f77·6974·685f··-n·"$files_with_ | ||
| 0003bac0:· | 0003bac0:·696e·636f·7272·6563·745f·6861·7368·2220··incorrect_hash"· | ||
| 0003bad0:· | 0003bad0:·5d3b·2074·6865·6e0a·2020·2020·2320·4672··];·then.····#·Fr | ||
| 0003bae0:· | 0003bae0:·6f6d·2066·696c·6573·206e·616d·6573·2067··om·files·names·g | ||
| 0003baf0:· | 0003baf0:·6574·2070·6163·6b61·6765·206e·616d·6573··et·package·names | ||
| 0003bb00:·2 | 0003bb00:·2061·6e64·2063·6861·6e67·6520·6e65·776c···and·change·newl | ||
| 0003bb10:· | 0003bb10:·696e·6520·746f·2073·7061·6365·2c20·6265··ine·to·space,·be | ||
| 0003bb20:· | 0003bb20:·6361·7573·6520·7270·6d20·7772·6974·6573··cause·rpm·writes | ||
| 0003bb30:·2 | 0003bb30:·2065·6163·6820·7061·636b·6167·6520·746f···each·package·to | ||
| 0003bb40:· | 0003bb40:·206e·6577·206c·696e·650a·2020·2020·7061···new·line.····pa | ||
| 0003bb50:·6 | 0003bb50:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | ||
| 0003bb60:·6 | 0003bb60:·616c·6c3d·2224·2872·706d·202d·7166·2024··all="$(rpm·-qf·$ | ||
| 0003bb70:· | 0003bb70:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | ||
| 0003bb80:· | 0003bb80:·7265·6374·5f68·6173·6820·7c20·7472·2027··rect_hash·|·tr·' | ||
| 0003bb90:· | 0003bb90:·5c6e·2720·2720·2729·220a·0a20·2020·200a··\n'·'·')"..····. | ||
| 0003bba0:· | 0003bba0:·2020·2020·646e·6620·7265·696e·7374·616c······dnf·reinstal | ||
| 0003bbb0:·6 | 0003bbb0:·6c20·2d79·2024·7061·636b·6167·6573·5f74··l·-y·$packages_t | ||
| 0003bbc0:·6 | 0003bbc0:·6f5f·7265·696e·7374·616c·6c0a·2020·2020··o_reinstall.···· | ||
| 0003bbd0:· | 0003bbd0:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | ||
| 0003bbe0:· | 0003bbe0:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | ||
| 0003bbf0:· | 0003bbf0:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | ||
| 0003bc00:·7 | 0003bc00:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | ||
| 0003bc10:· | 0003bc10:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | ||
| 0003bc20:· | 0003bc20:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | ||
| 0003bc30:· | 0003bc30:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003bc40:·6 | 0003bc40:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003bc50:· | 0003bc50:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003bc60:·6 | 0003bc60:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003bc70:·6 | 0003bc70:·6765·743d·2223·6964·6d31·3838·3722·2074··get="#idm1887"·t | ||
| 0003bc80:· | 0003bc80:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003bc90:· | 0003bc90:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003bca0:·7 | 0003bca0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003bcb0:· | 0003bcb0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003bcc0:·7 | 0003bcc0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003bcd0:· | 0003bcd0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003bce0:· | 0003bce0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003bcf0:· | 0003bcf0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003bd00:·206 | 0003bd00:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003bd10:· | 0003bd10:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003bd20:· | 0003bd20:·2069·643d·2269·646d·3138·3837·223e·3c74···id="idm1887"><t | ||
| 0003bd30:· | 0003bd30:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003bd40:· | 0003bd40:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003bd50:· | 0003bd50:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003bd60:· | 0003bd60:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003bd70:·3 | 0003bd70:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003bd80:· | 0003bd80:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | ||
| 0003bd90:· | 0003bd90:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bda0:· | 0003bda0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003bdb0:· | 0003bdb0:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 0003bdc0:· | 0003bdc0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003bdd0:· | 0003bdd0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003bde0:· | 0003bde0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003bdf0:· | 0003bdf0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003be00:· | 0003be00:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003be10:·2 | 0003be10:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003be20:· | 0003be20:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003be30:· | 0003be30:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | ||
| 0003be40:·6 | 0003be40:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | ||
| 0003be50:· | 0003be50:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | ||
| 0003be60:· | 0003be60:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | ||
| 0003be70:·202 | 0003be70:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 0003be80:· | 0003be80:·2d35·2e31·302e·342e·310a·2020·2d20·4e49··-5.10.4.1.··-·NI | ||
| 0003be90:·5 | 0003be90:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | ||
| 0003bea0:· | 0003bea0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003beb0:· | 0003beb0:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | ||
| 0003bec0:· | 0003bec0:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | ||
| 0003bed0:· | 0003bed0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003bee0:· | 0003bee0:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | ||
| 0003bef0:·2 | 0003bef0:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | ||
| 0003bf00:· | 0003bf00:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003bf10:· | 0003bf10:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | ||
| 0003bf20:· | 0003bf20:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | ||
| 0003bf30:·20 | 0003bf30:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003bf40:· | 0003bf40:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | ||
| 0003bf50:· | 0003bf50:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | ||
| 0003bf60:· | 0003bf60:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | ||
| 0003bf70:· | 0003bf70:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | ||
| 0003bf80:· | 0003bf80:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | ||
| 0003bf90:· | 0003bf90:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | ||
| 0003bfa0:·6 | 0003bfa0:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | ||
| 0003bfb0:· | 0003bfb0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 0003bfc0:·202 | 0003bfc0:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 0003bfd0:·6 | 0003bfd0:·6174·6567·790a·2020·2d20·7270·6d5f·7665··ategy.··-·rpm_ve | ||
| 0003bfe0:· | 0003bfe0:·7269·6679·5f68·6173·6865·730a·0a2d·206e··rify_hashes..-·n | ||
| 0003bff0:· | 0003bff0:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003c000:·5 | 0003c000:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| Max diff block lines reached; 26869831/26924783 bytes (99.80%) of diff not shown. | |||
| Offset 15177, 408 lines modified | Offset 15177, 408 lines modified | ||
| 0003b480:·6574·3d22·2369·646d·3138·3836·2220·7461··et="#idm1886"·ta | 0003b480:·6574·3d22·2369·646d·3138·3836·2220·7461··et="#idm1886"·ta | ||
| 0003b490:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b490:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b4a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b4a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b4b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b4b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b4c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b4c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b4d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b4d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b4e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b4e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b4f0:· | 0003b4f0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 0003b500:· | 0003b500:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b510:· | 0003b510:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b520:· | 0003b520:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b530:· | 0003b530:·2269·646d·3138·3836·223e·3c70·7265·3e3c··"idm1886"><pre>< | ||
| 0003b540:·6 | 0003b540:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 0003b550:· | 0003b550:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | ||
| 0003b560:· | 0003b560:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | ||
| 0003b570:· | 0003b570:·2070·6c61·7466·6f72·6d73·0a69·6620·2120···platforms.if·!· | ||
| 0003b580:· | 0003b580:·2820·7b20·7270·6d20·2d2d·7175·6965·7420··(·{·rpm·--quiet· | ||
| 0003b590:· | 0003b590:·2d71·206b·6572·6e65·6c20·3b7d·2026·616d··-q·kernel·;}·&am | ||
| 0003b5a0:· | 0003b5a0:·703b·2661·6d70·3b20·7b20·7270·6d20·2d2d··p;&·{·rpm·-- | ||
| 0003b5b0:· | 0003b5b0:·7175·6965·7420·2d71·2072·706d·2d6f·7374··quiet·-q·rpm-ost | ||
| 0003b5c0:· | 0003b5c0:·7265·6520·3b7d·2026·616d·703b·2661·6d70··ree·;}·&& | ||
| 0003b5d0:·3 | 0003b5d0:·3b20·7b20·7270·6d20·2d2d·7175·6965·7420··;·{·rpm·--quiet· | ||
| 0003b5e0:· | 0003b5e0:·2d71·2062·6f6f·7463·203b·7d20·2661·6d70··-q·bootc·;}·& | ||
| 0003b5f0:· | 0003b5f0:·3b26·616d·703b·207b·2021·2072·706d·202d··;&·{·!·rpm·- | ||
| 0003b600:· | 0003b600:·2d71·7569·6574·202d·7120·6f70·656e·7368··-quiet·-q·opensh | ||
| 0003b610:·6 | 0003b610:·6966·742d·6b75·6265·6c65·7420·3b7d·2029··ift-kubelet·;}·) | ||
| 0003b620:· | 0003b620:·3b20·7468·656e·0a0a·2320·4669·6e64·2077··;·then..#·Find·w | ||
| 0003b630:· | 0003b630:·6869·6368·2066·696c·6573·2068·6176·6520··hich·files·have· | ||
| 0003b640:·6 | 0003b640:·696e·636f·7272·6563·7420·6861·7368·2028··incorrect·hash·( | ||
| 0003b650:·6 | 0003b650:·6e6f·7420·696e·202f·6574·632c·2062·6563··not·in·/etc,·bec | ||
| 0003b660:·6 | 0003b660:·6175·7365·206f·6620·7468·6520·7379·7374··ause·of·the·syst | ||
| 0003b670:· | 0003b670:·656d·2072·656c·6174·6564·2063·6f6e·6669··em·related·confi | ||
| 0003b680:· | 0003b680:·6720·6669·6c65·7329·2061·6e64·2074·6865··g·files)·and·the | ||
| 0003b690:· | 0003b690:·6e20·6765·7420·6669·6c65·7320·6e61·6d65··n·get·files·name | ||
| 0003b6a0:· | 0003b6a0:·730a·6669·6c65·735f·7769·7468·5f69·6e63··s.files_with_inc | ||
| 0003b6b0:· | 0003b6b0:·6f72·7265·6374·5f68·6173·683d·2224·2872··orrect_hash="$(r | ||
| 0003b6c0:· | 0003b6c0:·706d·202d·5661·202d·2d6e·6f63·6f6e·6669··pm·-Va·--noconfi | ||
| 0003b6d0:· | 0003b6d0:·6720·7c20·6772·6570·202d·4520·275e·2e2e··g·|·grep·-E·'^.. | ||
| 0003b6e0:· | 0003b6e0:·3527·207c·2061·776b·2027·7b70·7269·6e74··5'·|·awk·'{print | ||
| 0003b6f0:· | 0003b6f0:·2024·4e46·7d27·2029·220a·0a69·6620·5b20···$NF}'·)"..if·[· | ||
| 0003b700:· | 0003b700:·2d6e·2022·2466·696c·6573·5f77·6974·685f··-n·"$files_with_ | ||
| 0003b710:· | 0003b710:·696e·636f·7272·6563·745f·6861·7368·2220··incorrect_hash"· | ||
| 0003b720:· | 0003b720:·5d3b·2074·6865·6e0a·2020·2020·2320·4672··];·then.····#·Fr | ||
| 0003b730:· | 0003b730:·6f6d·2066·696c·6573·206e·616d·6573·2067··om·files·names·g | ||
| 0003b740:· | 0003b740:·6574·2070·6163·6b61·6765·206e·616d·6573··et·package·names | ||
| 0003b750:·2 | 0003b750:·2061·6e64·2063·6861·6e67·6520·6e65·776c···and·change·newl | ||
| 0003b760:· | 0003b760:·696e·6520·746f·2073·7061·6365·2c20·6265··ine·to·space,·be | ||
| 0003b770:· | 0003b770:·6361·7573·6520·7270·6d20·7772·6974·6573··cause·rpm·writes | ||
| 0003b780:·2 | 0003b780:·2065·6163·6820·7061·636b·6167·6520·746f···each·package·to | ||
| 0003b790:· | 0003b790:·206e·6577·206c·696e·650a·2020·2020·7061···new·line.····pa | ||
| 0003b7a0:·6 | 0003b7a0:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | ||
| 0003b7b0:·6 | 0003b7b0:·616c·6c3d·2224·2872·706d·202d·7166·2024··all="$(rpm·-qf·$ | ||
| 0003b7c0:· | 0003b7c0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | ||
| 0003b7d0:· | 0003b7d0:·7265·6374·5f68·6173·6820·7c20·7472·2027··rect_hash·|·tr·' | ||
| 0003b7e0:· | 0003b7e0:·5c6e·2720·2720·2729·220a·0a20·2020·200a··\n'·'·')"..····. | ||
| 0003b7f0:· | 0003b7f0:·2020·2020·646e·6620·7265·696e·7374·616c······dnf·reinstal | ||
| 0003b800:·6 | 0003b800:·6c20·2d79·2024·7061·636b·6167·6573·5f74··l·-y·$packages_t | ||
| 0003b810:·6 | 0003b810:·6f5f·7265·696e·7374·616c·6c0a·2020·2020··o_reinstall.···· | ||
| 0003b820:· | 0003b820:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | ||
| 0003b830:· | 0003b830:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | ||
| 0003b840:· | 0003b840:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | ||
| 0003b850:·7 | 0003b850:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | ||
| 0003b860:· | 0003b860:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | ||
| 0003b870:· | 0003b870:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | ||
| 0003b880:· | 0003b880:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003b890:·6 | 0003b890:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003b8a0:· | 0003b8a0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003b8b0:·6 | 0003b8b0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003b8c0:·6 | 0003b8c0:·6765·743d·2223·6964·6d31·3838·3722·2074··get="#idm1887"·t | ||
| 0003b8d0:· | 0003b8d0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b8e0:· | 0003b8e0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b8f0:·7 | 0003b8f0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b900:· | 0003b900:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b910:·7 | 0003b910:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b920:· | 0003b920:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b930:· | 0003b930:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003b940:· | 0003b940:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b950:·206 | 0003b950:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b960:· | 0003b960:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b970:· | 0003b970:·2069·643d·2269·646d·3138·3837·223e·3c74···id="idm1887"><t | ||
| 0003b980:· | 0003b980:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003b990:· | 0003b990:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003b9a0:· | 0003b9a0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b9b0:· | 0003b9b0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003b9c0:·3 | 0003b9c0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003b9d0:· | 0003b9d0:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | ||
| 0003b9e0:· | 0003b9e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b9f0:· | 0003b9f0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003ba00:· | 0003ba00:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 0003ba10:· | 0003ba10:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003ba20:· | 0003ba20:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003ba30:· | 0003ba30:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003ba40:· | 0003ba40:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003ba50:· | 0003ba50:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003ba60:·2 | 0003ba60:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003ba70:· | 0003ba70:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003ba80:· | 0003ba80:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | ||
| 0003ba90:·6 | 0003ba90:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | ||
| 0003baa0:· | 0003baa0:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | ||
| 0003bab0:· | 0003bab0:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | ||
| 0003bac0:·202 | 0003bac0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 0003bad0:· | 0003bad0:·2d35·2e31·302e·342e·310a·2020·2d20·4e49··-5.10.4.1.··-·NI | ||
| 0003bae0:·5 | 0003bae0:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | ||
| 0003baf0:· | 0003baf0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003bb00:· | 0003bb00:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | ||
| 0003bb10:· | 0003bb10:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | ||
| 0003bb20:· | 0003bb20:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003bb30:· | 0003bb30:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | ||
| 0003bb40:·2 | 0003bb40:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | ||
| 0003bb50:· | 0003bb50:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003bb60:· | 0003bb60:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | ||
| 0003bb70:· | 0003bb70:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | ||
| 0003bb80:·20 | 0003bb80:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003bb90:· | 0003bb90:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | ||
| 0003bba0:· | 0003bba0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | ||
| 0003bbb0:· | 0003bbb0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | ||
| 0003bbc0:· | 0003bbc0:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | ||
| 0003bbd0:· | 0003bbd0:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | ||
| 0003bbe0:· | 0003bbe0:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | ||
| 0003bbf0:·6 | 0003bbf0:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | ||
| 0003bc00:· | 0003bc00:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 0003bc10:·202 | 0003bc10:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 0003bc20:·6 | 0003bc20:·6174·6567·790a·2020·2d20·7270·6d5f·7665··ategy.··-·rpm_ve | ||
| 0003bc30:· | 0003bc30:·7269·6679·5f68·6173·6865·730a·0a2d·206e··rify_hashes..-·n | ||
| 0003bc40:· | 0003bc40:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003bc50:·5 | 0003bc50:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| Max diff block lines reached; 14186096/14241048 bytes (99.61%) of diff not shown. | |||
| Offset 100, 14 lines modified | Offset 100, 33 lines modified | ||
| 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 102 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 102 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 103 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 103 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 104 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 104 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 108 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 109 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 110 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 111 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 112 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 113 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 114 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 115 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 116 | fi | ||
| 117 | else | ||
| 118 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 119 | fi | ||
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 112 | -·name:·Gather·the·package·facts | 125 | -·name:·Gather·the·package·facts |
| 113 | ··package_facts: | 126 | ··package_facts: |
| Offset 274, 33 lines modified | Offset 293, 14 lines modified | ||
| 274 | ··-·PCI-DSSv4-11.5.2 | 293 | ··-·PCI-DSSv4-11.5.2 |
| 275 | ··-·high_complexity | 294 | ··-·high_complexity |
| 276 | ··-·high_severity | 295 | ··-·high_severity |
| 277 | ··-·medium_disruption | 296 | ··-·medium_disruption |
| 278 | ··-·no_reboot_needed | 297 | ··-·no_reboot_needed |
| 279 | ··-·restrict_strategy | 298 | ··-·restrict_strategy |
| 280 | ··-·rpm_verify_hashes | 299 | ··-·rpm_verify_hashes |
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 282 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 283 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 284 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 285 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 286 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 287 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 288 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 289 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 290 | fi | ||
| 291 | else | ||
| 292 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 293 | fi | ||
| 294 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 300 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 295 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 301 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 296 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 302 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 297 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 303 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 298 | $·rpm·-qf·FILENAME | 304 | $·rpm·-qf·FILENAME |
| 299 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 305 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 321, 14 lines modified | Offset 321, 50 lines modified | ||
| 321 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 321 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 322 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 322 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 323 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 323 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 325 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 325 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 327 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 327 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 333 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 334 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 335 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 336 | declare·-A·SETPERMS_RPM_DICT | ||
| 337 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 338 | #·is·expected·by·the·RPM·database | ||
| 339 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 340 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 341 | do | ||
| 342 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 343 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 344 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 345 | ········do | ||
| 346 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 347 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 348 | ········done | ||
| 349 | done | ||
| 350 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 351 | #·correct·values | ||
| 352 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 353 | do | ||
| 354 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 355 | done | ||
| 356 | else | ||
| 357 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 358 | fi | ||
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 360 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 361 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 362 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 363 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 333 | -·name:·Gather·the·package·facts | 364 | -·name:·Gather·the·package·facts |
| 334 | ··package_facts: | 365 | ··package_facts: |
| Offset 440, 50 lines modified | Offset 476, 14 lines modified | ||
| 440 | ··-·PCI-DSSv4-11.5.2 | 476 | ··-·PCI-DSSv4-11.5.2 |
| 441 | ··-·high_complexity | 477 | ··-·high_complexity |
| 442 | ··-·high_severity | 478 | ··-·high_severity |
| 443 | ··-·medium_disruption | 479 | ··-·medium_disruption |
| 444 | ··-·no_reboot_needed | 480 | ··-·no_reboot_needed |
| 445 | ··-·restrict_strategy | 481 | ··-·restrict_strategy |
| 446 | ··-·rpm_verify_permissions | 482 | ··-·rpm_verify_permissions |
| 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1104824/1112905 bytes (99.27%) of diff not shown. | |||
| Offset 15168, 408 lines modified | Offset 15168, 408 lines modified | ||
| 0003b3f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b3f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b400:·2223·6964·6d31·3838·3622·2074·6162·696e··"#idm1886"·tabin | 0003b400:·2223·6964·6d31·3838·3622·2074·6162·696e··"#idm1886"·tabin | ||
| 0003b410:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b410:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b420:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b420:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b430:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b430:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b440:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b440:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b450:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b450:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b460:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b460:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b470:·6 | 0003b470:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003b480:·3 | 0003b480:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b490:· | 0003b490:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b4a0:· | 0003b4a0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b4b0:· | 0003b4b0:·6d31·3838·3622·3e3c·7072·653e·3c63·6f64··m1886"><pre><cod | ||
| 0003b4c0:· | 0003b4c0:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003b4d0:·6 | 0003b4d0:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003b4e0:·6 | 0003b4e0:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003b4f0:· | 0003b4f0:·6174·666f·726d·730a·6966·2021·2028·207b··atforms.if·!·(·{ | ||
| 0003b500:· | 0003b500:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b510:· | 0003b510:·6b65·726e·656c·203b·7d20·2661·6d70·3b26··kernel·;}·&& | ||
| 0003b520:· | 0003b520:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003b530:·7 | 0003b530:·6574·202d·7120·7270·6d2d·6f73·7472·6565··et·-q·rpm-ostree | ||
| 0003b540:· | 0003b540:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b550:· | 0003b550:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b560:· | 0003b560:·626f·6f74·6320·3b7d·2026·616d·703b·2661··bootc·;}·&&a | ||
| 0003b570:· | 0003b570:·6d70·3b20·7b20·2120·7270·6d20·2d2d·7175··mp;·{·!·rpm·--qu | ||
| 0003b580:· | 0003b580:·6965·7420·2d71·206f·7065·6e73·6869·6674··iet·-q·openshift | ||
| 0003b590:· | 0003b590:·2d6b·7562·656c·6574·203b·7d20·293b·2074··-kubelet·;}·);·t | ||
| 0003b5a0:· | 0003b5a0:·6865·6e0a·0a23·2046·696e·6420·7768·6963··hen..#·Find·whic | ||
| 0003b5b0:·6 | 0003b5b0:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | ||
| 0003b5c0:· | 0003b5c0:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | ||
| 0003b5d0:· | 0003b5d0:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | ||
| 0003b5e0:·6 | 0003b5e0:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | ||
| 0003b5f0:· | 0003b5f0:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | ||
| 0003b600:·6 | 0003b600:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | ||
| 0003b610:· | 0003b610:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | ||
| 0003b620:· | 0003b620:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003b630:· | 0003b630:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | ||
| 0003b640:· | 0003b640:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | ||
| 0003b650:·2 | 0003b650:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | ||
| 0003b660:· | 0003b660:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | ||
| 0003b670:· | 0003b670:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | ||
| 0003b680:·2 | 0003b680:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | ||
| 0003b690:· | 0003b690:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | ||
| 0003b6a0:· | 0003b6a0:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | ||
| 0003b6b0:· | 0003b6b0:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | ||
| 0003b6c0:· | 0003b6c0:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | ||
| 0003b6d0:· | 0003b6d0:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | ||
| 0003b6e0:·2 | 0003b6e0:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | ||
| 0003b6f0:· | 0003b6f0:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | ||
| 0003b700:·6 | 0003b700:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | ||
| 0003b710:· | 0003b710:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | ||
| 0003b720:· | 0003b720:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003b730:· | 0003b730:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | ||
| 0003b740:·6 | 0003b740:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003b750:·7 | 0003b750:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | ||
| 0003b760:· | 0003b760:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | ||
| 0003b770:· | 0003b770:·2064·6e66·2072·6569·6e73·7461·6c6c·202d···dnf·reinstall·- | ||
| 0003b780:· | 0003b780:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | ||
| 0003b790:·6 | 0003b790:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | ||
| 0003b7a0:· | 0003b7a0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | ||
| 0003b7b0:· | 0003b7b0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | ||
| 0003b7c0:·6 | 0003b7c0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | ||
| 0003b7d0:· | 0003b7d0:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | ||
| 0003b7e0:·6 | 0003b7e0:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | ||
| 0003b7f0:· | 0003b7f0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003b800:· | 0003b800:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b810:· | 0003b810:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b820:· | 0003b820:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003b830:·7 | 0003b830:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b840:· | 0003b840:·3d22·2369·646d·3138·3837·2220·7461·6269··="#idm1887"·tabi | ||
| 0003b850:· | 0003b850:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b860:· | 0003b860:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b870:· | 0003b870:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b880:· | 0003b880:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b890:· | 0003b890:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b8a0:· | 0003b8a0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b8b0:· | 0003b8b0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003b8c0:· | 0003b8c0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003b8d0:· | 0003b8d0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003b8e0:· | 0003b8e0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b8f0:· | 0003b8f0:·3d22·6964·6d31·3838·3722·3e3c·7461·626c··="idm1887"><tabl | ||
| 0003b900:· | 0003b900:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003b910:· | 0003b910:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003b920:· | 0003b920:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003b930:· | 0003b930:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003b940:·3 | 0003b940:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003b950:· | 0003b950:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003b960:· | 0003b960:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b970:· | 0003b970:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b980:· | 0003b980:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003b990:· | 0003b990:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b9a0:· | 0003b9a0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b9b0:·3 | 0003b9b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b9c0:· | 0003b9c0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003b9d0:· | 0003b9d0:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003b9e0:· | 0003b9e0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b9f0:· | 0003b9f0:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003ba00:·20 | 0003ba00:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003ba10:·6 | 0003ba10:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003ba20:·65 | 0003ba20:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003ba30:· | 0003ba30:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003ba40:·6 | 0003ba40:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003ba50:· | 0003ba50:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003ba60:· | 0003ba60:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003ba70:· | 0003ba70:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003ba80:· | 0003ba80:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003ba90:· | 0003ba90:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003baa0:·20 | 0003baa0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003bab0:· | 0003bab0:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003bac0:· | 0003bac0:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003bad0:· | 0003bad0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003bae0:· | 0003bae0:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003baf0:· | 0003baf0:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003bb00:· | 0003bb00:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003bb10:· | 0003bb10:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003bb20:· | 0003bb20:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003bb30:· | 0003bb30:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003bb40:· | 0003bb40:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003bb50:· | 0003bb50:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003bb60:· | 0003bb60:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003bb70:· | 0003bb70:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003bb80:·6 | 0003bb80:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003bb90:· | 0003bb90:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003bba0:· | 0003bba0:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003bbb0:·7 | 0003bbb0:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| 0003bbc0:· | 0003bbc0:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| Max diff block lines reached; 7315610/7370562 bytes (99.25%) of diff not shown. | |||
| Offset 99, 14 lines modified | Offset 99, 33 lines modified | ||
| 99 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 99 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 100 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 100 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 101 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 101 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 102 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 102 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 104 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 104 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 107 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 108 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 109 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 110 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 111 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 112 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 113 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 114 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 115 | fi | ||
| 116 | else | ||
| 117 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 118 | fi | ||
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 111 | -·name:·Gather·the·package·facts | 124 | -·name:·Gather·the·package·facts |
| 112 | ··package_facts: | 125 | ··package_facts: |
| Offset 273, 33 lines modified | Offset 292, 14 lines modified | ||
| 273 | ··-·PCI-DSSv4-11.5.2 | 292 | ··-·PCI-DSSv4-11.5.2 |
| 274 | ··-·high_complexity | 293 | ··-·high_complexity |
| 275 | ··-·high_severity | 294 | ··-·high_severity |
| 276 | ··-·medium_disruption | 295 | ··-·medium_disruption |
| 277 | ··-·no_reboot_needed | 296 | ··-·no_reboot_needed |
| 278 | ··-·restrict_strategy | 297 | ··-·restrict_strategy |
| 279 | ··-·rpm_verify_hashes | 298 | ··-·rpm_verify_hashes |
| 280 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 281 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 282 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 283 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 284 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 285 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 286 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 287 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 288 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 289 | fi | ||
| 290 | else | ||
| 291 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 292 | fi | ||
| 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 299 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 294 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 300 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 295 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 301 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 296 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 302 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 297 | $·rpm·-qf·FILENAME | 303 | $·rpm·-qf·FILENAME |
| 298 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 304 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 320, 14 lines modified | Offset 320, 50 lines modified | ||
| 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 321 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 321 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 322 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 322 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 328 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 329 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 330 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 331 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 332 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 333 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 334 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 335 | declare·-A·SETPERMS_RPM_DICT | ||
| 336 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 337 | #·is·expected·by·the·RPM·database | ||
| 338 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 339 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 340 | do | ||
| 341 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 342 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 343 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 344 | ········do | ||
| 345 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 346 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 347 | ········done | ||
| 348 | done | ||
| 349 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 350 | #·correct·values | ||
| 351 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 352 | do | ||
| 353 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 354 | done | ||
| 355 | else | ||
| 356 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 357 | fi | ||
| 327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 328 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 329 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 330 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 331 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 332 | -·name:·Gather·the·package·facts | 363 | -·name:·Gather·the·package·facts |
| 333 | ··package_facts: | 364 | ··package_facts: |
| Offset 439, 50 lines modified | Offset 475, 14 lines modified | ||
| 439 | ··-·PCI-DSSv4-11.5.2 | 475 | ··-·PCI-DSSv4-11.5.2 |
| 440 | ··-·high_complexity | 476 | ··-·high_complexity |
| 441 | ··-·high_severity | 477 | ··-·high_severity |
| 442 | ··-·medium_disruption | 478 | ··-·medium_disruption |
| 443 | ··-·no_reboot_needed | 479 | ··-·no_reboot_needed |
| 444 | ··-·restrict_strategy | 480 | ··-·restrict_strategy |
| 445 | ··-·rpm_verify_permissions | 481 | ··-·rpm_verify_permissions |
| 446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 695709/703787 bytes (98.85%) of diff not shown. | |||
| Offset 15063, 133 lines modified | Offset 15063, 133 lines modified | ||
| 0003ad60:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ad60:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ad70:·743d·2223·6964·6d37·3330·2220·7461·6269··t="#idm730"·tabi | 0003ad70:·743d·2223·6964·6d37·3330·2220·7461·6269··t="#idm730"·tabi | ||
| 0003ad80:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ad80:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003ad90:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003ad90:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ada0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ada0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003adb0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003adb0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003adc0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003adc0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003add0:·223e·5265·6d65·6469·6174·696f·6e20· | 0003add0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003ade0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003adf0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003a | 0003ade0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003adf0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ae00:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ae10:· | 0003ae10:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003ae20:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003ae30:·3330·223e·3c70·7265·3e3c·636f·6465·3e0a··30"><pre><code>. | |||
| 0003ae40:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003ae50:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003ae60:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003ae20:·2269·646d·3733·3022·3e3c·7461·626c·6520··"idm730"><table· | |||
| 0003ae30:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003ae40:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003ae50:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003ae60:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003ae70:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003ae80:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ae90:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003aea0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003aeb0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003aec0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003aed0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003aee0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003aef0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003af00:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003af10:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003af20:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003af30:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003af40:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003af50:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003af60:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003af70:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003af80:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003af90:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003afa0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003afb0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003afc0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003afd0:·7267·6574·3d22·2369·646d·3733·3122·2074··rget="#idm731"·t | |||
| 0003afe0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003aff0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b000:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b010:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b020:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b030:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b040:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b050:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b060:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b070:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b080:·2069·643d·2269·646d·3733·3122·3e3c·7461···id="idm731"><ta | |||
| 0003b090:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b0a0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b0b0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b0c0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b0d0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b0e0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b0f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b100:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b110:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b120:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b130:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b140:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b150:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b160:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b170:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b180:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b190:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b1a0:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b1b0:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b1c0:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b1d0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b1e0:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b1f0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b200:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b210:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b220:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b230:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b240:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b250:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b260:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b270:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b280:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b290:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b2a0:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b2b0:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b2c0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b2d0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b2e0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b2f0:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003b300:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003b310:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003b320:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b330:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003b340:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b350:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b360:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b370:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b380:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b390:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b3a0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b3b0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b3c0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b3d0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b3e0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b3f0:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003 | 0003ae70:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | ||
| 0003 | 0003ae80:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | ||
| 0003 | 0003ae90:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | ||
| 0003 | 0003aea0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003 | 0003aeb0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003 | 0003aec0:·3331·2220·7461·6269·6e64·6578·3d22·3022··31"·tabindex="0" | ||
| 0003 | 0003aed0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003 | 0003aee0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003 | 0003aef0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003 | 0003af00:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003 | 0003af10:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b4b0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b4c0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b4d0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| Max diff block lines reached; 2163234/2180236 bytes (99.22%) of diff not shown. | |||
| Offset 116, 26 lines modified | Offset 116, 19 lines modified | ||
| 116 | ···························A.15.2.1,·A.8.2.3 | 116 | ···························A.15.2.1,·A.8.2.3 |
| 117 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 117 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 118 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 118 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 120 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 121 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 121 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | include·install_aide | ||
| 124 | [[packages]] | ||
| 125 | name·=·"aide" | ||
| 126 | version·=·"*" | ||
| 129 | class·install_aide·{ | ||
| 130 | ··package·{·'aide': | ||
| 131 | ····ensure·=>·'installed', | ||
| 132 | ··} | ||
| 133 | } | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 139 | -·name:·Gather·the·package·facts | 132 | -·name:·Gather·the·package·facts |
| 140 | ··package_facts: | 133 | ··package_facts: |
| Offset 164, 19 lines modified | Offset 157, 26 lines modified | ||
| 164 | ··-·PCI-DSSv4-11.5.2 | 157 | ··-·PCI-DSSv4-11.5.2 |
| 165 | ··-·enable_strategy | 158 | ··-·enable_strategy |
| 166 | ··-·low_complexity | 159 | ··-·low_complexity |
| 167 | ··-·low_disruption | 160 | ··-·low_disruption |
| 168 | ··-·medium_severity | 161 | ··-·medium_severity |
| 169 | ··-·no_reboot_needed | 162 | ··-·no_reboot_needed |
| 170 | ··-·package_aide_installed | 163 | ··-·package_aide_installed |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | include·install_aide | ||
| 172 | [[packages]] | ||
| 173 | name·=·"aide" | ||
| 174 | 170 | class·install_aide·{ | |
| 171 | ··package·{·'aide': | ||
| 172 | ····ensure·=>·'installed', | ||
| 173 | ··} | ||
| 174 | } | ||
| 175 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 175 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 176 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution | 176 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution |
| 177 | of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 177 | of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 178 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 178 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 179 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 179 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 180 | crontab: | 180 | crontab: |
| 181 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 181 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 650, 14 lines modified | Offset 650, 45 lines modified | ||
| 650 | Rationale:··from·retaining·access·to·the·user's·terminal·after·the·main·program·has·finished | 650 | Rationale:··from·retaining·access·to·the·user's·terminal·after·the·main·program·has·finished |
| 651 | ············executing. | 651 | ············executing. |
| 652 | Severity: ··medium | 652 | Severity: ··medium |
| 653 | Rule·ID:····xccdf_org.ssgproject.content_rule_sudo_add_use_pty | 653 | Rule·ID:····xccdf_org.ssgproject.content_rule_sudo_add_use_pty |
| 654 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-10.2.5 | 654 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-10.2.5 |
| 655 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i···R39 | 655 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i···R39 |
| 656 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6,·2.2 | 656 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6,·2.2 |
| 657 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 658 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 659 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 660 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 661 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 662 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 663 | if·rpm·--quiet·-q·sudo;·then | ||
| 664 | if·/usr/sbin/visudo·-qcf·/etc/sudoers;·then | ||
| 665 | ····cp·/etc/sudoers·/etc/sudoers.bak | ||
| 666 | ····if·!·grep·-P·'^[\s]*Defaults[\s]*\buse_pty\b.*$'·/etc/sudoers;·then | ||
| 667 | ········#·sudoers·file·doesn't·define·Option·use_pty | ||
| 668 | ········echo·"Defaults·use_pty"·>>·/etc/sudoers | ||
| 669 | ····fi | ||
| 670 | ····#·Check·validity·of·sudoers·and·cleanup·bak | ||
| 671 | ····if·/usr/sbin/visudo·-qcf·/etc/sudoers;·then | ||
| 672 | ········rm·-f·/etc/sudoers.bak | ||
| 673 | ····else | ||
| 674 | ········echo·"Fail·to·validate·remediated·/etc/sudoers,·reverting·to·original·file." | ||
| 675 | ········mv·/etc/sudoers.bak·/etc/sudoers | ||
| 676 | ········false | ||
| 677 | ····fi | ||
| 678 | else | ||
| 679 | ····echo·"Skipping·remediation,·/etc/sudoers·failed·to·validate" | ||
| 680 | ····false | ||
| 681 | fi | ||
| 682 | else | ||
| 683 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 684 | fi | ||
| 657 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 685 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 658 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 686 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 659 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 687 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 660 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 688 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 661 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 689 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 662 | -·name:·Gather·the·package·facts | 690 | -·name:·Gather·the·package·facts |
| 663 | ··package_facts: | 691 | ··package_facts: |
| Offset 686, 27 lines modified | Offset 717, 47 lines modified | ||
| 686 | ··-·PCI-DSSv4-2.2.6 | 717 | ··-·PCI-DSSv4-2.2.6 |
| 687 | ··-·low_complexity | 718 | ··-·low_complexity |
| 688 | ··-·low_disruption | 719 | ··-·low_disruption |
| 689 | ··-·medium_severity | 720 | ··-·medium_severity |
| 690 | ··-·no_reboot_needed | 721 | ··-·no_reboot_needed |
| 691 | ··-·restrict_strategy | 722 | ··-·restrict_strategy |
| 692 | ··-·sudo_add_use_pty | 723 | ··-·sudo_add_use_pty |
| 724 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·S\x8Su\x8ud\x8do\x8o·L\x8Lo\x8og\x8gf\x8fi\x8il\x8le\x8e·E\x8Ex\x8xi\x8is\x8st\x8ts\x8s·-\x8-·s\x8su\x8ud\x8do\x8o·l\x8lo\x8og\x8gf\x8fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | ||
| 725 | A·custom·log·sudo·file·can·be·configured·with·the·'logfile'·tag.·This·rule·configures·a·sudo | ||
| 726 | custom·logfile·at·the·default·location·suggested·by·CIS,·which·uses·/var/log/sudo.log. | ||
| 727 | Rationale:··A·sudo·log·file·simplifies·auditing·of·sudo·commands. | ||
| 728 | Severity: ··low | ||
| 729 | Rule·ID:····xccdf_org.ssgproject.content_rule_sudo_custom_logfile | ||
| 730 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-10.2.5 | ||
| 731 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6,·2.2 | ||
| 693 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 732 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 694 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 733 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 695 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 734 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 696 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 735 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 697 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 736 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 698 | #·Remediation·is·applicable·only·in·certain·platforms | 737 | #·Remediation·is·applicable·only·in·certain·platforms |
| 699 | if·rpm·--quiet·-q·sudo;·then | 738 | if·rpm·--quiet·-q·sudo;·then |
| Max diff block lines reached; 233049/238246 bytes (97.82%) of diff not shown. | |||
| Offset 15053, 217 lines modified | Offset 15053, 217 lines modified | ||
| 0003acc0:·7461·7267·6574·3d22·2369·646d·3530·3937··target="#idm5097 | 0003acc0:·7461·7267·6574·3d22·2369·646d·3530·3937··target="#idm5097 | ||
| 0003acd0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003acd0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ace0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ace0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003acf0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003acf0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ad00:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ad00:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ad10:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ad10:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ad20:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ad20:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003ad30:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003ad40:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003ad50:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ad60:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ad30:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003ad40:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ad50:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ad60:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ad70:·6522·2069·643d·2269·646d·3530·3937·223e··e"·id="idm5097"> | |||
| 0003ad80:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ad90:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003ada0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003adb0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003adc0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003add0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003ade0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003adf0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003ae00:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ae10:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003ae20:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003ae30:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003ae40:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003ae50:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003ae60:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003ae70:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003ae80:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003ae90:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003aea0:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003aeb0:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003aec0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003aed0:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003aee0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003aef0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003af00:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003a | 0003ad70:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003af20:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003af30:·6d35·3039·3822·2074·6162·696e·6465·783d··m5098"·tabindex= | |||
| 0003af40:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003af50:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003af60:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003af70:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003af80:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003af90:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003a | 0003ad80:·3d22·6964·6d35·3039·3722·3e3c·7072·653e··="idm5097"><pre> | ||
| 0003ad90:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003ada0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003adb0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003adc0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003add0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003ade0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003adf0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003ae00:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003ae10:·3d22·2369·646d·3530·3938·2220·7461·6269··="#idm5098"·tabi | |||
| 0003ae20:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003ae30:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003ae40:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003ae50:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003ae60:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003ae70:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | |||
| 0003ae80:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003a | 0003ae90:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003a | 0003aea0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003a | 0003aeb0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003a | 0003aec0:·646d·3530·3938·223e·3c74·6162·6c65·2063··dm5098"><table·c | ||
| 0003a | 0003aed0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003 | 0003aee0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003 | 0003aef0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003 | 0003af00:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003 | 0003af10:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003 | 0003af20:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003 | 0003af30:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003 | 0003af40:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003 | 0003af50:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003 | 0003af60:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003 | 0003af70:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003 | 0003af80:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003 | 0003af90:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003 | 0003afa0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003b0 | 0003afb0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b0e0:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003b0f0:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003b100:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003b110:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003b120:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | |||
| 0003b130:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b140:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b150:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b160:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b170:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b180:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b190:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b1a0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b1b0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b1c0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003 | 0003afc0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | ||
| 0003afd0:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 0003afe0:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 0003aff0:·666f·726d·730a·6966·2072·706d·202d·2d71··forms.if·rpm·--q | |||
| 0003b000:·7569·6574·202d·7120·6b65·726e·656c·207c··uiet·-q·kernel·| | |||
| 0003b010:·7c20·7270·6d20·2d2d·7175·6965·7420·2d71··|·rpm·--quiet·-q | |||
| 0003b020:·206b·6572·6e65·6c2d·7565·6b3b·2074·6865···kernel-uek;·the | |||
| 0003b030:·6e0a·0a69·6620·2120·7270·6d20·2d71·202d··n..if·!·rpm·-q·- | |||
| 0003b040:·2d71·7569·6574·2022·6169·6465·2220·3b20··-quiet·"aide"·;· | |||
| 0003b050:·7468·656e·0a20·2020·2064·6e66·2069·6e73··then.····dnf·ins | |||
| 0003b060:·7461·6c6c·202d·7920·2261·6964·6522·0a66··tall·-y·"aide".f | |||
| 0003b070:·690a·0a65·6c73·650a·2020·2020·2667·743b··i..else.····> | |||
| 0003b080:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003b090:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003b0a0:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003b0b0:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003b0c0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b0d0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b0e0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b0f0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b100:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b110:·743d·2223·6964·6d35·3039·3922·2074·6162··t="#idm5099"·tab | |||
| 0003b120:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b130:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b140:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b150:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| Max diff block lines reached; 21434847/21463441 bytes (99.87%) of diff not shown. | |||
| Offset 15058, 218 lines modified | Offset 15058, 218 lines modified | ||
| 0003ad10:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | 0003ad10:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | ||
| 0003ad20:·3039·3722·2074·6162·696e·6465·783d·2230··097"·tabindex="0 | 0003ad20:·3039·3722·2074·6162·696e·6465·783d·2230··097"·tabindex="0 | ||
| 0003ad30:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003ad30:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003ad40:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003ad40:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003ad50:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003ad50:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003ad60:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003ad60:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003ad70:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003ad70:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003ad80:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003ad90:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003ada0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003adb0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003adc0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003add0:·2069·643d·2269·646d·3530·3937·223e·3c70···id="idm5097"><p | |||
| 0003ade0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003adf0:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003ae00:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003ae10:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003ae20:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003ae30:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003ad80:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003ad90:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003ada0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003adb0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003adc0:·6170·7365·2220·6964·3d22·6964·6d35·3039··apse"·id="idm509 | |||
| 0003add0:·3722·3e3c·7461·626c·6520·636c·6173·733d··7"><table·class= | |||
| 0003ade0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003adf0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003ae00:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003ae10:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003ae20:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003ae30:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003ae40:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003ae50:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ae60:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003ae70:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003ae80:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003ae90:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003aea0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003aeb0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003aec0:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003aed0:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003aee0:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003aef0:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003af00:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003af10:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003af20:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003af30:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003af40:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003af50:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003af60:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003a | 0003ae40:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003af80:·2369·646d·3530·3938·2220·7461·6269·6e64··#idm5098"·tabind | |||
| 0003af90:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003afa0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003afb0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003afc0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003afd0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003afe0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003a | 0003ae50:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003ae60:·6765·743d·2223·6964·6d35·3039·3822·2074··get="#idm5098"·t | |||
| 0003ae70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ae80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ae90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003aea0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003aeb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003aec0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003aed0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003 | 0003aee0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003 | 0003aef0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003 | 0003af00:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003 | 0003af10:·3d22·6964·6d35·3039·3822·3e3c·7461·626c··="idm5098"><tabl | ||
| 0003 | 0003af20:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003 | 0003af30:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003 | 0003af40:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003 | 0003af50:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003 | 0003af60:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003 | 0003af70:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003 | 0003af80:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003 | 0003af90:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003 | 0003afa0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b0 | 0003afb0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003 | 0003afc0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003 | 0003afd0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003 | 0003afe0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003 | 0003aff0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003b | 0003b000:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003b130:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 0003b140:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 0003b150:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 0003b160:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 0003b170:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 0003b180:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b190:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b1a0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b1b0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b1c0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b1d0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b1e0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b1f0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b200:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b210:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b220:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b230:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b240:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003b250:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b260:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b270:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b280:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b290:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b | 0003b010:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | ||
| 0003b020:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 0003b030:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003b040:·6c61·7466·6f72·6d73·0a69·6620·7270·6d20··latforms.if·rpm· | |||
| 0003b050:·2d2d·7175·6965·7420·2d71·206b·6572·6e65··--quiet·-q·kerne | |||
| 0003b060:·6c20·7c7c·2072·706d·202d·2d71·7569·6574··l·||·rpm·--quiet | |||
| 0003b070:·202d·7120·6b65·726e·656c·2d75·656b·3b20···-q·kernel-uek;· | |||
| 0003b080:·7468·656e·0a0a·6966·2021·2072·706d·202d··then..if·!·rpm·- | |||
| 0003b090:·7120·2d2d·7175·6965·7420·2261·6964·6522··q·--quiet·"aide" | |||
| 0003b0a0:·203b·2074·6865·6e0a·2020·2020·646e·6620···;·then.····dnf· | |||
| 0003b0b0:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003b0c0:·220a·6669·0a0a·656c·7365·0a20·2020·2026··".fi..else.····& | |||
| 0003b0d0:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | |||
| 0003b0e0:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | |||
| 0003b0f0:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | |||
| 0003b100:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | |||
| 0003b110:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0003b120:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| Max diff block lines reached; 21710972/21739704 bytes (99.87%) of diff not shown. | |||
| Offset 15049, 217 lines modified | Offset 15049, 217 lines modified | ||
| 0003ac80:·6765·743d·2223·6964·6d35·3039·3722·2074··get="#idm5097"·t | 0003ac80:·6765·743d·2223·6964·6d35·3039·3722·2074··get="#idm5097"·t | ||
| 0003ac90:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ac90:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003aca0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003aca0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003acb0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003acb0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003acc0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003acc0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003acd0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003acd0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003ace0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003ace0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003acf0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003ad00:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003ad10:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ad20:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003acf0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003ad00:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003ad10:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003ad20:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003ad30:·6964·3d22·6964·6d35·3039·3722·3e3c·7461··id="idm5097"><ta | |||
| 0003ad40:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003ad50:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003ad60:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003ad70:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003ad80:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003ad90:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003ada0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003adb0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003adc0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003add0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003ade0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003adf0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ae00:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003ae10:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003ae20:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003ae30:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003ae40:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003ae50:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003ae60:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003ae70:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003ae80:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003ae90:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003aea0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003aeb0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003aec0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003a | 0003ad30:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003aee0:·612d·7461·7267·6574·3d22·2369·646d·3530··a-target="#idm50 | |||
| 0003aef0:·3938·2220·7461·6269·6e64·6578·3d22·3022··98"·tabindex="0" | |||
| 0003af00:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003af10:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003af20:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003af30:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003af40:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003a | 0003ad40:·646d·3530·3937·223e·3c70·7265·3e3c·636f··dm5097"><pre><co | ||
| 0003ad50:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003ad60:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003ad70:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003ad80:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003ad90:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003ada0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003adb0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003adc0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003add0:·6964·6d35·3039·3822·2074·6162·696e·6465··idm5098"·tabinde | |||
| 0003ade0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003adf0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003ae00:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003ae10:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003ae20:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003ae30:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003a | 0003ae40:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0003a | 0003ae50:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003a | 0003ae60:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003a | 0003ae70:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | ||
| 0003a | 0003ae80:·3039·3822·3e3c·7461·626c·6520·636c·6173··098"><table·clas | ||
| 0003a | 0003ae90:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003a | 0003aea0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003a | 0003aeb0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003a | 0003aec0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003a | 0003aed0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003 | 0003aee0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003 | 0003aef0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003 | 0003af00:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003 | 0003af10:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003 | 0003af20:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003 | 0003af30:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003 | 0003af40:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003 | 0003af50:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003 | 0003af60:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003 | 0003af70:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | ||
| 0003af80:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003af90:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003afa0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003afb0:·6d73·0a69·6620·7270·6d20·2d2d·7175·6965··ms.if·rpm·--quie | |||
| 0003afc0:·7420·2d71·206b·6572·6e65·6c20·7c7c·2072··t·-q·kernel·||·r | |||
| 0003afd0:·706d·202d·2d71·7569·6574·202d·7120·6b65··pm·--quiet·-q·ke | |||
| 0003afe0:·726e·656c·2d75·656b·3b20·7468·656e·0a0a··rnel-uek;·then.. | |||
| 0003aff0:·6966·2021·2072·706d·202d·7120·2d2d·7175··if·!·rpm·-q·--qu | |||
| 0003b000:·6965·7420·2261·6964·6522·203b·2074·6865··iet·"aide"·;·the | |||
| 0003b010:·6e0a·2020·2020·646e·6620·696e·7374·616c··n.····dnf·instal | |||
| 0003b020:·6c20·2d79·2022·6169·6465·220a·6669·0a0a··l·-y·"aide".fi.. | |||
| 0003b030:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | |||
| 0003b040:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | |||
| 0003b050:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | |||
| 0003b060:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | |||
| 0003b070:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | |||
| 0003b080:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b090:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b0a0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b0b0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b0a0:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b0b0:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b0c0:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b0d0:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b0e0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b0f0:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003b100:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b110:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b120:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b130:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b140:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b150:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b160:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b170:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b180:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b190:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b1a0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b1b0:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003b1c0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b1d0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b1e0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b1f0:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| Max diff block lines reached; 9506843/9535437 bytes (99.70%) of diff not shown. | |||
| Offset 115, 26 lines modified | Offset 115, 34 lines modified | ||
| 115 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 115 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 116 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 116 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 117 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 117 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 119 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 119 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 120 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | incl | 131 | #·Remediation·is·applicable·only·in·certain·platforms |
| 132 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 128 | class·install_aide·{ | ||
| 129 | ··package·{·'aide': | ||
| 130 | ····ensure·=>·'installed', | ||
| 131 | ··} | ||
| 132 | 133 | if·!·rpm·-q·--quiet·"aide"·;·then | |
| 134 | ····dnf·install·-y·"aide" | ||
| 135 | fi | ||
| 136 | else | ||
| 137 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 138 | fi | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | -·name:·Gather·the·package·facts | 144 | -·name:·Gather·the·package·facts |
| 139 | ··package_facts: | 145 | ··package_facts: |
| Offset 163, 41 lines modified | Offset 171, 33 lines modified | ||
| 163 | ··-·PCI-DSSv4-11.5.2 | 171 | ··-·PCI-DSSv4-11.5.2 |
| 164 | ··-·enable_strategy | 172 | ··-·enable_strategy |
| 165 | ··-·low_complexity | 173 | ··-·low_complexity |
| 166 | ··-·low_disruption | 174 | ··-·low_disruption |
| 167 | ··-·medium_severity | 175 | ··-·medium_severity |
| 168 | ··-·no_reboot_needed | 176 | ··-·no_reboot_needed |
| 169 | ··-·package_aide_installed | 177 | ··-·package_aide_installed |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | [[packages]] | ||
| 172 | name·=·"aide" | ||
| 173 | version·=·"*" | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 180 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 181 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 182 | ····dnf·install·-y·"aide" | ||
| 183 | fi | ||
| 183 | package·--add=aide | ||
| 184 | else | ||
| 185 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 186 | fi | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 189 | include·install_aide | ||
| 192 | 190 | class·install_aide·{ | |
| 191 | ··package·{·'aide': | ||
| 192 | ····ensure·=>·'installed', | ||
| 193 | ··} | ||
| 194 | } | ||
| 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 194 | Run·the·following·command·to·generate·a·new·database: | 196 | Run·the·following·command·to·generate·a·new·database: |
| 195 | $·sudo·/usr/sbin/aide·--init | 197 | $·sudo·/usr/sbin/aide·--init |
| 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 197 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 199 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 198 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 200 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 199 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 201 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 221, 14 lines modified | Offset 221, 28 lines modified | ||
| 221 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 221 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 222 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 222 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 223 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 223 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 224 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 224 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 225 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 225 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 226 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 226 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 227 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 227 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 228 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 229 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 230 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 231 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 232 | ····dnf·install·-y·"aide" | ||
| 233 | fi | ||
| 234 | /usr/sbin/aide·--init | ||
| 235 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 236 | else | ||
| 237 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 238 | fi | ||
| 228 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 229 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 240 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 230 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 241 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 231 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 242 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 232 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 243 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 233 | -·name:·Gather·the·package·facts | 244 | -·name:·Gather·the·package·facts |
| 234 | ··package_facts: | 245 | ··package_facts: |
| Offset 313, 28 lines modified | Offset 327, 14 lines modified | ||
| 313 | ··-·PCI-DSSv4-11.5.2 | 327 | ··-·PCI-DSSv4-11.5.2 |
| 314 | ··-·aide_build_database | 328 | ··-·aide_build_database |
| 315 | ··-·low_complexity | 329 | ··-·low_complexity |
| 316 | ··-·low_disruption | 330 | ··-·low_disruption |
| 317 | ··-·medium_severity | 331 | ··-·medium_severity |
| 318 | ··-·no_reboot_needed | 332 | ··-·no_reboot_needed |
| 319 | ··-·restrict_strategy | 333 | ··-·restrict_strategy |
| 320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 321 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 322 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| Max diff block lines reached; 1035059/1040520 bytes (99.48%) of diff not shown. | |||
| Offset 14735, 227 lines modified | Offset 14735, 227 lines modified | ||
| 000398e0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 000398e0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 000398f0:·646d·3831·3236·2220·7461·6269·6e64·6578··dm8126"·tabindex | 000398f0:·646d·3831·3236·2220·7461·6269·6e64·6578··dm8126"·tabindex | ||
| 00039900:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 00039900:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 00039910:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 00039910:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00039920:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00039920:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00039930:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00039930:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00039940:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 00039940:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00039950:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 00039960:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00039970:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00039980:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00039990:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 000399a0:·3831·3236·223e·3c74·6162·6c65·2063·6c61··8126"><table·cla | |||
| 000399b0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 000399c0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 000399d0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 000399e0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 000399f0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00039a00:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00039a10:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00039a20:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 00039a30:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00039a40:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00039a50:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00039a60:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00039a70:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 00039a80:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00039a90:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 00039aa0:·636c·7564·6520·696e·7374·616c·6c5f·646e··clude·install_dn | |||
| 00039ab0:·662d·6175·746f·6d61·7469·630a·0a63·6c61··f-automatic..cla | |||
| 00039ac0:·7373·2069·6e73·7461·6c6c·5f64·6e66·2d61··ss·install_dnf-a | |||
| 00039ad0:·7574·6f6d·6174·6963·207b·0a20·2070·6163··utomatic·{.··pac | |||
| 00039ae0:·6b61·6765·207b·2027·646e·662d·6175·746f··kage·{·'dnf-auto | |||
| 00039af0:·6d61·7469·6327·3a0a·2020·2020·656e·7375··matic':.····ensu | |||
| 00039b00:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 00039b10:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 00039b20:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 00039b30:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 00039b40:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 00039b50:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 00039b60:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 00039b70:·646d·3831·3237·2220·7461·6269·6e64·6578··dm8127"·tabindex | |||
| 00039b80:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 00039b90:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 00039ba0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 00039bb0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 00039bc0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 00039 | 00039950:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 00039960:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 00039970:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00039980:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039990:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 000399a0:·7365·2220·6964·3d22·6964·6d38·3132·3622··se"·id="idm8126" | |||
| 000399b0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 000399c0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 000399d0:·2022·646e·662d·6175·746f·6d61·7469·6322···"dnf-automatic" | |||
| 000399e0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 000399f0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 00039a00:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 00039a10:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 00039a20:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 00039a30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 00039a40:·2223·6964·6d38·3132·3722·2074·6162·696e··"#idm8127"·tabin | |||
| 00039a50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00039a60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00039a70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00039a80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00039a90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 00039aa0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 00039 | 00039ab0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 00039 | 00039ac0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 00039 | 00039ad0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 00039 | 00039ae0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 00039 | 00039af0:·6d38·3132·3722·3e3c·7461·626c·6520·636c··m8127"><table·cl | ||
| 00039 | 00039b00:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 00039 | 00039b10:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 00039 | 00039b20:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 00039 | 00039b30:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 00039 | 00039b40:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 00039 | 00039b50:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 00039 | 00039b60:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 00039 | 00039b70:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 00039 | 00039b80:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 00039 | 00039b90:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 00039 | 00039ba0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 00039 | 00039bb0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 00039 | 00039bc0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 00039 | 00039bd0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 00039 | 00039be0:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | ||
| 00039d20:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 00039d30:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 00039d40:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 00039d50:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 00039d60:·746f·0a20·2074·6167·733a·0a20·202d·2065··to.··tags:.··-·e | |||
| 00039d70:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 00039d80:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 00039d90:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 00039da0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 00039db0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 00039dc0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 00039dd0:·2d20·7061·636b·6167·655f·646e·662d·6175··-·package_dnf-au | |||
| 00039de0:·746f·6d61·7469·635f·696e·7374·616c·6c65··tomatic_installe | |||
| 00039 | 00039bf0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | ||
| 00039c00:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 00039c10:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 00039c20:·6f72·6d73·0a69·6620·2120·2820·7b20·7270··orms.if·!·(·{·rp | |||
| 00039c30:·6d20·2d2d·7175·6965·7420·2d71·206b·6572··m·--quiet·-q·ker | |||
| 00039c40:·6e65·6c20·3b7d·2026·616d·703b·2661·6d70··nel·;}·&& | |||
| 00039c50:·3b20·7b20·7270·6d20·2d2d·7175·6965·7420··;·{·rpm·--quiet· | |||
| 00039c60:·2d71·2072·706d·2d6f·7374·7265·6520·3b7d··-q·rpm-ostree·;} | |||
| 00039c70:·2026·616d·703b·2661·6d70·3b20·7b20·7270···&&·{·rp | |||
| 00039c80:·6d20·2d2d·7175·6965·7420·2d71·2062·6f6f··m·--quiet·-q·boo | |||
| 00039c90:·7463·203b·7d20·2661·6d70·3b26·616d·703b··tc·;}·&& | |||
| 00039ca0:·207b·2021·2072·706d·202d·2d71·7569·6574···{·!·rpm·--quiet | |||
| 00039cb0:·202d·7120·6f70·656e·7368·6966·742d·6b75···-q·openshift-ku | |||
| 00039cc0:·6265·6c65·7420·3b7d·2029·3b20·7468·656e··belet·;}·);·then | |||
| 00039cd0:·0a0a·6966·2021·2072·706d·202d·7120·2d2d··..if·!·rpm·-q·-- | |||
| 00039ce0:·7175·6965·7420·2264·6e66·2d61·7574·6f6d··quiet·"dnf-autom | |||
| 00039cf0:·6174·6963·2220·3b20·7468·656e·0a20·2020··atic"·;·then.··· | |||
| 00039d00:·2064·6e66·2069·6e73·7461·6c6c·202d·7920···dnf·install·-y· | |||
| 00039d10:·2264·6e66·2d61·7574·6f6d·6174·6963·220a··"dnf-automatic". | |||
| 00039d20:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | |||
| 00039d30:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 00039d40:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 00039d50:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 00039d60:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 00039d70:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| Max diff block lines reached; 3341256/3371230 bytes (99.11%) of diff not shown. | |||
| Offset 83, 26 lines modified | Offset 83, 35 lines modified | ||
| 83 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 83 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 84 | ············suitable·for·automatic,·regular·execution. | 84 | ············suitable·for·automatic,·regular·execution. |
| 85 | Severity: ··medium | 85 | Severity: ··medium |
| 86 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 86 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 87 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 87 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 88 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 88 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 89 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 89 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 90 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 91 | [[packages]] | ||
| 92 | name·=·"dnf-automatic" | ||
| 93 | version·=·"*" | ||
| 90 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 91 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 95 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 92 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 96 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 93 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 97 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 94 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 98 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 95 | 99 | #·Remediation·is·applicable·only·in·certain·platforms | |
| 100 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 101 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 96 | class·install_dnf-automatic·{ | ||
| 97 | ··package·{·'dnf-automatic': | ||
| 98 | ····ensure·=>·'installed', | ||
| 99 | ··} | ||
| 100 | 102 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | |
| 103 | ····dnf·install·-y·"dnf-automatic" | ||
| 104 | fi | ||
| 105 | else | ||
| 106 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 107 | fi | ||
| 101 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 102 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 103 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 104 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 105 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 106 | -·name:·Gather·the·package·facts | 113 | -·name:·Gather·the·package·facts |
| 107 | ··package_facts: | 114 | ··package_facts: |
| Offset 126, 42 lines modified | Offset 135, 33 lines modified | ||
| 126 | ··tags: | 135 | ··tags: |
| 127 | ··-·enable_strategy | 136 | ··-·enable_strategy |
| 128 | ··-·low_complexity | 137 | ··-·low_complexity |
| 129 | ··-·low_disruption | 138 | ··-·low_disruption |
| 130 | ··-·medium_severity | 139 | ··-·medium_severity |
| 131 | ··-·no_reboot_needed | 140 | ··-·no_reboot_needed |
| 132 | ··-·package_dnf-automatic_installed | 141 | ··-·package_dnf-automatic_installed |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | [[packages]] | ||
| 135 | name·=·"dnf-automatic" | ||
| 136 | version·=·"*" | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 142 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 143 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 144 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 145 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 146 | ····dnf·install·-y·"dnf-automatic" | ||
| 147 | fi | ||
| 147 | package·--add=dnf-automatic | ||
| 148 | else | ||
| 149 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 150 | fi | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | include·install_dnf-automatic | ||
| 154 | class·install_dnf-automatic·{ | ||
| 156 | package· | 155 | ··package·{·'dnf-automatic': |
| 156 | ····ensure·=>·'installed', | ||
| 157 | ··} | ||
| 158 | } | ||
| 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 159 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 158 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 160 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 159 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 161 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 160 | automatic.conf. | 162 | automatic.conf. |
| 161 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 163 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 162 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 164 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 163 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 165 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 306, 14 lines modified | Offset 306, 43 lines modified | ||
| 306 | ···························(a),·CM-11(b) | 306 | ···························(a),·CM-11(b) |
| 307 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 307 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 308 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 308 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 | 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 |
| 310 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 | 310 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 |
| 311 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 | 311 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 |
| 312 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 | 312 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 |
| 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 314 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 315 | if·rpm·--quiet·-q·dnf;·then | ||
| 316 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 317 | #·adding·any·search·characters·to·the·config·file. | ||
| 318 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^gpgcheck") | ||
| 319 | #·shellcheck·disable=SC2059 | ||
| 320 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| 321 | #·If·the·key·exists,·change·it.·Otherwise,·add·it·to·the·config_file. | ||
| 322 | #·We·search·for·the·key·string·followed·by·a·word·boundary·(matched·by·\>), | ||
| 323 | #·so·if·we·search·for·'setting',·'setting2'·won't·match. | ||
| 324 | if·LC_ALL=C·grep·-q·-m·1·-i·-e·"^gpgcheck\\>"·"/etc/dnf/dnf.conf";·then | ||
| 325 | ····escaped_formatted_output=$(sed·-e·'s|/|\\/|g'·<<<·"$formatted_output") | ||
| 326 | ····LC_ALL=C·sed·-i·--follow-symlinks·"s/^gpgcheck\\>.*/$escaped_formatted_output/gi"·"/etc/ | ||
| 327 | dnf/dnf.conf" | ||
| 328 | else | ||
| 329 | ····if·[[·-s·"/etc/dnf/dnf.conf"·]]·&&·[[·-n·"$(tail·-c·1·--·"/etc/dnf/dnf.conf"·||·true)" | ||
| 330 | ]];·then | ||
| 331 | ········LC_ALL=C·sed·-i·--follow-symlinks·'$a'\\·"/etc/dnf/dnf.conf" | ||
| 332 | ····fi | ||
| 333 | ····printf·'%s\n'·"$formatted_output"·>>·"/etc/dnf/dnf.conf" | ||
| 334 | fi | ||
| 335 | else | ||
| 336 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 337 | fi | ||
| 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 314 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 339 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 205403/211189 bytes (97.26%) of diff not shown. | |||
| Offset 15141, 408 lines modified | Offset 15141, 408 lines modified | ||
| 0003b240:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b240:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b250:·3d22·2369·646d·3437·3632·2220·7461·6269··="#idm4762"·tabi | 0003b250:·3d22·2369·646d·3437·3632·2220·7461·6269··="#idm4762"·tabi | ||
| 0003b260:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b260:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b270:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b270:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b280:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b280:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b290:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b290:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b2a0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b2a0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b2b0:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b2b0:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | ||
| 0003b2c0:· | 0003b2c0:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | ||
| 0003b2d0:· | 0003b2d0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b2e0:· | 0003b2e0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b2f0:· | 0003b2f0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b300:· | 0003b300:·646d·3437·3632·223e·3c70·7265·3e3c·636f··dm4762"><pre><co | ||
| 0003b310:·6 | 0003b310:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | ||
| 0003b320:· | 0003b320:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | ||
| 0003b330:·6 | 0003b330:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | ||
| 0003b340:·6 | 0003b340:·6c61·7466·6f72·6d73·0a69·6620·2120·2820··latforms.if·!·(· | ||
| 0003b350:· | 0003b350:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | ||
| 0003b360:· | 0003b360:·206b·6572·6e65·6c20·3b7d·2026·616d·703b···kernel·;}·& | ||
| 0003b370:· | 0003b370:·2661·6d70·3b20·7b20·7270·6d20·2d2d·7175··&·{·rpm·--qu | ||
| 0003b380:·69 | 0003b380:·6965·7420·2d71·2072·706d·2d6f·7374·7265··iet·-q·rpm-ostre | ||
| 0003b390:· | 0003b390:·6520·3b7d·2026·616d·703b·2661·6d70·3b20··e·;}·&&· | ||
| 0003b3a0:·7 | 0003b3a0:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | ||
| 0003b3b0:· | 0003b3b0:·2062·6f6f·7463·203b·7d20·2661·6d70·3b26···bootc·;}·&& | ||
| 0003b3c0:· | 0003b3c0:·616d·703b·207b·2021·2072·706d·202d·2d71··amp;·{·!·rpm·--q | ||
| 0003b3d0:· | 0003b3d0:·7569·6574·202d·7120·6f70·656e·7368·6966··uiet·-q·openshif | ||
| 0003b3e0:· | 0003b3e0:·742d·6b75·6265·6c65·7420·3b7d·2029·3b20··t-kubelet·;}·);· | ||
| 0003b3f0:· | 0003b3f0:·7468·656e·0a0a·2320·4669·6e64·2077·6869··then..#·Find·whi | ||
| 0003b400:· | 0003b400:·6368·2066·696c·6573·2068·6176·6520·696e··ch·files·have·in | ||
| 0003b410:· | 0003b410:·636f·7272·6563·7420·6861·7368·2028·6e6f··correct·hash·(no | ||
| 0003b420:· | 0003b420:·7420·696e·202f·6574·632c·2062·6563·6175··t·in·/etc,·becau | ||
| 0003b430:· | 0003b430:·7365·206f·6620·7468·6520·7379·7374·656d··se·of·the·system | ||
| 0003b440:· | 0003b440:·2072·656c·6174·6564·2063·6f6e·6669·6720···related·config· | ||
| 0003b450:·6 | 0003b450:·6669·6c65·7329·2061·6e64·2074·6865·6e20··files)·and·then· | ||
| 0003b460:· | 0003b460:·6765·7420·6669·6c65·7320·6e61·6d65·730a··get·files·names. | ||
| 0003b470:· | 0003b470:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | ||
| 0003b480:· | 0003b480:·7265·6374·5f68·6173·683d·2224·2872·706d··rect_hash="$(rpm | ||
| 0003b490:·2 | 0003b490:·202d·5661·202d·2d6e·6f63·6f6e·6669·6720···-Va·--noconfig· | ||
| 0003b4a0:· | 0003b4a0:·7c20·6772·6570·202d·4520·275e·2e2e·3527··|·grep·-E·'^..5' | ||
| 0003b4b0:·20 | 0003b4b0:·207c·2061·776b·2027·7b70·7269·6e74·2024···|·awk·'{print·$ | ||
| 0003b4c0:· | 0003b4c0:·4e46·7d27·2029·220a·0a69·6620·5b20·2d6e··NF}'·)"..if·[·-n | ||
| 0003b4d0:· | 0003b4d0:·2022·2466·696c·6573·5f77·6974·685f·696e···"$files_with_in | ||
| 0003b4e0:· | 0003b4e0:·636f·7272·6563·745f·6861·7368·2220·5d3b··correct_hash"·]; | ||
| 0003b4f0:· | 0003b4f0:·2074·6865·6e0a·2020·2020·2320·4672·6f6d···then.····#·From | ||
| 0003b500:· | 0003b500:·2066·696c·6573·206e·616d·6573·2067·6574···files·names·get | ||
| 0003b510:· | 0003b510:·2070·6163·6b61·6765·206e·616d·6573·2061···package·names·a | ||
| 0003b520:· | 0003b520:·6e64·2063·6861·6e67·6520·6e65·776c·696e··nd·change·newlin | ||
| 0003b530:· | 0003b530:·6520·746f·2073·7061·6365·2c20·6265·6361··e·to·space,·beca | ||
| 0003b540:· | 0003b540:·7573·6520·7270·6d20·7772·6974·6573·2065··use·rpm·writes·e | ||
| 0003b550:·6 | 0003b550:·6163·6820·7061·636b·6167·6520·746f·206e··ach·package·to·n | ||
| 0003b560:· | 0003b560:·6577·206c·696e·650a·2020·2020·7061·636b··ew·line.····pack | ||
| 0003b570:· | 0003b570:·6167·6573·5f74·6f5f·7265·696e·7374·616c··ages_to_reinstal | ||
| 0003b580:· | 0003b580:·6c3d·2224·2872·706d·202d·7166·2024·6669··l="$(rpm·-qf·$fi | ||
| 0003b590:·6 | 0003b590:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003b5a0:· | 0003b5a0:·6374·5f68·6173·6820·7c20·7472·2027·5c6e··ct_hash·|·tr·'\n | ||
| 0003b5b0:· | 0003b5b0:·2720·2720·2729·220a·0a20·2020·200a·2020··'·'·')"..····.·· | ||
| 0003b5c0:· | 0003b5c0:·2020·646e·6620·7265·696e·7374·616c·6c20····dnf·reinstall· | ||
| 0003b5d0:· | 0003b5d0:·2d79·2024·7061·636b·6167·6573·5f74·6f5f··-y·$packages_to_ | ||
| 0003b5e0:· | 0003b5e0:·7265·696e·7374·616c·6c0a·2020·2020·0a66··reinstall.····.f | ||
| 0003b5f0:·6 | 0003b5f0:·690a·0a65·6c73·650a·2020·2020·2667·743b··i..else.····> | ||
| 0003b600:·2 | 0003b600:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | ||
| 0003b610:· | 0003b610:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | ||
| 0003b620:· | 0003b620:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | ||
| 0003b630:·6 | 0003b630:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | ||
| 0003b640:· | 0003b640:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 0003b650:· | 0003b650:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 0003b660:· | 0003b660:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 0003b670:·61 | 0003b670:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 0003b680:· | 0003b680:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b690:· | 0003b690:·743d·2223·6964·6d34·3736·3322·2074·6162··t="#idm4763"·tab | ||
| 0003b6a0:· | 0003b6a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b6b0:·6 | 0003b6b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b6c0:· | 0003b6c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b6d0:·74 | 0003b6d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b6e0:· | 0003b6e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b6f0:· | 0003b6f0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003b700:· | 0003b700:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 0003b710:· | 0003b710:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b720:·6 | 0003b720:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b730:·6 | 0003b730:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b740:· | 0003b740:·643d·2269·646d·3437·3633·223e·3c74·6162··d="idm4763"><tab | ||
| 0003b750:· | 0003b750:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003b760:· | 0003b760:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003b770:· | 0003b770:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003b780:· | 0003b780:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003b790:· | 0003b790:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003b7a0:· | 0003b7a0:·3a3c·2f74·683e·3c74·643e·6869·6768·3c2f··:</th><td>high</ | ||
| 0003b7b0:· | 0003b7b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b7c0:· | 0003b7c0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003b7d0:· | 0003b7d0:·3c74·643e·6d65·6469·756d·3c2f·7464·3e3c··<td>medium</td>< | ||
| 0003b7e0:·2 | 0003b7e0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b7f0:· | 0003b7f0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b800:· | 0003b800:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b810:· | 0003b810:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003b820:· | 0003b820:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | ||
| 0003b830:· | 0003b830:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003b840:· | 0003b840:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | ||
| 0003b850:· | 0003b850:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | ||
| 0003b860:· | 0003b860:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | ||
| 0003b870:·766 | 0003b870:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | ||
| 0003b880:·6d | 0003b880:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | ||
| 0003b890:· | 0003b890:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003b8a0:· | 0003b8a0:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003b8b0:· | 0003b8b0:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003b8c0:· | 0003b8c0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b8d0:· | 0003b8d0:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003b8e0:·3 | 0003b8e0:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003b8f0:· | 0003b8f0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003b900:· | 0003b900:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003b910:· | 0003b910:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003b920:· | 0003b920:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b930:· | 0003b930:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003b940:· | 0003b940:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003b950:· | 0003b950:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003b960:· | 0003b960:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003b970:·6 | 0003b970:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003b980:· | 0003b980:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003b990:· | 0003b990:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003b9a0:· | 0003b9a0:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003b9b0:· | 0003b9b0:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003b9c0:· | 0003b9c0:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| 0003b9d0:· | 0003b9d0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | ||
| 0003b9e0:· | 0003b9e0:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | ||
| 0003b9f0:· | 0003b9f0:·6567·790a·2020·2d20·7270·6d5f·7665·7269··egy.··-·rpm_veri | ||
| 0003ba00:·6 | 0003ba00:·6679·5f68·6173·6865·730a·0a2d·206e·616d··fy_hashes..-·nam | ||
| 0003ba10:· | 0003ba10:·653a·2027·5365·7420·6661·6374·3a20·5061··e:·'Set·fact:·Pa | ||
| Max diff block lines reached; 6023001/6077953 bytes (99.10%) of diff not shown. | |||
| Offset 103, 14 lines modified | Offset 103, 33 lines modified | ||
| 103 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 103 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 104 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 104 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 105 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 105 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 106 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 106 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 108 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 111 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 112 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 113 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 114 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 115 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 116 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 117 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 118 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 119 | fi | ||
| 120 | else | ||
| 121 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 122 | fi | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 115 | -·name:·Gather·the·package·facts | 128 | -·name:·Gather·the·package·facts |
| 116 | ··package_facts: | 129 | ··package_facts: |
| Offset 277, 33 lines modified | Offset 296, 14 lines modified | ||
| 277 | ··-·PCI-DSSv4-11.5.2 | 296 | ··-·PCI-DSSv4-11.5.2 |
| 278 | ··-·high_complexity | 297 | ··-·high_complexity |
| 279 | ··-·high_severity | 298 | ··-·high_severity |
| 280 | ··-·medium_disruption | 299 | ··-·medium_disruption |
| 281 | ··-·no_reboot_needed | 300 | ··-·no_reboot_needed |
| 282 | ··-·restrict_strategy | 301 | ··-·restrict_strategy |
| 283 | ··-·rpm_verify_hashes | 302 | ··-·rpm_verify_hashes |
| 284 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 285 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 286 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 287 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 288 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 289 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 290 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 291 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 292 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 293 | fi | ||
| 294 | else | ||
| 295 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 296 | fi | ||
| 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 303 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 298 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 304 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 299 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 305 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 300 | run·the·following·command·to·determine·which·package·owns·it: | 306 | run·the·following·command·to·determine·which·package·owns·it: |
| 301 | $·rpm·-qf·FILENAME | 307 | $·rpm·-qf·FILENAME |
| 302 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 308 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 303 | $·sudo·rpm·--restore·PACKAGENAME | 309 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 322, 14 lines modified | Offset 322, 46 lines modified | ||
| 322 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 322 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 323 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 323 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 324 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 324 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 327 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 327 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 328 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 328 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 330 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 331 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 332 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 333 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 334 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 335 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 336 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 337 | declare·-A·SETPERMS_RPM_DICT | ||
| 338 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 339 | #·is·expected·by·the·RPM·database | ||
| 340 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 341 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 342 | do | ||
| 343 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 344 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 345 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 346 | done | ||
| 347 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 348 | #·correct·values | ||
| 349 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 350 | do | ||
| 351 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 352 | done | ||
| 353 | else | ||
| 354 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 355 | fi | ||
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 330 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 331 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 332 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 333 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 334 | -·name:·Gather·the·package·facts | 361 | -·name:·Gather·the·package·facts |
| 335 | ··package_facts: | 362 | ··package_facts: |
| Offset 437, 46 lines modified | Offset 469, 14 lines modified | ||
| 437 | ··-·PCI-DSSv4-11.5.2 | 469 | ··-·PCI-DSSv4-11.5.2 |
| 438 | ··-·high_complexity | 470 | ··-·high_complexity |
| 439 | ··-·high_severity | 471 | ··-·high_severity |
| 440 | ··-·medium_disruption | 472 | ··-·medium_disruption |
| 441 | ··-·no_reboot_needed | 473 | ··-·no_reboot_needed |
| 442 | ··-·restrict_strategy | 474 | ··-·restrict_strategy |
| 443 | ··-·rpm_verify_ownership | 475 | ··-·rpm_verify_ownership |
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 633511/641222 bytes (98.80%) of diff not shown. | |||
| Offset 15167, 408 lines modified | Offset 15167, 408 lines modified | ||
| 0003b3e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b3e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b3f0:·2369·646d·3437·3632·2220·7461·6269·6e64··#idm4762"·tabind | 0003b3f0:·2369·646d·3437·3632·2220·7461·6269·6e64··#idm4762"·tabind | ||
| 0003b400:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b400:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b410:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b410:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b420:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b420:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b430:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b430:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b440:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b440:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b450:·5265·6d65·6469·6174·696f·6e20· | 0003b450:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003b460:·6 | 0003b460:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | ||
| 0003b470:· | 0003b470:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b480:·7 | 0003b480:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b490:·6 | 0003b490:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b4a0:· | 0003b4a0:·3437·3632·223e·3c70·7265·3e3c·636f·6465··4762"><pre><code | ||
| 0003b4b0:· | 0003b4b0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | ||
| 0003b4c0:· | 0003b4c0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | ||
| 0003b4d0:· | 0003b4d0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | ||
| 0003b4e0:· | 0003b4e0:·7466·6f72·6d73·0a69·6620·2120·2820·7b20··tforms.if·!·(·{· | ||
| 0003b4f0:·7 | 0003b4f0:·7270·6d20·2d2d·7175·6965·7420·2d71·206b··rpm·--quiet·-q·k | ||
| 0003b500:· | 0003b500:·6572·6e65·6c20·3b7d·2026·616d·703b·2661··ernel·;}·&&a | ||
| 0003b510:· | 0003b510:·6d70·3b20·7b20·7270·6d20·2d2d·7175·6965··mp;·{·rpm·--quie | ||
| 0003b520:·727 | 0003b520:·7420·2d71·2072·706d·2d6f·7374·7265·6520··t·-q·rpm-ostree· | ||
| 0003b530:·3 | 0003b530:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003b540:· | 0003b540:·7270·6d20·2d2d·7175·6965·7420·2d71·2062··rpm·--quiet·-q·b | ||
| 0003b550:· | 0003b550:·6f6f·7463·203b·7d20·2661·6d70·3b26·616d··ootc·;}·&&am | ||
| 0003b560:·7 | 0003b560:·703b·207b·2021·2072·706d·202d·2d71·7569··p;·{·!·rpm·--qui | ||
| 0003b570:· | 0003b570:·6574·202d·7120·6f70·656e·7368·6966·742d··et·-q·openshift- | ||
| 0003b580:·6 | 0003b580:·6b75·6265·6c65·7420·3b7d·2029·3b20·7468··kubelet·;}·);·th | ||
| 0003b590:· | 0003b590:·656e·0a0a·2320·4669·6e64·2077·6869·6368··en..#·Find·which | ||
| 0003b5a0:· | 0003b5a0:·2066·696c·6573·2068·6176·6520·696e·636f···files·have·inco | ||
| 0003b5b0:· | 0003b5b0:·7272·6563·7420·6861·7368·2028·6e6f·7420··rrect·hash·(not· | ||
| 0003b5c0:·6 | 0003b5c0:·696e·202f·6574·632c·2062·6563·6175·7365··in·/etc,·because | ||
| 0003b5d0:· | 0003b5d0:·206f·6620·7468·6520·7379·7374·656d·2072···of·the·system·r | ||
| 0003b5e0:·6 | 0003b5e0:·656c·6174·6564·2063·6f6e·6669·6720·6669··elated·config·fi | ||
| 0003b5f0:· | 0003b5f0:·6c65·7329·2061·6e64·2074·6865·6e20·6765··les)·and·then·ge | ||
| 0003b600:· | 0003b600:·7420·6669·6c65·7320·6e61·6d65·730a·6669··t·files·names.fi | ||
| 0003b610:· | 0003b610:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003b620:· | 0003b620:·6374·5f68·6173·683d·2224·2872·706d·202d··ct_hash="$(rpm·- | ||
| 0003b630:· | 0003b630:·5661·202d·2d6e·6f63·6f6e·6669·6720·7c20··Va·--noconfig·|· | ||
| 0003b640:· | 0003b640:·6772·6570·202d·4520·275e·2e2e·3527·207c··grep·-E·'^..5'·| | ||
| 0003b650:· | 0003b650:·2061·776b·2027·7b70·7269·6e74·2024·4e46···awk·'{print·$NF | ||
| 0003b660:· | 0003b660:·7d27·2029·220a·0a69·6620·5b20·2d6e·2022··}'·)"..if·[·-n·" | ||
| 0003b670:· | 0003b670:·2466·696c·6573·5f77·6974·685f·696e·636f··$files_with_inco | ||
| 0003b680:· | 0003b680:·7272·6563·745f·6861·7368·2220·5d3b·2074··rrect_hash"·];·t | ||
| 0003b690:· | 0003b690:·6865·6e0a·2020·2020·2320·4672·6f6d·2066··hen.····#·From·f | ||
| 0003b6a0:· | 0003b6a0:·696c·6573·206e·616d·6573·2067·6574·2070··iles·names·get·p | ||
| 0003b6b0:· | 0003b6b0:·6163·6b61·6765·206e·616d·6573·2061·6e64··ackage·names·and | ||
| 0003b6c0:·20 | 0003b6c0:·2063·6861·6e67·6520·6e65·776c·696e·6520···change·newline· | ||
| 0003b6d0:· | 0003b6d0:·746f·2073·7061·6365·2c20·6265·6361·7573··to·space,·becaus | ||
| 0003b6e0:· | 0003b6e0:·6520·7270·6d20·7772·6974·6573·2065·6163··e·rpm·writes·eac | ||
| 0003b6f0:·6 | 0003b6f0:·6820·7061·636b·6167·6520·746f·206e·6577··h·package·to·new | ||
| 0003b700:·2 | 0003b700:·206c·696e·650a·2020·2020·7061·636b·6167···line.····packag | ||
| 0003b710:· | 0003b710:·6573·5f74·6f5f·7265·696e·7374·616c·6c3d··es_to_reinstall= | ||
| 0003b720:· | 0003b720:·2224·2872·706d·202d·7166·2024·6669·6c65··"$(rpm·-qf·$file | ||
| 0003b730:· | 0003b730:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003b740:· | 0003b740:·5f68·6173·6820·7c20·7472·2027·5c6e·2720··_hash·|·tr·'\n'· | ||
| 0003b750:· | 0003b750:·2720·2729·220a·0a20·2020·200a·2020·2020··'·')"..····.···· | ||
| 0003b760:·6 | 0003b760:·646e·6620·7265·696e·7374·616c·6c20·2d79··dnf·reinstall·-y | ||
| 0003b770:·2 | 0003b770:·2024·7061·636b·6167·6573·5f74·6f5f·7265···$packages_to_re | ||
| 0003b780:·6 | 0003b780:·696e·7374·616c·6c0a·2020·2020·0a66·690a··install.····.fi. | ||
| 0003b790:· | 0003b790:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | ||
| 0003b7a0:· | 0003b7a0:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | ||
| 0003b7b0:·6 | 0003b7b0:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | ||
| 0003b7c0:· | 0003b7c0:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | ||
| 0003b7d0:· | 0003b7d0:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | ||
| 0003b7e0:· | 0003b7e0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003b7f0:· | 0003b7f0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003b800:·62 | 0003b800:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003b810:·6 | 0003b810:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003b820:· | 0003b820:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b830:· | 0003b830:·2223·6964·6d34·3736·3322·2074·6162·696e··"#idm4763"·tabin | ||
| 0003b840:· | 0003b840:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b850:· | 0003b850:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b860:·6 | 0003b860:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b870:· | 0003b870:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b880:·657 | 0003b880:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b890:· | 0003b890:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b8a0:· | 0003b8a0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b8b0:· | 0003b8b0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b8c0:· | 0003b8c0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b8d0:· | 0003b8d0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b8e0:·22 | 0003b8e0:·2269·646d·3437·3633·223e·3c74·6162·6c65··"idm4763"><table | ||
| 0003b8f0:·20 | 0003b8f0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b900:· | 0003b900:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b910:· | 0003b910:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b920:· | 0003b920:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b930:·3 | 0003b930:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b940:·2 | 0003b940:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b950:· | 0003b950:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b960:· | 0003b960:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b970:· | 0003b970:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b980:· | 0003b980:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b990:· | 0003b990:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b9a0:· | 0003b9a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b9b0:· | 0003b9b0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b9c0:· | 0003b9c0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b9d0:· | 0003b9d0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b9e0:· | 0003b9e0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b9f0:· | 0003b9f0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | ||
| 0003ba00:· | 0003ba00:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | ||
| 0003ba10:·7 | 0003ba10:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | ||
| 0003ba20:·6 | 0003ba20:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | ||
| 0003ba30:·6 | 0003ba30:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003ba40:· | 0003ba40:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003ba50:· | 0003ba50:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003ba60:· | 0003ba60:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003ba70:· | 0003ba70:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003ba80:· | 0003ba80:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003ba90:· | 0003ba90:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003baa0:· | 0003baa0:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003bab0:· | 0003bab0:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003bac0:· | 0003bac0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003bad0:· | 0003bad0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bae0:· | 0003bae0:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003baf0:· | 0003baf0:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003bb00:· | 0003bb00:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003bb10:· | 0003bb10:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003bb20:· | 0003bb20:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003bb30:· | 0003bb30:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003bb40:· | 0003bb40:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003bb50:· | 0003bb50:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003bb60:·7 | 0003bb60:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003bb70:·6 | 0003bb70:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003bb80:· | 0003bb80:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 0003bb90:· | 0003bb90:·790a·2020·2d20·7270·6d5f·7665·7269·6679··y.··-·rpm_verify | ||
| 0003bba0:· | 0003bba0:·5f68·6173·6865·730a·0a2d·206e·616d·653a··_hashes..-·name: | ||
| 0003bbb0:· | 0003bbb0:·2027·5365·7420·6661·6374·3a20·5061·636b···'Set·fact:·Pack | ||
| Max diff block lines reached; 18799503/18854455 bytes (99.71%) of diff not shown. | |||
| Offset 15179, 408 lines modified | Offset 15179, 408 lines modified | ||
| 0003b4a0:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | 0003b4a0:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | ||
| 0003b4b0:·3736·3222·2074·6162·696e·6465·783d·2230··762"·tabindex="0 | 0003b4b0:·3736·3222·2074·6162·696e·6465·783d·2230··762"·tabindex="0 | ||
| 0003b4c0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b4c0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b4d0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b4d0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b4e0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b4e0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b4f0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b4f0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b500:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b500:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b510:·6961·7469·6f6e·20 | 0003b510:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 0003b520:·6 | 0003b520:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003b530:· | 0003b530:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b540:· | 0003b540:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b550:· | 0003b550:·7365·2220·6964·3d22·6964·6d34·3736·3222··se"·id="idm4762" | ||
| 0003b560:·3 | 0003b560:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | ||
| 0003b570:· | 0003b570:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | ||
| 0003b580:· | 0003b580:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | ||
| 0003b590:·6 | 0003b590:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | ||
| 0003b5a0:· | 0003b5a0:·730a·6966·2021·2028·207b·2072·706d·202d··s.if·!·(·{·rpm·- | ||
| 0003b5b0:· | 0003b5b0:·2d71·7569·6574·202d·7120·6b65·726e·656c··-quiet·-q·kernel | ||
| 0003b5c0:· | 0003b5c0:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b5d0:· | 0003b5d0:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b5e0:· | 0003b5e0:·7270·6d2d·6f73·7472·6565·203b·7d20·2661··rpm-ostree·;}·&a | ||
| 0003b5f0:· | 0003b5f0:·6d70·3b26·616d·703b·207b·2072·706d·202d··mp;&·{·rpm·- | ||
| 0003b600:· | 0003b600:·2d71·7569·6574·202d·7120·626f·6f74·6320··-quiet·-q·bootc· | ||
| 0003b610:·3 | 0003b610:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003b620:· | 0003b620:·2120·7270·6d20·2d2d·7175·6965·7420·2d71··!·rpm·--quiet·-q | ||
| 0003b630:· | 0003b630:·206f·7065·6e73·6869·6674·2d6b·7562·656c···openshift-kubel | ||
| 0003b640:·74 | 0003b640:·6574·203b·7d20·293b·2074·6865·6e0a·0a23··et·;}·);·then..# | ||
| 0003b650:·2 | 0003b650:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | ||
| 0003b660:· | 0003b660:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | ||
| 0003b670:·20 | 0003b670:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | ||
| 0003b680:·74 | 0003b680:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | ||
| 0003b690:· | 0003b690:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | ||
| 0003b6a0:·206 | 0003b6a0:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | ||
| 0003b6b0:· | 0003b6b0:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | ||
| 0003b6c0:· | 0003b6c0:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | ||
| 0003b6d0:· | 0003b6d0:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b6e0:· | 0003b6e0:·7368·3d22·2428·7270·6d20·2d56·6120·2d2d··sh="$(rpm·-Va·-- | ||
| 0003b6f0:· | 0003b6f0:·6e6f·636f·6e66·6967·207c·2067·7265·7020··noconfig·|·grep· | ||
| 0003b700:·2d | 0003b700:·2d45·2027·5e2e·2e35·2720·7c20·6177·6b20··-E·'^..5'·|·awk· | ||
| 0003b710:· | 0003b710:·277b·7072·696e·7420·244e·467d·2720·2922··'{print·$NF}'·)" | ||
| 0003b720:· | 0003b720:·0a0a·6966·205b·202d·6e20·2224·6669·6c65··..if·[·-n·"$file | ||
| 0003b730:· | 0003b730:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003b740:· | 0003b740:·5f68·6173·6822·205d·3b20·7468·656e·0a20··_hash"·];·then.· | ||
| 0003b750:· | 0003b750:·2020·2023·2046·726f·6d20·6669·6c65·7320·····#·From·files· | ||
| 0003b760:· | 0003b760:·6e61·6d65·7320·6765·7420·7061·636b·6167··names·get·packag | ||
| 0003b770:· | 0003b770:·6520·6e61·6d65·7320·616e·6420·6368·616e··e·names·and·chan | ||
| 0003b780:· | 0003b780:·6765·206e·6577·6c69·6e65·2074·6f20·7370··ge·newline·to·sp | ||
| 0003b790:· | 0003b790:·6163·652c·2062·6563·6175·7365·2072·706d··ace,·because·rpm | ||
| 0003b7a0:·2 | 0003b7a0:·2077·7269·7465·7320·6561·6368·2070·6163···writes·each·pac | ||
| 0003b7b0:·6 | 0003b7b0:·6b61·6765·2074·6f20·6e65·7720·6c69·6e65··kage·to·new·line | ||
| 0003b7c0:· | 0003b7c0:·0a20·2020·2070·6163·6b61·6765·735f·746f··.····packages_to | ||
| 0003b7d0:· | 0003b7d0:·5f72·6569·6e73·7461·6c6c·3d22·2428·7270··_reinstall="$(rp | ||
| 0003b7e0:· | 0003b7e0:·6d20·2d71·6620·2466·696c·6573·5f77·6974··m·-qf·$files_wit | ||
| 0003b7f0:·6 | 0003b7f0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b800:· | 0003b800:·207c·2074·7220·275c·6e27·2027·2027·2922···|·tr·'\n'·'·')" | ||
| 0003b810:· | 0003b810:·0a0a·2020·2020·0a20·2020·2064·6e66·2072··..····.····dnf·r | ||
| 0003b820:· | 0003b820:·6569·6e73·7461·6c6c·202d·7920·2470·6163··einstall·-y·$pac | ||
| 0003b830:·6 | 0003b830:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | ||
| 0003b840:·6 | 0003b840:·6c6c·0a20·2020·200a·6669·0a0a·656c·7365··ll.····.fi..else | ||
| 0003b850:· | 0003b850:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | ||
| 0003b860:·6 | 0003b860:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | ||
| 0003b870:· | 0003b870:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | ||
| 0003b880:·6 | 0003b880:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | ||
| 0003b890:· | 0003b890:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | ||
| 0003b8a0:· | 0003b8a0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003b8b0:·6 | 0003b8b0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003b8c0:· | 0003b8c0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003b8d0:·6 | 0003b8d0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003b8e0:·6 | 0003b8e0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b8f0:· | 0003b8f0:·3437·3633·2220·7461·6269·6e64·6578·3d22··4763"·tabindex=" | ||
| 0003b900:· | 0003b900:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b910:· | 0003b910:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b920:·6 | 0003b920:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b930:·7 | 0003b930:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b940:· | 0003b940:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b950:· | 0003b950:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b960:· | 0003b960:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003b970:·6 | 0003b970:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b980:·6 | 0003b980:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b990:· | 0003b990:·6c6c·6170·7365·2220·6964·3d22·6964·6d34··llapse"·id="idm4 | ||
| 0003b9a0:· | 0003b9a0:·3736·3322·3e3c·7461·626c·6520·636c·6173··763"><table·clas | ||
| 0003b9b0:·733 | 0003b9b0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b9c0:· | 0003b9c0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b9d0:· | 0003b9d0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b9e0:· | 0003b9e0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b9f0:· | 0003b9f0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003ba00:· | 0003ba00:·7464·3e68·6967·683c·2f74·643e·3c2f·7472··td>high</td></tr | ||
| 0003ba10:· | 0003ba10:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003ba20:·6 | 0003ba20:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 0003ba30:· | 0003ba30:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0003ba40:· | 0003ba40:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003ba50:· | 0003ba50:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003ba60:· | 0003ba60:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003ba70:· | 0003ba70:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 0003ba80:· | 0003ba80:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 0003ba90:·3 | 0003ba90:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003baa0:· | 0003baa0:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | ||
| 0003bab0:· | 0003bab0:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | ||
| 0003bac0:· | 0003bac0:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | ||
| 0003bad0:· | 0003bad0:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | ||
| 0003bae0:· | 0003bae0:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | ||
| 0003baf0:· | 0003baf0:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003bb00:· | 0003bb00:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003bb10:· | 0003bb10:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | ||
| 0003bb20:· | 0003bb20:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | ||
| 0003bb30:·2 | 0003bb30:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 0003bb40:· | 0003bb40:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | ||
| 0003bb50:· | 0003bb50:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | ||
| 0003bb60:· | 0003bb60:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003bb70:· | 0003bb70:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | ||
| 0003bb80:· | 0003bb80:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | ||
| 0003bb90:· | 0003bb90:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003bba0:·2 | 0003bba0:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | ||
| 0003bbb0:·2d | 0003bbb0:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | ||
| 0003bbc0:· | 0003bbc0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | ||
| 0003bbd0:· | 0003bbd0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 0003bbe0:· | 0003bbe0:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | ||
| 0003bbf0:·6 | 0003bbf0:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | ||
| 0003bc00:·6 | 0003bc00:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | ||
| 0003bc10:·6 | 0003bc10:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | ||
| 0003bc20:· | 0003bc20:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | ||
| 0003bc30:·6 | 0003bc30:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | ||
| 0003bc40:·6674· | 0003bc40:·6963·745f·7374·7261·7465·6779·0a20·202d··ict_strategy.··- | ||
| 0003bc50:· | 0003bc50:·2072·706d·5f76·6572·6966·795f·6861·7368···rpm_verify_hash | ||
| 0003bc60:·6 | 0003bc60:·6573·0a0a·2d20·6e61·6d65·3a20·2753·6574··es..-·name:·'Set | ||
| 0003bc70:· | 0003bc70:·2066·6163·743a·2050·6163·6b61·6765·206d···fact:·Package·m | ||
| Max diff block lines reached; 10399321/10454273 bytes (99.47%) of diff not shown. | |||
| Offset 111, 14 lines modified | Offset 111, 33 lines modified | ||
| 111 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 111 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 121 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 122 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 123 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 124 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 125 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 126 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 127 | fi | ||
| 128 | else | ||
| 129 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 130 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·Gather·the·package·facts | 136 | -·name:·Gather·the·package·facts |
| 124 | ··package_facts: | 137 | ··package_facts: |
| Offset 285, 33 lines modified | Offset 304, 14 lines modified | ||
| 285 | ··-·PCI-DSSv4-11.5.2 | 304 | ··-·PCI-DSSv4-11.5.2 |
| 286 | ··-·high_complexity | 305 | ··-·high_complexity |
| 287 | ··-·high_severity | 306 | ··-·high_severity |
| 288 | ··-·medium_disruption | 307 | ··-·medium_disruption |
| 289 | ··-·no_reboot_needed | 308 | ··-·no_reboot_needed |
| 290 | ··-·restrict_strategy | 309 | ··-·restrict_strategy |
| 291 | ··-·rpm_verify_hashes | 310 | ··-·rpm_verify_hashes |
| 292 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 293 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 294 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 295 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 296 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 297 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 298 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 299 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 300 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 301 | fi | ||
| 302 | else | ||
| 303 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 304 | fi | ||
| 305 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 311 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 306 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 312 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 307 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 313 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 308 | run·the·following·command·to·determine·which·package·owns·it: | 314 | run·the·following·command·to·determine·which·package·owns·it: |
| 309 | $·rpm·-qf·FILENAME | 315 | $·rpm·-qf·FILENAME |
| 310 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 316 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 311 | $·sudo·rpm·--restore·PACKAGENAME | 317 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 330, 14 lines modified | Offset 330, 46 lines modified | ||
| 330 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 330 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 331 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 331 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 332 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 332 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 333 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 333 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 342 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 343 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 344 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 345 | declare·-A·SETPERMS_RPM_DICT | ||
| 346 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 347 | #·is·expected·by·the·RPM·database | ||
| 348 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 349 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 350 | do | ||
| 351 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 352 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 353 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 354 | done | ||
| 355 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 356 | #·correct·values | ||
| 357 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 358 | do | ||
| 359 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 360 | done | ||
| 361 | else | ||
| 362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 363 | fi | ||
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 342 | -·name:·Gather·the·package·facts | 369 | -·name:·Gather·the·package·facts |
| 343 | ··package_facts: | 370 | ··package_facts: |
| Offset 445, 46 lines modified | Offset 477, 14 lines modified | ||
| 445 | ··-·PCI-DSSv4-11.5.2 | 477 | ··-·PCI-DSSv4-11.5.2 |
| 446 | ··-·high_complexity | 478 | ··-·high_complexity |
| 447 | ··-·high_severity | 479 | ··-·high_severity |
| 448 | ··-·medium_disruption | 480 | ··-·medium_disruption |
| 449 | ··-·no_reboot_needed | 481 | ··-·no_reboot_needed |
| 450 | ··-·restrict_strategy | 482 | ··-·restrict_strategy |
| 451 | ··-·rpm_verify_ownership | 483 | ··-·rpm_verify_ownership |
| 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 996636/1004347 bytes (99.23%) of diff not shown. | |||
| Offset 15180, 408 lines modified | Offset 15180, 408 lines modified | ||
| 0003b4b0:·7267·6574·3d22·2369·646d·3437·3632·2220··rget="#idm4762"· | 0003b4b0:·7267·6574·3d22·2369·646d·3437·3632·2220··rget="#idm4762"· | ||
| 0003b4c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b4c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b4d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b4d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b4e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b4e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b4f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b4f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b500:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b500:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b510:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b510:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b520:·6e20· | 0003b520:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | ||
| 0003b530:· | 0003b530:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b540:· | 0003b540:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b550:·6 | 0003b550:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b560:· | 0003b560:·643d·2269·646d·3437·3632·223e·3c70·7265··d="idm4762"><pre | ||
| 0003b570:· | 0003b570:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 0003b580:· | 0003b580:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 0003b590:· | 0003b590:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 0003b5a0:· | 0003b5a0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 0003b5b0:· | 0003b5b0:·2120·2820·7b20·7270·6d20·2d2d·7175·6965··!·(·{·rpm·--quie | ||
| 0003b5c0:· | 0003b5c0:·7420·2d71·206b·6572·6e65·6c20·3b7d·2026··t·-q·kernel·;}·& | ||
| 0003b5d0:·6 | 0003b5d0:·616d·703b·2661·6d70·3b20·7b20·7270·6d20··amp;&·{·rpm· | ||
| 0003b5e0:· | 0003b5e0:·2d2d·7175·6965·7420·2d71·2072·706d·2d6f··--quiet·-q·rpm-o | ||
| 0003b5f0:·7 | 0003b5f0:·7374·7265·6520·3b7d·2026·616d·703b·2661··stree·;}·&&a | ||
| 0003b600:·6 | 0003b600:·6d70·3b20·7b20·7270·6d20·2d2d·7175·6965··mp;·{·rpm·--quie | ||
| 0003b610:· | 0003b610:·7420·2d71·2062·6f6f·7463·203b·7d20·2661··t·-q·bootc·;}·&a | ||
| 0003b620:·6 | 0003b620:·6d70·3b26·616d·703b·207b·2021·2072·706d··mp;&·{·!·rpm | ||
| 0003b630:· | 0003b630:·202d·2d71·7569·6574·202d·7120·6f70·656e···--quiet·-q·open | ||
| 0003b640:· | 0003b640:·7368·6966·742d·6b75·6265·6c65·7420·3b7d··shift-kubelet·;} | ||
| 0003b650:· | 0003b650:·2029·3b20·7468·656e·0a0a·2320·4669·6e64···);·then..#·Find | ||
| 0003b660:· | 0003b660:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | ||
| 0003b670:·6 | 0003b670:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | ||
| 0003b680:· | 0003b680:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | ||
| 0003b690:· | 0003b690:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | ||
| 0003b6a0:· | 0003b6a0:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | ||
| 0003b6b0:· | 0003b6b0:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | ||
| 0003b6c0:· | 0003b6c0:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | ||
| 0003b6d0:· | 0003b6d0:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | ||
| 0003b6e0:· | 0003b6e0:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | ||
| 0003b6f0:· | 0003b6f0:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | ||
| 0003b700:· | 0003b700:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | ||
| 0003b710:· | 0003b710:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | ||
| 0003b720:· | 0003b720:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | ||
| 0003b730:·5 | 0003b730:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | ||
| 0003b740:· | 0003b740:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b750:·2 | 0003b750:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | ||
| 0003b760:· | 0003b760:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | ||
| 0003b770:·2 | 0003b770:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | ||
| 0003b780:· | 0003b780:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | ||
| 0003b790:· | 0003b790:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | ||
| 0003b7a0:· | 0003b7a0:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | ||
| 0003b7b0:· | 0003b7b0:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | ||
| 0003b7c0:· | 0003b7c0:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | ||
| 0003b7d0:· | 0003b7d0:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | ||
| 0003b7e0:· | 0003b7e0:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | ||
| 0003b7f0:· | 0003b7f0:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | ||
| 0003b800:· | 0003b800:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | ||
| 0003b810:· | 0003b810:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | ||
| 0003b820:· | 0003b820:·200a·2020·2020·646e·6620·7265·696e·7374···.····dnf·reinst | ||
| 0003b830:·6 | 0003b830:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | ||
| 0003b840:· | 0003b840:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | ||
| 0003b850:·20 | 0003b850:·2020·0a66·690a·0a65·6c73·650a·2020·2020····.fi..else.···· | ||
| 0003b860:· | 0003b860:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | ||
| 0003b870:·2 | 0003b870:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | ||
| 0003b880:·6 | 0003b880:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | ||
| 0003b890:·6 | 0003b890:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | ||
| 0003b8a0:·20 | 0003b8a0:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | ||
| 0003b8b0:·6 | 0003b8b0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | ||
| 0003b8c0:· | 0003b8c0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | ||
| 0003b8d0:·7 | 0003b8d0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003b8e0:·6 | 0003b8e0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 0003b8f0:·6 | 0003b8f0:·6172·6765·743d·2223·6964·6d34·3736·3322··arget="#idm4763" | ||
| 0003b900:· | 0003b900:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b910:· | 0003b910:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b920:· | 0003b920:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b930:· | 0003b930:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b940:· | 0003b940:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b950:·6 | 0003b950:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b960:·6 | 0003b960:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003b970:· | 0003b970:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003b980:·6 | 0003b980:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003b990:· | 0003b990:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003b9a0:· | 0003b9a0:·6522·2069·643d·2269·646d·3437·3633·223e··e"·id="idm4763"> | ||
| 0003b9b0:· | 0003b9b0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003b9c0:· | 0003b9c0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003b9d0:· | 0003b9d0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003b9e0:·2 | 0003b9e0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003b9f0:· | 0003b9f0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003ba00:· | 0003ba00:·7869·7479·3a3c·2f74·683e·3c74·643e·6869··xity:</th><td>hi | ||
| 0003ba10:· | 0003ba10:·6768·3c2f·7464·3e3c·2f74·723e·3c74·723e··gh</td></tr><tr> | ||
| 0003ba20:·3 | 0003ba20:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003ba30:·2 | 0003ba30:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | ||
| 0003ba40:· | 0003ba40:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003ba50:· | 0003ba50:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003ba60:· | 0003ba60:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003ba70:· | 0003ba70:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003ba80:·3 | 0003ba80:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | ||
| 0003ba90:·43 | 0003ba90:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | ||
| 0003baa0:· | 0003baa0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | ||
| 0003bab0:· | 0003bab0:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | ||
| 0003bac0:· | 0003bac0:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | ||
| 0003bad0:· | 0003bad0:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | ||
| 0003bae0:· | 0003bae0:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | ||
| 0003baf0:· | 0003baf0:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | ||
| 0003bb00:· | 0003bb00:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | ||
| 0003bb10:· | 0003bb10:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | ||
| 0003bb20:· | 0003bb20:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | ||
| 0003bb30:· | 0003bb30:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | ||
| 0003bb40:· | 0003bb40:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | ||
| 0003bb50:· | 0003bb50:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003bb60:· | 0003bb60:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | ||
| 0003bb70:· | 0003bb70:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | ||
| 0003bb80:·2 | 0003bb80:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003bb90:· | 0003bb90:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | ||
| 0003bba0:· | 0003bba0:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | ||
| 0003bbb0:· | 0003bbb0:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003bbc0:· | 0003bbc0:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | ||
| 0003bbd0:· | 0003bbd0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003bbe0:· | 0003bbe0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003bbf0:· | 0003bbf0:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | ||
| 0003bc00:· | 0003bc00:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | ||
| 0003bc10:· | 0003bc10:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | ||
| 0003bc20:· | 0003bc20:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0003bc30:· | 0003bc30:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| 0003bc40:·6 | 0003bc40:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 0003bc50:· | 0003bc50:·7472·6174·6567·790a·2020·2d20·7270·6d5f··trategy.··-·rpm_ | ||
| 0003bc60:·6 | 0003bc60:·7665·7269·6679·5f68·6173·6865·730a·0a2d··verify_hashes..- | ||
| 0003bc70:· | 0003bc70:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003bc80:· | 0003bc80:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| Max diff block lines reached; 10398698/10453650 bytes (99.47%) of diff not shown. | |||
| Offset 111, 14 lines modified | Offset 111, 33 lines modified | ||
| 111 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 111 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 121 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 122 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 123 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 124 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 125 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 126 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 127 | fi | ||
| 128 | else | ||
| 129 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 130 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·Gather·the·package·facts | 136 | -·name:·Gather·the·package·facts |
| 124 | ··package_facts: | 137 | ··package_facts: |
| Offset 285, 33 lines modified | Offset 304, 14 lines modified | ||
| 285 | ··-·PCI-DSSv4-11.5.2 | 304 | ··-·PCI-DSSv4-11.5.2 |
| 286 | ··-·high_complexity | 305 | ··-·high_complexity |
| 287 | ··-·high_severity | 306 | ··-·high_severity |
| 288 | ··-·medium_disruption | 307 | ··-·medium_disruption |
| 289 | ··-·no_reboot_needed | 308 | ··-·no_reboot_needed |
| 290 | ··-·restrict_strategy | 309 | ··-·restrict_strategy |
| 291 | ··-·rpm_verify_hashes | 310 | ··-·rpm_verify_hashes |
| 292 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 293 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 294 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 295 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 296 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 297 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 298 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 299 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 300 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 301 | fi | ||
| 302 | else | ||
| 303 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 304 | fi | ||
| 305 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 311 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 306 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 312 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 307 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 313 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 308 | run·the·following·command·to·determine·which·package·owns·it: | 314 | run·the·following·command·to·determine·which·package·owns·it: |
| 309 | $·rpm·-qf·FILENAME | 315 | $·rpm·-qf·FILENAME |
| 310 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 316 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 311 | $·sudo·rpm·--restore·PACKAGENAME | 317 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 330, 14 lines modified | Offset 330, 46 lines modified | ||
| 330 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 330 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 331 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 331 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 332 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 332 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 333 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 333 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 342 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 343 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 344 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 345 | declare·-A·SETPERMS_RPM_DICT | ||
| 346 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 347 | #·is·expected·by·the·RPM·database | ||
| 348 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 349 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 350 | do | ||
| 351 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 352 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 353 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 354 | done | ||
| 355 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 356 | #·correct·values | ||
| 357 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 358 | do | ||
| 359 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 360 | done | ||
| 361 | else | ||
| 362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 363 | fi | ||
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 342 | -·name:·Gather·the·package·facts | 369 | -·name:·Gather·the·package·facts |
| 343 | ··package_facts: | 370 | ··package_facts: |
| Offset 445, 46 lines modified | Offset 477, 14 lines modified | ||
| 445 | ··-·PCI-DSSv4-11.5.2 | 477 | ··-·PCI-DSSv4-11.5.2 |
| 446 | ··-·high_complexity | 478 | ··-·high_complexity |
| 447 | ··-·high_severity | 479 | ··-·high_severity |
| 448 | ··-·medium_disruption | 480 | ··-·medium_disruption |
| 449 | ··-·no_reboot_needed | 481 | ··-·no_reboot_needed |
| 450 | ··-·restrict_strategy | 482 | ··-·restrict_strategy |
| 451 | ··-·rpm_verify_ownership | 483 | ··-·rpm_verify_ownership |
| 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 996636/1004347 bytes (99.23%) of diff not shown. | |||
| Offset 15180, 408 lines modified | Offset 15180, 408 lines modified | ||
| 0003b4b0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b4b0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b4c0:·3d22·2369·646d·3437·3632·2220·7461·6269··="#idm4762"·tabi | 0003b4c0:·3d22·2369·646d·3437·3632·2220·7461·6269··="#idm4762"·tabi | ||
| 0003b4d0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b4d0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b4e0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b4e0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b4f0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b4f0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b500:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b500:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b510:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b510:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b520:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b520:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | ||
| 0003b530:· | 0003b530:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | ||
| 0003b540:· | 0003b540:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b550:· | 0003b550:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b560:· | 0003b560:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b570:· | 0003b570:·646d·3437·3632·223e·3c70·7265·3e3c·636f··dm4762"><pre><co | ||
| 0003b580:·6 | 0003b580:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | ||
| 0003b590:· | 0003b590:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | ||
| 0003b5a0:·6 | 0003b5a0:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | ||
| 0003b5b0:·6 | 0003b5b0:·6c61·7466·6f72·6d73·0a69·6620·2120·2820··latforms.if·!·(· | ||
| 0003b5c0:· | 0003b5c0:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | ||
| 0003b5d0:· | 0003b5d0:·206b·6572·6e65·6c20·3b7d·2026·616d·703b···kernel·;}·& | ||
| 0003b5e0:· | 0003b5e0:·2661·6d70·3b20·7b20·7270·6d20·2d2d·7175··&·{·rpm·--qu | ||
| 0003b5f0:·69 | 0003b5f0:·6965·7420·2d71·2072·706d·2d6f·7374·7265··iet·-q·rpm-ostre | ||
| 0003b600:· | 0003b600:·6520·3b7d·2026·616d·703b·2661·6d70·3b20··e·;}·&&· | ||
| 0003b610:·7 | 0003b610:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | ||
| 0003b620:· | 0003b620:·2062·6f6f·7463·203b·7d20·2661·6d70·3b26···bootc·;}·&& | ||
| 0003b630:· | 0003b630:·616d·703b·207b·2021·2072·706d·202d·2d71··amp;·{·!·rpm·--q | ||
| 0003b640:· | 0003b640:·7569·6574·202d·7120·6f70·656e·7368·6966··uiet·-q·openshif | ||
| 0003b650:· | 0003b650:·742d·6b75·6265·6c65·7420·3b7d·2029·3b20··t-kubelet·;}·);· | ||
| 0003b660:· | 0003b660:·7468·656e·0a0a·2320·4669·6e64·2077·6869··then..#·Find·whi | ||
| 0003b670:· | 0003b670:·6368·2066·696c·6573·2068·6176·6520·696e··ch·files·have·in | ||
| 0003b680:· | 0003b680:·636f·7272·6563·7420·6861·7368·2028·6e6f··correct·hash·(no | ||
| 0003b690:· | 0003b690:·7420·696e·202f·6574·632c·2062·6563·6175··t·in·/etc,·becau | ||
| 0003b6a0:· | 0003b6a0:·7365·206f·6620·7468·6520·7379·7374·656d··se·of·the·system | ||
| 0003b6b0:· | 0003b6b0:·2072·656c·6174·6564·2063·6f6e·6669·6720···related·config· | ||
| 0003b6c0:·6 | 0003b6c0:·6669·6c65·7329·2061·6e64·2074·6865·6e20··files)·and·then· | ||
| 0003b6d0:· | 0003b6d0:·6765·7420·6669·6c65·7320·6e61·6d65·730a··get·files·names. | ||
| 0003b6e0:· | 0003b6e0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | ||
| 0003b6f0:· | 0003b6f0:·7265·6374·5f68·6173·683d·2224·2872·706d··rect_hash="$(rpm | ||
| 0003b700:·2 | 0003b700:·202d·5661·202d·2d6e·6f63·6f6e·6669·6720···-Va·--noconfig· | ||
| 0003b710:· | 0003b710:·7c20·6772·6570·202d·4520·275e·2e2e·3527··|·grep·-E·'^..5' | ||
| 0003b720:·20 | 0003b720:·207c·2061·776b·2027·7b70·7269·6e74·2024···|·awk·'{print·$ | ||
| 0003b730:· | 0003b730:·4e46·7d27·2029·220a·0a69·6620·5b20·2d6e··NF}'·)"..if·[·-n | ||
| 0003b740:· | 0003b740:·2022·2466·696c·6573·5f77·6974·685f·696e···"$files_with_in | ||
| 0003b750:· | 0003b750:·636f·7272·6563·745f·6861·7368·2220·5d3b··correct_hash"·]; | ||
| 0003b760:· | 0003b760:·2074·6865·6e0a·2020·2020·2320·4672·6f6d···then.····#·From | ||
| 0003b770:· | 0003b770:·2066·696c·6573·206e·616d·6573·2067·6574···files·names·get | ||
| 0003b780:· | 0003b780:·2070·6163·6b61·6765·206e·616d·6573·2061···package·names·a | ||
| 0003b790:· | 0003b790:·6e64·2063·6861·6e67·6520·6e65·776c·696e··nd·change·newlin | ||
| 0003b7a0:· | 0003b7a0:·6520·746f·2073·7061·6365·2c20·6265·6361··e·to·space,·beca | ||
| 0003b7b0:· | 0003b7b0:·7573·6520·7270·6d20·7772·6974·6573·2065··use·rpm·writes·e | ||
| 0003b7c0:·6 | 0003b7c0:·6163·6820·7061·636b·6167·6520·746f·206e··ach·package·to·n | ||
| 0003b7d0:· | 0003b7d0:·6577·206c·696e·650a·2020·2020·7061·636b··ew·line.····pack | ||
| 0003b7e0:· | 0003b7e0:·6167·6573·5f74·6f5f·7265·696e·7374·616c··ages_to_reinstal | ||
| 0003b7f0:· | 0003b7f0:·6c3d·2224·2872·706d·202d·7166·2024·6669··l="$(rpm·-qf·$fi | ||
| 0003b800:·6 | 0003b800:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003b810:· | 0003b810:·6374·5f68·6173·6820·7c20·7472·2027·5c6e··ct_hash·|·tr·'\n | ||
| 0003b820:· | 0003b820:·2720·2720·2729·220a·0a20·2020·200a·2020··'·'·')"..····.·· | ||
| 0003b830:· | 0003b830:·2020·646e·6620·7265·696e·7374·616c·6c20····dnf·reinstall· | ||
| 0003b840:· | 0003b840:·2d79·2024·7061·636b·6167·6573·5f74·6f5f··-y·$packages_to_ | ||
| 0003b850:· | 0003b850:·7265·696e·7374·616c·6c0a·2020·2020·0a66··reinstall.····.f | ||
| 0003b860:·6 | 0003b860:·690a·0a65·6c73·650a·2020·2020·2667·743b··i..else.····> | ||
| 0003b870:·2 | 0003b870:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | ||
| 0003b880:· | 0003b880:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | ||
| 0003b890:· | 0003b890:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | ||
| 0003b8a0:·6 | 0003b8a0:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | ||
| 0003b8b0:· | 0003b8b0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 0003b8c0:· | 0003b8c0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 0003b8d0:· | 0003b8d0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 0003b8e0:·61 | 0003b8e0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 0003b8f0:· | 0003b8f0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b900:· | 0003b900:·743d·2223·6964·6d34·3736·3322·2074·6162··t="#idm4763"·tab | ||
| 0003b910:· | 0003b910:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b920:·6 | 0003b920:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b930:· | 0003b930:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b940:·74 | 0003b940:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b950:· | 0003b950:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b960:· | 0003b960:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003b970:· | 0003b970:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 0003b980:· | 0003b980:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b990:·6 | 0003b990:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b9a0:·6 | 0003b9a0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b9b0:· | 0003b9b0:·643d·2269·646d·3437·3633·223e·3c74·6162··d="idm4763"><tab | ||
| 0003b9c0:· | 0003b9c0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003b9d0:· | 0003b9d0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003b9e0:· | 0003b9e0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003b9f0:· | 0003b9f0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003ba00:· | 0003ba00:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003ba10:· | 0003ba10:·3a3c·2f74·683e·3c74·643e·6869·6768·3c2f··:</th><td>high</ | ||
| 0003ba20:· | 0003ba20:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003ba30:· | 0003ba30:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003ba40:· | 0003ba40:·3c74·643e·6d65·6469·756d·3c2f·7464·3e3c··<td>medium</td>< | ||
| 0003ba50:·2 | 0003ba50:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003ba60:· | 0003ba60:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003ba70:· | 0003ba70:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003ba80:· | 0003ba80:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003ba90:· | 0003ba90:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | ||
| 0003baa0:· | 0003baa0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003bab0:· | 0003bab0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | ||
| 0003bac0:· | 0003bac0:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | ||
| 0003bad0:· | 0003bad0:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | ||
| 0003bae0:·766 | 0003bae0:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | ||
| 0003baf0:·6d | 0003baf0:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | ||
| 0003bb00:· | 0003bb00:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003bb10:· | 0003bb10:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003bb20:· | 0003bb20:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003bb30:· | 0003bb30:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003bb40:· | 0003bb40:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003bb50:·3 | 0003bb50:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003bb60:· | 0003bb60:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003bb70:· | 0003bb70:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003bb80:· | 0003bb80:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003bb90:· | 0003bb90:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003bba0:· | 0003bba0:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003bbb0:· | 0003bbb0:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003bbc0:· | 0003bbc0:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003bbd0:· | 0003bbd0:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003bbe0:·6 | 0003bbe0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003bbf0:· | 0003bbf0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003bc00:· | 0003bc00:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003bc10:· | 0003bc10:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003bc20:· | 0003bc20:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003bc30:· | 0003bc30:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| 0003bc40:· | 0003bc40:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | ||
| 0003bc50:· | 0003bc50:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | ||
| 0003bc60:· | 0003bc60:·6567·790a·2020·2d20·7270·6d5f·7665·7269··egy.··-·rpm_veri | ||
| 0003bc70:·6 | 0003bc70:·6679·5f68·6173·6865·730a·0a2d·206e·616d··fy_hashes..-·nam | ||
| 0003bc80:· | 0003bc80:·653a·2027·5365·7420·6661·6374·3a20·5061··e:·'Set·fact:·Pa | ||
| Max diff block lines reached; 10399871/10454823 bytes (99.47%) of diff not shown. | |||
| Offset 111, 14 lines modified | Offset 111, 33 lines modified | ||
| 111 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 111 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 121 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 122 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 123 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 124 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 125 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 126 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 127 | fi | ||
| 128 | else | ||
| 129 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 130 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·Gather·the·package·facts | 136 | -·name:·Gather·the·package·facts |
| 124 | ··package_facts: | 137 | ··package_facts: |
| Offset 285, 33 lines modified | Offset 304, 14 lines modified | ||
| 285 | ··-·PCI-DSSv4-11.5.2 | 304 | ··-·PCI-DSSv4-11.5.2 |
| 286 | ··-·high_complexity | 305 | ··-·high_complexity |
| 287 | ··-·high_severity | 306 | ··-·high_severity |
| 288 | ··-·medium_disruption | 307 | ··-·medium_disruption |
| 289 | ··-·no_reboot_needed | 308 | ··-·no_reboot_needed |
| 290 | ··-·restrict_strategy | 309 | ··-·restrict_strategy |
| 291 | ··-·rpm_verify_hashes | 310 | ··-·rpm_verify_hashes |
| 292 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 293 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 294 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 295 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 296 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 297 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 298 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 299 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 300 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 301 | fi | ||
| 302 | else | ||
| 303 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 304 | fi | ||
| 305 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 311 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 306 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 312 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 307 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 313 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 308 | run·the·following·command·to·determine·which·package·owns·it: | 314 | run·the·following·command·to·determine·which·package·owns·it: |
| 309 | $·rpm·-qf·FILENAME | 315 | $·rpm·-qf·FILENAME |
| 310 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 316 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 311 | $·sudo·rpm·--restore·PACKAGENAME | 317 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 330, 14 lines modified | Offset 330, 46 lines modified | ||
| 330 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 330 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 331 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 331 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 332 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 332 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 333 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 333 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 342 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 343 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 344 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 345 | declare·-A·SETPERMS_RPM_DICT | ||
| 346 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 347 | #·is·expected·by·the·RPM·database | ||
| 348 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 349 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 350 | do | ||
| 351 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 352 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 353 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 354 | done | ||
| 355 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 356 | #·correct·values | ||
| 357 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 358 | do | ||
| 359 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 360 | done | ||
| 361 | else | ||
| 362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 363 | fi | ||
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 342 | -·name:·Gather·the·package·facts | 369 | -·name:·Gather·the·package·facts |
| 343 | ··package_facts: | 370 | ··package_facts: |
| Offset 445, 46 lines modified | Offset 477, 14 lines modified | ||
| 445 | ··-·PCI-DSSv4-11.5.2 | 477 | ··-·PCI-DSSv4-11.5.2 |
| 446 | ··-·high_complexity | 478 | ··-·high_complexity |
| 447 | ··-·high_severity | 479 | ··-·high_severity |
| 448 | ··-·medium_disruption | 480 | ··-·medium_disruption |
| 449 | ··-·no_reboot_needed | 481 | ··-·no_reboot_needed |
| 450 | ··-·restrict_strategy | 482 | ··-·restrict_strategy |
| 451 | ··-·rpm_verify_ownership | 483 | ··-·rpm_verify_ownership |
| 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 996636/1004347 bytes (99.23%) of diff not shown. | |||
| Offset 15168, 408 lines modified | Offset 15168, 408 lines modified | ||
| 0003b3f0:·2d74·6172·6765·743d·2223·6964·6d34·3736··-target="#idm476 | 0003b3f0:·2d74·6172·6765·743d·2223·6964·6d34·3736··-target="#idm476 | ||
| 0003b400:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 0003b400:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0003b410:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b410:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b420:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b420:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b430:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b430:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b440:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b440:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b450:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b450:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b460:·7469·6f6e·20 | 0003b460:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | ||
| 0003b470:·7 | 0003b470:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b480:· | 0003b480:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b490:·6 | 0003b490:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b4a0:· | 0003b4a0:·2220·6964·3d22·6964·6d34·3736·3222·3e3c··"·id="idm4762">< | ||
| 0003b4b0:·2 | 0003b4b0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 0003b4c0:· | 0003b4c0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 0003b4d0:· | 0003b4d0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | ||
| 0003b4e0:· | 0003b4e0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | ||
| 0003b4f0:·6 | 0003b4f0:·6966·2021·2028·207b·2072·706d·202d·2d71··if·!·(·{·rpm·--q | ||
| 0003b500:· | 0003b500:·7569·6574·202d·7120·6b65·726e·656c·203b··uiet·-q·kernel·; | ||
| 0003b510:· | 0003b510:·7d20·2661·6d70·3b26·616d·703b·207b·2072··}·&&·{·r | ||
| 0003b520:·7 | 0003b520:·706d·202d·2d71·7569·6574·202d·7120·7270··pm·--quiet·-q·rp | ||
| 0003b530:· | 0003b530:·6d2d·6f73·7472·6565·203b·7d20·2661·6d70··m-ostree·;}·& | ||
| 0003b540:·3 | 0003b540:·3b26·616d·703b·207b·2072·706d·202d·2d71··;&·{·rpm·--q | ||
| 0003b550:· | 0003b550:·7569·6574·202d·7120·626f·6f74·6320·3b7d··uiet·-q·bootc·;} | ||
| 0003b560:· | 0003b560:·2026·616d·703b·2661·6d70·3b20·7b20·2120···&&·{·!· | ||
| 0003b570:· | 0003b570:·7270·6d20·2d2d·7175·6965·7420·2d71·206f··rpm·--quiet·-q·o | ||
| 0003b580:·7 | 0003b580:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | ||
| 0003b590:· | 0003b590:·203b·7d20·293b·2074·6865·6e0a·0a23·2046···;}·);·then..#·F | ||
| 0003b5a0:·6 | 0003b5a0:·696e·6420·7768·6963·6820·6669·6c65·7320··ind·which·files· | ||
| 0003b5b0:· | 0003b5b0:·6861·7665·2069·6e63·6f72·7265·6374·2068··have·incorrect·h | ||
| 0003b5c0:·6 | 0003b5c0:·6173·6820·286e·6f74·2069·6e20·2f65·7463··ash·(not·in·/etc | ||
| 0003b5d0:· | 0003b5d0:·2c20·6265·6361·7573·6520·6f66·2074·6865··,·because·of·the | ||
| 0003b5e0:· | 0003b5e0:·2073·7973·7465·6d20·7265·6c61·7465·6420···system·related· | ||
| 0003b5f0:· | 0003b5f0:·636f·6e66·6967·2066·696c·6573·2920·616e··config·files)·an | ||
| 0003b600:· | 0003b600:·6420·7468·656e·2067·6574·2066·696c·6573··d·then·get·files | ||
| 0003b610:·2 | 0003b610:·206e·616d·6573·0a66·696c·6573·5f77·6974···names.files_wit | ||
| 0003b620:· | 0003b620:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b630:·3 | 0003b630:·3d22·2428·7270·6d20·2d56·6120·2d2d·6e6f··="$(rpm·-Va·--no | ||
| 0003b640:· | 0003b640:·636f·6e66·6967·207c·2067·7265·7020·2d45··config·|·grep·-E | ||
| 0003b650:·2 | 0003b650:·2027·5e2e·2e35·2720·7c20·6177·6b20·277b···'^..5'·|·awk·'{ | ||
| 0003b660:· | 0003b660:·7072·696e·7420·244e·467d·2720·2922·0a0a··print·$NF}'·)".. | ||
| 0003b670:· | 0003b670:·6966·205b·202d·6e20·2224·6669·6c65·735f··if·[·-n·"$files_ | ||
| 0003b680:· | 0003b680:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003b690:· | 0003b690:·6173·6822·205d·3b20·7468·656e·0a20·2020··ash"·];·then.··· | ||
| 0003b6a0:· | 0003b6a0:·2023·2046·726f·6d20·6669·6c65·7320·6e61···#·From·files·na | ||
| 0003b6b0:· | 0003b6b0:·6d65·7320·6765·7420·7061·636b·6167·6520··mes·get·package· | ||
| 0003b6c0:· | 0003b6c0:·6e61·6d65·7320·616e·6420·6368·616e·6765··names·and·change | ||
| 0003b6d0:·2 | 0003b6d0:·206e·6577·6c69·6e65·2074·6f20·7370·6163···newline·to·spac | ||
| 0003b6e0:· | 0003b6e0:·652c·2062·6563·6175·7365·2072·706d·2077··e,·because·rpm·w | ||
| 0003b6f0:· | 0003b6f0:·7269·7465·7320·6561·6368·2070·6163·6b61··rites·each·packa | ||
| 0003b700:·6 | 0003b700:·6765·2074·6f20·6e65·7720·6c69·6e65·0a20··ge·to·new·line.· | ||
| 0003b710:· | 0003b710:·2020·2070·6163·6b61·6765·735f·746f·5f72·····packages_to_r | ||
| 0003b720:·6 | 0003b720:·6569·6e73·7461·6c6c·3d22·2428·7270·6d20··einstall="$(rpm· | ||
| 0003b730:·2 | 0003b730:·2d71·6620·2466·696c·6573·5f77·6974·685f··-qf·$files_with_ | ||
| 0003b740:·6 | 0003b740:·696e·636f·7272·6563·745f·6861·7368·207c··incorrect_hash·| | ||
| 0003b750:· | 0003b750:·2074·7220·275c·6e27·2027·2027·2922·0a0a···tr·'\n'·'·')".. | ||
| 0003b760:· | 0003b760:·2020·2020·0a20·2020·2064·6e66·2072·6569······.····dnf·rei | ||
| 0003b770:· | 0003b770:·6e73·7461·6c6c·202d·7920·2470·6163·6b61··nstall·-y·$packa | ||
| 0003b780:·6 | 0003b780:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003b790:· | 0003b790:·0a20·2020·200a·6669·0a0a·656c·7365·0a20··.····.fi..else.· | ||
| 0003b7a0:· | 0003b7a0:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | ||
| 0003b7b0:· | 0003b7b0:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | ||
| 0003b7c0:·6 | 0003b7c0:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | ||
| 0003b7d0:· | 0003b7d0:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | ||
| 0003b7e0:·6 | 0003b7e0:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | ||
| 0003b7f0:·2 | 0003b7f0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003b800:· | 0003b800:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003b810:· | 0003b810:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0003b820:· | 0003b820:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003b830:·61 | 0003b830:·612d·7461·7267·6574·3d22·2369·646d·3437··a-target="#idm47 | ||
| 0003b840:·63 | 0003b840:·3633·2220·7461·6269·6e64·6578·3d22·3022··63"·tabindex="0" | ||
| 0003b850:· | 0003b850:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b860:· | 0003b860:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b870:· | 0003b870:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b880:· | 0003b880:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b890:·6 | 0003b890:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b8a0:·6 | 0003b8a0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003b8b0:· | 0003b8b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003b8c0:· | 0003b8c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b8d0:· | 0003b8d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b8e0:· | 0003b8e0:·6170·7365·2220·6964·3d22·6964·6d34·3736··apse"·id="idm476 | ||
| 0003b8f0:· | 0003b8f0:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | ||
| 0003b900:· | 0003b900:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003b910:· | 0003b910:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b920:· | 0003b920:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003b930:· | 0003b930:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003b940:· | 0003b940:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b950:· | 0003b950:·3e68·6967·683c·2f74·643e·3c2f·7472·3e3c··>high</td></tr>< | ||
| 0003b960:· | 0003b960:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b970:· | 0003b970:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | ||
| 0003b980:· | 0003b980:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | ||
| 0003b990:· | 0003b990:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b9a0:· | 0003b9a0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b9b0:· | 0003b9b0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003b9c0:· | 0003b9c0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | ||
| 0003b9d0:· | 0003b9d0:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | ||
| 0003b9e0:· | 0003b9e0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003b9f0:· | 0003b9f0:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | ||
| 0003ba00:· | 0003ba00:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | ||
| 0003ba10:· | 0003ba10:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | ||
| 0003ba20:· | 0003ba20:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | ||
| 0003ba30:·6 | 0003ba30:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | ||
| 0003ba40:· | 0003ba40:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003ba50:· | 0003ba50:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003ba60:· | 0003ba60:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003ba70:· | 0003ba70:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003ba80:· | 0003ba80:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003ba90:· | 0003ba90:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003baa0:· | 0003baa0:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003bab0:· | 0003bab0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003bac0:· | 0003bac0:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003bad0:· | 0003bad0:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003bae0:· | 0003bae0:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003baf0:·2 | 0003baf0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003bb00:· | 0003bb00:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003bb10:· | 0003bb10:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003bb20:· | 0003bb20:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003bb30:· | 0003bb30:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003bb40:· | 0003bb40:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003bb50:· | 0003bb50:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003bb60:· | 0003bb60:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003bb70:· | 0003bb70:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| 0003bb80:·6 | 0003bb80:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | ||
| 0003bb90:· | 0003bb90:·745f·7374·7261·7465·6779·0a20·202d·2072··t_strategy.··-·r | ||
| 0003bba0:· | 0003bba0:·706d·5f76·6572·6966·795f·6861·7368·6573··pm_verify_hashes | ||
| 0003bbb0:· | 0003bbb0:·0a0a·2d20·6e61·6d65·3a20·2753·6574·2066··..-·name:·'Set·f | ||
| 0003bbc0:· | 0003bbc0:·6163·743a·2050·6163·6b61·6765·206d·616e··act:·Package·man | ||
| Max diff block lines reached; 16150020/16204972 bytes (99.66%) of diff not shown. | |||
| Offset 15070, 218 lines modified | Offset 15070, 218 lines modified | ||
| 0003add0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003add0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003ade0:·2223·6964·6d35·3039·3722·2074·6162·696e··"#idm5097"·tabin | 0003ade0:·2223·6964·6d35·3039·3722·2074·6162·696e··"#idm5097"·tabin | ||
| 0003adf0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003adf0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ae00:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003ae00:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003ae10:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003ae10:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003ae20:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003ae20:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003ae30:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003ae30:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003ae40:·3e52·656d·6564·6961·7469·6f6e·20 | 0003ae40:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003ae50:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003ae60:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003ae | 0003ae50:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003ae60:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ae70:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ae80:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ae90:·6c61·7073·6522·2069·643d·2269·646d·3530··lapse"·id="idm50 | |||
| 0003aea0:·3937·223e·3c70·7265·3e3c·636f·6465·3e0a··97"><pre><code>. | |||
| 0003aeb0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003aec0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003aed0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003aee0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003aef0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003af00:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003a | 0003af10:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003af20:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003af30:·3039·3822·2074·6162·696e·6465·783d·2230··098"·tabindex="0 | |||
| 0003af40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003af50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003af60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003af70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003af80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003af90:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003ae90:·6964·6d35·3039·3722·3e3c·7461·626c·6520··idm5097"><table· | |||
| 0003aea0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003aeb0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003aec0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003aed0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003aee0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003aef0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003af00:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003af10:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003af20:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003af30:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003af40:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003af50:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003af60:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003af70:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003af80:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003af90:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003afa0:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003afb0:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003afc0:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003afd0:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003afe0:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003aff0:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003b000:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b010:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b020:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b030:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b040:·7267·6574·3d22·2369·646d·3530·3938·2220··rget="#idm5098"· | |||
| 0003b050:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b060:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b070:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b080:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b090:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b0a0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b0b0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003 | 0003afa0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003b0 | 0003afb0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003 | 0003afc0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003 | 0003afd0:·7365·2220·6964·3d22·6964·6d35·3039·3822··se"·id="idm5098" | ||
| 0003 | 0003afe0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003 | 0003aff0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b | 0003b000:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b | 0003b010:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b | 0003b020:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b | 0003b030:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003b | 0003b040:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b | 0003b050:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b | 0003b060:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003b070:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b | 0003b080:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b | 0003b090:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b | 0003b0a0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b | 0003b0b0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | ||
| 0003b | 0003b0c0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b1f0:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | |||
| 0003b200:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | |||
| 0003b210:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | |||
| 0003b220:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | |||
| 0003b230:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | |||
| 0003b240:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b250:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | |||
| 0003b260:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b270:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b280:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b290:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b2a0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b2b0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b2c0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b2d0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b2e0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b2f0:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b300:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b310:·6c6c·6564·0a0a·2d20·6e61·6d65·3a20·456e··lled..-·name:·En | |||
| 0003b320:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b330:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b340:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b350:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b | 0003b0d0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0003b0e0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b0f0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b100:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b110:·6620·7270·6d20·2d2d·7175·6965·7420·2d71··f·rpm·--quiet·-q | |||
| 0003b120:·206b·6572·6e65·6c20·7c7c·2072·706d·202d···kernel·||·rpm·- | |||
| 0003b130:·2d71·7569·6574·202d·7120·6b65·726e·656c··-quiet·-q·kernel | |||
| 0003b140:·2d75·656b·3b20·7468·656e·0a0a·6966·2021··-uek;·then..if·! | |||
| 0003b150:·2072·706d·202d·7120·2d2d·7175·6965·7420···rpm·-q·--quiet· | |||
| 0003b160:·2261·6964·6522·203b·2074·6865·6e0a·2020··"aide"·;·then.·· | |||
| 0003b170:·2020·646e·6620·696e·7374·616c·6c20·2d79····dnf·install·-y | |||
| 0003b180:·2022·6169·6465·220a·6669·0a0a·656c·7365···"aide".fi..else | |||
| 0003b190:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003b1a0:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003b1b0:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003b1c0:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003b1d0:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003b1e0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b1f0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| Max diff block lines reached; 32926418/32955150 bytes (99.91%) of diff not shown. | |||
| Offset 15065, 218 lines modified | Offset 15065, 218 lines modified | ||
| 0003ad80:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003ad80:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003ad90:·3d22·2369·646d·3530·3937·2220·7461·6269··="#idm5097"·tabi | 0003ad90:·3d22·2369·646d·3530·3937·2220·7461·6269··="#idm5097"·tabi | ||
| 0003ada0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ada0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003adb0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003adb0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003adc0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003adc0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003add0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003add0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ade0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ade0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003adf0:·223e·5265·6d65·6469·6174·696f·6e20· | 0003adf0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003ae00:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003ae10:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003ae | 0003ae00:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003ae10:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ae20:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ae30:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ae40:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003ae50:·3039·3722·3e3c·7072·653e·3c63·6f64·653e··097"><pre><code> | |||
| 0003ae60:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003ae70:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003ae80:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003ae90:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003aea0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003aeb0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003ae | 0003aec0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003aed0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003aee0:·3530·3938·2220·7461·6269·6e64·6578·3d22··5098"·tabindex=" | |||
| 0003aef0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003af00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003af10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003af20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003af30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003af40:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003ae40:·2269·646d·3530·3937·223e·3c74·6162·6c65··"idm5097"><table | |||
| 0003ae50:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003ae60:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003ae70:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003ae80:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003ae90:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003aea0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003aeb0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003aec0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003aed0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003aee0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003aef0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003af00:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003af10:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003af20:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003af30:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003af40:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003af50:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003af60:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003af70:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003af80:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003af90:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003afa0:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003afb0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003afc0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003afd0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003afe0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003aff0:·6172·6765·743d·2223·6964·6d35·3039·3822··arget="#idm5098" | |||
| 0003b000:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b010:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b020:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b030:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b040:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b050:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b060:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003 | 0003af50:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0003 | 0003af60:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003 | 0003af70:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003 | 0003af80:·7073·6522·2069·643d·2269·646d·3530·3938··pse"·id="idm5098 | ||
| 0003 | 0003af90:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003 | 0003afa0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003b0 | 0003afb0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003 | 0003afc0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003 | 0003afd0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003 | 0003afe0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003 | 0003aff0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b | 0003b000:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b13 | 0003b010:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b020:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b | 0003b030:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b | 0003b040:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b | 0003b050:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b | 0003b060:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | ||
| 0003b | 0003b070:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003b | 0003b080:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 0003b090:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003b0a0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003b0b0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003b0c0:·6966·2072·706d·202d·2d71·7569·6574·202d··if·rpm·--quiet·- | |||
| 0003b0d0:·7120·6b65·726e·656c·207c·7c20·7270·6d20··q·kernel·||·rpm· | |||
| 0003b0e0:·2d2d·7175·6965·7420·2d71·206b·6572·6e65··--quiet·-q·kerne | |||
| 0003b0f0:·6c2d·7565·6b3b·2074·6865·6e0a·0a69·6620··l-uek;·then..if· | |||
| 0003b100:·2120·7270·6d20·2d71·202d·2d71·7569·6574··!·rpm·-q·--quiet | |||
| 0003b110:·2022·6169·6465·2220·3b20·7468·656e·0a20···"aide"·;·then.· | |||
| 0003b120:·2020·2064·6e66·2069·6e73·7461·6c6c·202d·····dnf·install·- | |||
| 0003b130:·7920·2261·6964·6522·0a66·690a·0a65·6c73··y·"aide".fi..els | |||
| 0003b140:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0003b150:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0003b160:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0003b170:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0003b180:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0003b190:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b1a0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b1b0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b1b0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b1c0:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b1d0:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b1e0:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b1f0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b200:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003b210:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b220:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b230:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b240:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b250:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b260:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b270:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b280:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b290:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b2a0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b2b0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b2c0:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003b2d0:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b2e0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b2f0:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b300:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| Max diff block lines reached; 32841251/32869983 bytes (99.91%) of diff not shown. | |||
| Offset 15059, 221 lines modified | Offset 15059, 221 lines modified | ||
| 0003ad20:·6765·743d·2223·6964·6d35·3635·3122·2074··get="#idm5651"·t | 0003ad20:·6765·743d·2223·6964·6d35·3635·3122·2074··get="#idm5651"·t | ||
| 0003ad30:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ad30:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ad40:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ad40:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ad50:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ad50:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003ad60:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003ad60:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003ad70:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003ad70:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003ad80:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003ad80:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003ad90:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003ada0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003adb0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003adc0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003add0:·6964·3d22·6964·6d35·3635·3122·3e3c·7461··id="idm5651"><ta | |||
| 0003ade0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003adf0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003ae00:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003ae10:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003ae20:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003ae30:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003ae40:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ae50:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003ae60:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ae70:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003ae80:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003ae90:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003aea0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003aeb0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003aec0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003aed0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003aee0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003aef0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003af00:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003af10:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003af20:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003af30:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003af40:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003af50:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003af60:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003af70:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003af80:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | |||
| 0003af90:·3532·2220·7461·6269·6e64·6578·3d22·3022··52"·tabindex="0" | |||
| 0003afa0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003afb0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003afc0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003afd0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003afe0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003aff0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b000:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b010:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b020:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b030:·6170·7365·2220·6964·3d22·6964·6d35·3635··apse"·id="idm565 | |||
| 0003b040:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003b050:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b060:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b070:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b080:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b090:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b0a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b0b0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b0c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b0d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b0e0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b0f0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b100:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b110:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b120:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b130:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b140:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b150:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b160:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b170:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b180:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b190:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b1a0:·412d·5354·4947·2d4f·4c30·372d·3030·2d30··A-STIG-OL07-00-0 | |||
| 0003b1b0:·3230·3032·390a·2020·2d20·4e49·5354·2d38··20029.··-·NIST-8 | |||
| 0003b1c0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b1d0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b1e0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b1f0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b200:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b210:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b220:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b230:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b240:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b250:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b260:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b270:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003b280:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b290:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b2a0:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b2b0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b2c0:·7365·6e74·0a20·2077·6865·6e3a·2028·226b··sent.··when:·("k | |||
| 0003b2d0:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | |||
| 0003b2e0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003b2f0:·206f·7220·226b·6572·6e65·6c2d·7565·6b22···or·"kernel-uek" | |||
| 0003b300:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003b310:·732e·7061·636b·6167·6573·290a·2020·7461··s.packages).··ta | |||
| 0003b320:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b330:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b340:·5449·472d·4f4c·3037·2d30·302d·3032·3030··TIG-OL07-00-0200 | |||
| 0003b350:·3239·0a20·202d·204e·4953·542d·3830·302d··29.··-·NIST-800- | |||
| 0003b360:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b370:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b380:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b390:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b3a0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b3b0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b3c0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b3d0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b3e0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b3f0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b400:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b410:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b420:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b430:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b440:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b450:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b460:·6765·743d·2223·6964·6d35·3635·3322·2074··get="#idm5653"·t | |||
| 0003b470:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b480:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b490:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b4a0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b4b0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b4c0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003 | 0003ad90:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003 | 0003ada0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | ||
| 0003 | 0003adb0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003 | 0003adc0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| Max diff block lines reached; 21379435/21408581 bytes (99.86%) of diff not shown. | |||
| Offset 15065, 221 lines modified | Offset 15065, 221 lines modified | ||
| 0003ad80:·7461·7267·6574·3d22·2369·646d·3536·3531··target="#idm5651 | 0003ad80:·7461·7267·6574·3d22·2369·646d·3536·3531··target="#idm5651 | ||
| 0003ad90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003ad90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ada0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ada0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003adb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003adb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003adc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003adc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003add0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003add0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ade0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ade0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003adf0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003ae00:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ae10:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ae20:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ae30:·6522·2069·643d·2269·646d·3536·3531·223e··e"·id="idm5651"> | |||
| 0003ae40:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ae50:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003ae60:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ae70:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003ae80:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003ae90:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003aea0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003aeb0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003aec0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003aed0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003aee0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003aef0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003af00:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003af10:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003af20:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003af30:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003af40:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003af50:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003af60:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003af70:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003af80:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003af90:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003afa0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003afb0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003afc0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003afd0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003afe0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003aff0:·6d35·3635·3222·2074·6162·696e·6465·783d··m5652"·tabindex= | |||
| 0003b000:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b010:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b020:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b030:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b040:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b050:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b060:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b070:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b080:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b090:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b0a0:·3536·3532·223e·3c74·6162·6c65·2063·6c61··5652"><table·cla | |||
| 0003b0b0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b0c0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b0d0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b0e0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b0f0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b100:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b110:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b120:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b130:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b140:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b150:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b160:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b170:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b180:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b190:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b1a0:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003b1b0:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003b1c0:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003b1d0:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003b1e0:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | |||
| 0003b1f0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b200:·4449·5341·2d53·5449·472d·4f4c·3037·2d30··DISA-STIG-OL07-0 | |||
| 0003b210:·302d·3032·3030·3239·0a20·202d·204e·4953··0-020029.··-·NIS | |||
| 0003b220:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b230:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b240:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b250:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b260:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b270:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b280:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b290:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b2a0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b2b0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b2c0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b2d0:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003b2e0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b2f0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b300:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b310:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b320:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b330:·2822·6b65·726e·656c·2220·696e·2061·6e73··("kernel"·in·ans | |||
| 0003b340:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003b350:·6765·7320·6f72·2022·6b65·726e·656c·2d75··ges·or·"kernel-u | |||
| 0003b360:·656b·2220·696e·2061·6e73·6962·6c65·5f66··ek"·in·ansible_f | |||
| 0003b370:·6163·7473·2e70·6163·6b61·6765·7329·0a20··acts.packages).· | |||
| 0003b380:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b390:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b3a0:·412d·5354·4947·2d4f·4c30·372d·3030·2d30··A-STIG-OL07-00-0 | |||
| 0003b3b0:·3230·3032·390a·2020·2d20·4e49·5354·2d38··20029.··-·NIST-8 | |||
| 0003b3c0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b3d0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b3e0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b3f0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b400:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b410:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b420:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b430:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b440:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b450:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b460:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b470:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b480:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b490:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b4a0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b4b0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b4c0:·7461·7267·6574·3d22·2369·646d·3536·3533··target="#idm5653 | |||
| 0003b4d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b4e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b4f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b500:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b510:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b520:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003 | 0003adf0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 0003 | 0003ae00:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | ||
| 0003 | 0003ae10:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003 | 0003ae20:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| Max diff block lines reached; 21717225/21746371 bytes (99.87%) of diff not shown. | |||
| Offset 15050, 221 lines modified | Offset 15050, 221 lines modified | ||
| 0003ac90:·7267·6574·3d22·2369·646d·3536·3531·2220··rget="#idm5651"· | 0003ac90:·7267·6574·3d22·2369·646d·3536·3531·2220··rget="#idm5651"· | ||
| 0003aca0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003aca0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003acb0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003acb0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003acc0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003acc0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003acd0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003acd0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003ace0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003ace0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003acf0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003acf0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003ad00:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003ad10:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ad20:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003ad30:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003ad40:·2069·643d·2269·646d·3536·3531·223e·3c74···id="idm5651"><t | |||
| 0003ad50:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003ad60:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003ad70:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ad80:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003ad90:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003ada0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003adb0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003adc0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003add0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ade0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003adf0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003ae00:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ae10:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003ae20:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003ae30:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003ae40:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003ae50:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003ae60:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 0003ae70:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003ae80:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003ae90:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003aea0:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003aeb0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003aec0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003aed0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003aee0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003aef0:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003af00:·3635·3222·2074·6162·696e·6465·783d·2230··652"·tabindex="0 | |||
| 0003af10:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003af20:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003af30:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003af40:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003af50:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003af60:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003af70:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003af80:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003af90:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003afa0:·6c61·7073·6522·2069·643d·2269·646d·3536··lapse"·id="idm56 | |||
| 0003afb0:·3532·223e·3c74·6162·6c65·2063·6c61·7373··52"><table·class | |||
| 0003afc0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003afd0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003afe0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003aff0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b000:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b010:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b020:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b030:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b040:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b050:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b060:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b070:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b080:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b090:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b0a0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b0b0:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | |||
| 0003b0c0:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | |||
| 0003b0d0:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | |||
| 0003b0e0:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | |||
| 0003b0f0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003b100:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b110:·5341·2d53·5449·472d·4f4c·3037·2d30·302d··SA-STIG-OL07-00- | |||
| 0003b120:·3032·3030·3239·0a20·202d·204e·4953·542d··020029.··-·NIST- | |||
| 0003b130:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b140:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b150:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b160:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b170:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b180:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b190:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b1a0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b1b0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b1c0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b1d0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b1e0:·7461·6c6c·6564·0a0a·2d20·6e61·6d65·3a20··talled..-·name:· | |||
| 0003b1f0:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003b200:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003b210:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003b220:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003b230:·6573·656e·740a·2020·7768·656e·3a20·2822··esent.··when:·(" | |||
| 0003b240:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003b250:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003b260:·7320·6f72·2022·6b65·726e·656c·2d75·656b··s·or·"kernel-uek | |||
| 0003b270:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003b280:·7473·2e70·6163·6b61·6765·7329·0a20·2074··ts.packages).··t | |||
| 0003b290:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b2a0:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b2b0:·5354·4947·2d4f·4c30·372d·3030·2d30·3230··STIG-OL07-00-020 | |||
| 0003b2c0:·3032·390a·2020·2d20·4e49·5354·2d38·3030··029.··-·NIST-800 | |||
| 0003b2d0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b2e0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b2f0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b300:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b310:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b320:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b330:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b340:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b350:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b360:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b370:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b380:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003b390:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b3a0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b3b0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b3c0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b3d0:·7267·6574·3d22·2369·646d·3536·3533·2220··rget="#idm5653"· | |||
| 0003b3e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b3f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b400:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b410:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b420:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b430:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003 | 0003ad00:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 0003 | 0003ad10:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | ||
| 0003 | 0003ad20:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003 | 0003ad30:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| Max diff block lines reached; 9636295/9665441 bytes (99.70%) of diff not shown. | |||
| Offset 114, 26 lines modified | Offset 114, 34 lines modified | ||
| 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r958944_rule | 120 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r958944_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | incl | 130 | #·Remediation·is·applicable·only·in·certain·platforms |
| 131 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 127 | class·install_aide·{ | ||
| 128 | ··package·{·'aide': | ||
| 129 | ····ensure·=>·'installed', | ||
| 130 | ··} | ||
| 131 | 132 | if·!·rpm·-q·--quiet·"aide"·;·then | |
| 133 | ····yum·install·-y·"aide" | ||
| 134 | fi | ||
| 135 | else | ||
| 136 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 137 | fi | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Gather·the·package·facts | 143 | -·name:·Gather·the·package·facts |
| 138 | ··package_facts: | 144 | ··package_facts: |
| Offset 164, 41 lines modified | Offset 172, 33 lines modified | ||
| 164 | ··-·PCI-DSSv4-11.5.2 | 172 | ··-·PCI-DSSv4-11.5.2 |
| 165 | ··-·enable_strategy | 173 | ··-·enable_strategy |
| 166 | ··-·low_complexity | 174 | ··-·low_complexity |
| 167 | ··-·low_disruption | 175 | ··-·low_disruption |
| 168 | ··-·medium_severity | 176 | ··-·medium_severity |
| 169 | ··-·no_reboot_needed | 177 | ··-·no_reboot_needed |
| 170 | ··-·package_aide_installed | 178 | ··-·package_aide_installed |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | [[packages]] | ||
| 173 | name·=·"aide" | ||
| 174 | version·=·"*" | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 180 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 181 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 182 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 183 | ····yum·install·-y·"aide" | ||
| 184 | fi | ||
| 184 | package·--add=aide | ||
| 185 | else | ||
| 186 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 187 | fi | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 190 | include·install_aide | ||
| 193 | 191 | class·install_aide·{ | |
| 192 | ··package·{·'aide': | ||
| 193 | ····ensure·=>·'installed', | ||
| 194 | ··} | ||
| 195 | } | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | Run·the·following·command·to·generate·a·new·database: | 197 | Run·the·following·command·to·generate·a·new·database: |
| 196 | $·sudo·/usr/sbin/aide·--init | 198 | $·sudo·/usr/sbin/aide·--init |
| 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 199 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 198 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 200 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 199 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 201 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 200 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 202 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 224, 14 lines modified | Offset 224, 28 lines modified | ||
| 224 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 224 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 225 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 225 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 226 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 226 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 227 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 227 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 228 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 228 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 229 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 229 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 230 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r958944_rule | 230 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r958944_rule |
| 231 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 232 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 233 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 234 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 235 | ····yum·install·-y·"aide" | ||
| 236 | fi | ||
| 237 | /usr/sbin/aide·--init | ||
| 238 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 239 | else | ||
| 240 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 241 | fi | ||
| 231 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 242 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 232 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 243 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 233 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 244 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 234 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 245 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 235 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 246 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 236 | -·name:·Gather·the·package·facts | 247 | -·name:·Gather·the·package·facts |
| 237 | ··package_facts: | 248 | ··package_facts: |
| Offset 321, 28 lines modified | Offset 335, 14 lines modified | ||
| 321 | ··-·PCI-DSSv4-11.5.2 | 335 | ··-·PCI-DSSv4-11.5.2 |
| 322 | ··-·aide_build_database | 336 | ··-·aide_build_database |
| 323 | ··-·low_complexity | 337 | ··-·low_complexity |
| 324 | ··-·low_disruption | 338 | ··-·low_disruption |
| 325 | ··-·medium_severity | 339 | ··-·medium_severity |
| 326 | ··-·no_reboot_needed | 340 | ··-·no_reboot_needed |
| 327 | ··-·restrict_strategy | 341 | ··-·restrict_strategy |
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 329 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 330 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| Max diff block lines reached; 1033729/1039148 bytes (99.48%) of diff not shown. | |||
| Offset 14918, 205 lines modified | Offset 14918, 205 lines modified | ||
| 0003a450:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003a450:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003a460:·3d22·2369·646d·3130·3332·3622·2074·6162··="#idm10326"·tab | 0003a460:·3d22·2369·646d·3130·3332·3622·2074·6162··="#idm10326"·tab | ||
| 0003a470:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003a470:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003a480:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003a480:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003a490:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003a490:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003a4a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003a4a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003a4b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003a4b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003a4c0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003a4c0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | ||
| 0003a4d0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003a4e0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003a4f0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003a500:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003a510:·643d·2269·646d·3130·3332·3622·3e3c·7461··d="idm10326"><ta | |||
| 0003a520:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003a530:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003a540:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003a550:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003a560:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003a | 0003a4d0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | ||
| 0003a4e0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003a4f0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003a500:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003a510:·6964·6d31·3033·3236·223e·3c70·7265·3e3c··idm10326"><pre>< | |||
| 0003a520:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | |||
| 0003a530:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 0003a540:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 0003a550:·2070·6c61·7466·6f72·6d73·0a69·6620·7270···platforms.if·rp | |||
| 0003a560:·6d20·2d2d·7175·6965·7420·2d71·2079·756d··m·--quiet·-q·yum | |||
| 0003a570:·3b20·7468·656e·0a0a·2320·5374·7269·7020··;·then..#·Strip· | |||
| 0003a580:·616e·7920·7365·6172·6368·2063·6861·7261··any·search·chara | |||
| 0003a590:·6374·6572·7320·696e·2074·6865·206b·6579··cters·in·the·key | |||
| 0003a5a0:·2061·7267·2073·6f20·7468·6174·2074·6865···arg·so·that·the | |||
| 0003a5b0:·206b·6579·2063·616e·2062·6520·7265·706c···key·can·be·repl | |||
| 0003a5c0:·6163·6564·2077·6974·686f·7574·0a23·2061··aced·without.#·a | |||
| 0003a5d0:·6464·696e·6720·616e·7920·7365·6172·6368··dding·any·search | |||
| 0003a5e0:·2063·6861·7261·6374·6572·7320·746f·2074···characters·to·t | |||
| 0003a5f0:·6865·2063·6f6e·6669·6720·6669·6c65·2e0a··he·config·file.. | |||
| 0003a600:·7374·7269·7070·6564·5f6b·6579·3d24·2873··stripped_key=$(s | |||
| 0003a610:·6564·2027·732f·5b5c·5e3d·5c24·2c3b·2b5d··ed·'s/[\^=\$,;+] | |||
| 0003a620:·2a2f·2f67·2720·266c·743b·266c·743b·266c··*//g'·<<&l | |||
| 0003a630:·743b·2022·5e67·7067·6368·6563·6b22·290a··t;·"^gpgcheck"). | |||
| 0003a640:·0a23·2073·6865·6c6c·6368·6563·6b20·6469··.#·shellcheck·di | |||
| 0003a650:·7361·626c·653d·5343·3230·3539·0a70·7269··sable=SC2059.pri | |||
| 0003a660:·6e74·6620·2d76·2066·6f72·6d61·7474·6564··ntf·-v·formatted | |||
| 0003a670:·5f6f·7574·7075·7420·2225·7320·3d20·2573··_output·"%s·=·%s | |||
| 0003a680:·2220·2224·7374·7269·7070·6564·5f6b·6579··"·"$stripped_key | |||
| 0003a690:·2220·2231·220a·0a23·2049·6620·7468·6520··"·"1"..#·If·the· | |||
| 0003a6a0:·6b65·7920·6578·6973·7473·2c20·6368·616e··key·exists,·chan | |||
| 0003a6b0:·6765·2069·742e·204f·7468·6572·7769·7365··ge·it.·Otherwise | |||
| 0003a6c0:·2c20·6164·6420·6974·2074·6f20·7468·6520··,·add·it·to·the· | |||
| 0003a6d0:·636f·6e66·6967·5f66·696c·652e·0a23·2057··config_file..#·W | |||
| 0003a6e0:·6520·7365·6172·6368·2066·6f72·2074·6865··e·search·for·the | |||
| 0003a6f0:·206b·6579·2073·7472·696e·6720·666f·6c6c···key·string·foll | |||
| 0003a700:·6f77·6564·2062·7920·6120·776f·7264·2062··owed·by·a·word·b | |||
| 0003a710:·6f75·6e64·6172·7920·286d·6174·6368·6564··oundary·(matched | |||
| 0003a720:·2062·7920·5c26·6774·3b29·2c0a·2320·736f···by·\>),.#·so | |||
| 0003a730:·2069·6620·7765·2073·6561·7263·6820·666f···if·we·search·fo | |||
| 0003a740:·7220·2773·6574·7469·6e67·272c·2027·7365··r·'setting',·'se | |||
| 0003a750:·7474·696e·6732·2720·776f·6e27·7420·6d61··tting2'·won't·ma | |||
| 0003a760:·7463·682e·0a69·6620·4c43·5f41·4c4c·3d43··tch..if·LC_ALL=C | |||
| 0003a770:·2067·7265·7020·2d71·202d·6d20·3120·2d69···grep·-q·-m·1·-i | |||
| 0003a780:·202d·6520·225e·6770·6763·6865·636b·5c5c···-e·"^gpgcheck\\ | |||
| 0003a790:·2667·743b·2220·222f·6574·632f·7975·6d2e··>"·"/etc/yum. | |||
| 0003a7a0:·636f·6e66·223b·2074·6865·6e0a·2020·2020··conf";·then.···· | |||
| 0003a7b0:·6573·6361·7065·645f·666f·726d·6174·7465··escaped_formatte | |||
| 0003a7c0:·645f·6f75·7470·7574·3d24·2873·6564·202d··d_output=$(sed·- | |||
| 0003a7d0:·6520·2773·7c2f·7c5c·5c2f·7c67·2720·266c··e·'s|/|\\/|g'·&l | |||
| 0003a7e0:·743b·266c·743b·266c·743b·2022·2466·6f72··t;<<·"$for | |||
| 0003a7f0:·6d61·7474·6564·5f6f·7574·7075·7422·290a··matted_output"). | |||
| 0003a800:·2020·2020·4c43·5f41·4c4c·3d43·2073·6564······LC_ALL=C·sed | |||
| 0003a810:·202d·6920·2d2d·666f·6c6c·6f77·2d73·796d···-i·--follow-sym | |||
| 0003a820:·6c69·6e6b·7320·2273·2f5e·6770·6763·6865··links·"s/^gpgche | |||
| 0003a830:·636b·5c5c·2667·743b·2e2a·2f24·6573·6361··ck\\>.*/$esca | |||
| 0003a840:·7065·645f·666f·726d·6174·7465·645f·6f75··ped_formatted_ou | |||
| 0003a850:·7470·7574·2f67·6922·2022·2f65·7463·2f79··tput/gi"·"/etc/y | |||
| 0003a860:·756d·2e63·6f6e·6622·0a65·6c73·650a·2020··um.conf".else.·· | |||
| 0003a870:·2020·6966·205b·5b20·2d73·2022·2f65·7463····if·[[·-s·"/etc | |||
| 0003a880:·2f79·756d·2e63·6f6e·6622·205d·5d20·2661··/yum.conf"·]]·&a | |||
| 0003a890:·6d70·3b26·616d·703b·205b·5b20·2d6e·2022··mp;&·[[·-n·" | |||
| 0003a8a0:·2428·7461·696c·202d·6320·3120·2d2d·2022··$(tail·-c·1·--·" | |||
| 0003a8b0:·2f65·7463·2f79·756d·2e63·6f6e·6622·207c··/etc/yum.conf"·| | |||
| 0003a8c0:·7c20·7472·7565·2922·205d·5d3b·2074·6865··|·true)"·]];·the | |||
| 0003a8d0:·6e0a·2020·2020·2020·2020·4c43·5f41·4c4c··n.········LC_ALL | |||
| 0003a8e0:·3d43·2073·6564·202d·6920·2d2d·666f·6c6c··=C·sed·-i·--foll | |||
| 0003a8f0:·6f77·2d73·796d·6c69·6e6b·7320·2724·6127··ow-symlinks·'$a' | |||
| 0003a900:·5c5c·2022·2f65·7463·2f79·756d·2e63·6f6e··\\·"/etc/yum.con | |||
| 0003a910:·6622·0a20·2020·2066·690a·2020·2020·7072··f".····fi.····pr | |||
| 0003a920:·696e·7466·2027·2573·5c6e·2720·2224·666f··intf·'%s\n'·"$fo | |||
| 0003a930:·726d·6174·7465·645f·6f75·7470·7574·2220··rmatted_output"· | |||
| 0003a940:·2667·743b·2667·743b·2022·2f65·7463·2f79··>>·"/etc/y | |||
| 0003a950:·756d·2e63·6f6e·6622·0a66·690a·0a65·6c73··um.conf".fi..els | |||
| 0003a960:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0003a970:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0003a980:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0003a990:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0003a9a0:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0003a9b0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003a9c0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003a9d0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003a9e0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003a9f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003aa00:·6d31·3033·3237·2220·7461·6269·6e64·6578··m10327"·tabindex | |||
| 0003aa10:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003aa20:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003aa30:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003aa40:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003aa50:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003aa60:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003aa70:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003aa80:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003aa90:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003aaa0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003aab0:·6d31·3033·3237·223e·3c74·6162·6c65·2063··m10327"><table·c | |||
| 0003aac0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003aad0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003aae0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003aaf0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003ab00:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003ab10:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ab20:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003ab30:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0003ab40:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | |||
| 0003ab50:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ab60:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003a | 0003ab70:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003ab80:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ab90:·636f·6e66·6967·7572·653c·2f74·643e·3c2f··configure</td></ | |||
| Max diff block lines reached; 3488116/3515054 bytes (99.23%) of diff not shown. | |||
| Offset 111, 14 lines modified | Offset 111, 42 lines modified | ||
| 111 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 111 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 |
| 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 | 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 |
| 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020050 | 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020050 |
| 115 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 | 115 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221710r1015187_rule | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221710r1015187_rule |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·rpm·--quiet·-q·yum;·then | ||
| 121 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 122 | #·adding·any·search·characters·to·the·config·file. | ||
| 123 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^gpgcheck") | ||
| 124 | #·shellcheck·disable=SC2059 | ||
| 125 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| 126 | #·If·the·key·exists,·change·it.·Otherwise,·add·it·to·the·config_file. | ||
| 127 | #·We·search·for·the·key·string·followed·by·a·word·boundary·(matched·by·\>), | ||
| 128 | #·so·if·we·search·for·'setting',·'setting2'·won't·match. | ||
| 129 | if·LC_ALL=C·grep·-q·-m·1·-i·-e·"^gpgcheck\\>"·"/etc/yum.conf";·then | ||
| 130 | ····escaped_formatted_output=$(sed·-e·'s|/|\\/|g'·<<<·"$formatted_output") | ||
| 131 | ····LC_ALL=C·sed·-i·--follow-symlinks·"s/^gpgcheck\\>.*/$escaped_formatted_output/gi"·"/etc/ | ||
| 132 | yum.conf" | ||
| 133 | else | ||
| 134 | ····if·[[·-s·"/etc/yum.conf"·]]·&&·[[·-n·"$(tail·-c·1·--·"/etc/yum.conf"·||·true)"·]];·then | ||
| 135 | ········LC_ALL=C·sed·-i·--follow-symlinks·'$a'\\·"/etc/yum.conf" | ||
| 136 | ····fi | ||
| 137 | ····printf·'%s\n'·"$formatted_output"·>>·"/etc/yum.conf" | ||
| 138 | fi | ||
| 139 | else | ||
| 140 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 141 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 123 | -·name:·Gather·the·package·facts | 147 | -·name:·Gather·the·package·facts |
| 124 | ··package_facts: | 148 | ··package_facts: |
| Offset 173, 42 lines modified | Offset 201, 14 lines modified | ||
| 173 | ··-·PCI-DSSv4-6.3.3 | 201 | ··-·PCI-DSSv4-6.3.3 |
| 174 | ··-·configure_strategy | 202 | ··-·configure_strategy |
| 175 | ··-·ensure_gpgcheck_globally_activated | 203 | ··-·ensure_gpgcheck_globally_activated |
| 176 | ··-·high_severity | 204 | ··-·high_severity |
| 177 | ··-·low_complexity | 205 | ··-·low_complexity |
| 178 | ··-·medium_disruption | 206 | ··-·medium_disruption |
| 179 | ··-·no_reboot_needed | 207 | ··-·no_reboot_needed |
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 182 | if·rpm·--quiet·-q·yum;·then | ||
| 183 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 184 | #·adding·any·search·characters·to·the·config·file. | ||
| 185 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^gpgcheck") | ||
| 186 | #·shellcheck·disable=SC2059 | ||
| 187 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| 188 | #·If·the·key·exists,·change·it.·Otherwise,·add·it·to·the·config_file. | ||
| 189 | #·We·search·for·the·key·string·followed·by·a·word·boundary·(matched·by·\>), | ||
| 190 | #·so·if·we·search·for·'setting',·'setting2'·won't·match. | ||
| 191 | if·LC_ALL=C·grep·-q·-m·1·-i·-e·"^gpgcheck\\>"·"/etc/yum.conf";·then | ||
| 192 | ····escaped_formatted_output=$(sed·-e·'s|/|\\/|g'·<<<·"$formatted_output") | ||
| 193 | ····LC_ALL=C·sed·-i·--follow-symlinks·"s/^gpgcheck\\>.*/$escaped_formatted_output/gi"·"/etc/ | ||
| 194 | yum.conf" | ||
| 195 | else | ||
| 196 | ····if·[[·-s·"/etc/yum.conf"·]]·&&·[[·-n·"$(tail·-c·1·--·"/etc/yum.conf"·||·true)"·]];·then | ||
| 197 | ········LC_ALL=C·sed·-i·--follow-symlinks·'$a'\\·"/etc/yum.conf" | ||
| 198 | ····fi | ||
| 199 | ····printf·'%s\n'·"$formatted_output"·>>·"/etc/yum.conf" | ||
| 200 | fi | ||
| 201 | else | ||
| 202 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 203 | fi | ||
| 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·f\x8fo\x8or\x8r·L\x8Lo\x8oc\x8ca\x8al\x8l·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·f\x8fo\x8or\x8r·L\x8Lo\x8oc\x8ca\x8al\x8l·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 205 | yum·should·be·configured·to·verify·the·signature(s)·of·local·packages·prior·to·installation. | 209 | yum·should·be·configured·to·verify·the·signature(s)·of·local·packages·prior·to·installation. |
| 206 | To·configure·yum·to·verify·signatures·of·local·packages,·set·the·localpkg_gpgcheck·to·1·in·/ | 210 | To·configure·yum·to·verify·signatures·of·local·packages,·set·the·localpkg_gpgcheck·to·1·in·/ |
| 207 | etc/yum.conf. | 211 | etc/yum.conf. |
| 208 | ············Changes·to·any·software·components·can·have·significant·effects·to·the·overall | 212 | ············Changes·to·any·software·components·can·have·significant·effects·to·the·overall |
| 209 | ············security·of·the·operating·system.·This·requirement·ensures·the·software·has·not | 213 | ············security·of·the·operating·system.·This·requirement·ensures·the·software·has·not |
| 210 | ············been·tampered·and·has·been·provided·by·a·trusted·vendor. | 214 | ············been·tampered·and·has·been·provided·by·a·trusted·vendor. |
| Offset 230, 14 lines modified | Offset 230, 42 lines modified | ||
| 230 | ············_\x8n_\x8i_\x8s_\x8t···········CM-11(a),·CM-11(b),·CM-6(a),·CM-5(3),·SA-12,·SA-12(10) | 230 | ············_\x8n_\x8i_\x8s_\x8t···········CM-11(a),·CM-11(b),·CM-6(a),·CM-5(3),·SA-12,·SA-12(10) |
| 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 | 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 |
| 232 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 232 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 233 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 | 233 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 |
| 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020060 | 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020060 |
| 235 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 | 235 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 |
| 236 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221711r1015188_rule | 236 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221711r1015188_rule |
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 238 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 239 | if·rpm·--quiet·-q·yum;·then | ||
| 240 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 241 | #·adding·any·search·characters·to·the·config·file. | ||
| 242 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^localpkg_gpgcheck") | ||
| 243 | #·shellcheck·disable=SC2059 | ||
| 244 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| 245 | #·If·the·key·exists,·change·it.·Otherwise,·add·it·to·the·config_file. | ||
| 246 | #·We·search·for·the·key·string·followed·by·a·word·boundary·(matched·by·\>), | ||
| 247 | #·so·if·we·search·for·'setting',·'setting2'·won't·match. | ||
| 248 | if·LC_ALL=C·grep·-q·-m·1·-i·-e·"^localpkg_gpgcheck\\>"·"/etc/yum.conf";·then | ||
| 249 | ····escaped_formatted_output=$(sed·-e·'s|/|\\/|g'·<<<·"$formatted_output") | ||
| 250 | ····LC_ALL=C·sed·-i·--follow-symlinks·"s/^localpkg_gpgcheck\\>.*/$escaped_formatted_output/ | ||
| 251 | gi"·"/etc/yum.conf" | ||
| 252 | else | ||
| 253 | ····if·[[·-s·"/etc/yum.conf"·]]·&&·[[·-n·"$(tail·-c·1·--·"/etc/yum.conf"·||·true)"·]];·then | ||
| 254 | ········LC_ALL=C·sed·-i·--follow-symlinks·'$a'\\·"/etc/yum.conf" | ||
| 255 | ····fi | ||
| 256 | ····printf·'%s\n'·"$formatted_output"·>>·"/etc/yum.conf" | ||
| 257 | fi | ||
| 258 | else | ||
| 259 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 260 | fi | ||
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 261 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 238 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 262 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 239 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 263 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 240 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 264 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 241 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | 265 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown |
| 242 | -·name:·Gather·the·package·facts | 266 | -·name:·Gather·the·package·facts |
| Max diff block lines reached; 226514/232495 bytes (97.43%) of diff not shown. | |||
| Offset 15122, 419 lines modified | Offset 15122, 419 lines modified | ||
| 0003b110:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | 0003b110:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | ||
| 0003b120:·3130·2220·7461·6269·6e64·6578·3d22·3022··10"·tabindex="0" | 0003b120:·3130·2220·7461·6269·6e64·6578·3d22·3022··10"·tabindex="0" | ||
| 0003b130:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b130:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b140:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b140:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b150:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b150:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b160:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b160:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b170:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b170:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b180:·6174·696f·6e20· | 0003b180:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | ||
| 0003b190:· | 0003b190:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 0003b1a0:· | 0003b1a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003b1b0:·6 | 0003b1b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003b1c0:·6 | 0003b1c0:·6522·2069·643d·2269·646d·3533·3130·223e··e"·id="idm5310"> | ||
| 0003b1d0:·302 | 0003b1d0:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 0003b1e0:· | 0003b1e0:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 0003b1f0:·69 | 0003b1f0:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | ||
| 0003b200:· | 0003b200:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | ||
| 0003b210:· | 0003b210:·0a69·6620·2120·2820·7b20·7270·6d20·2d2d··.if·!·(·{·rpm·-- | ||
| 0003b220:·7 | 0003b220:·7175·6965·7420·2d71·206b·6572·6e65·6c20··quiet·-q·kernel· | ||
| 0003b230:·3 | 0003b230:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003b240:·7 | 0003b240:·7270·6d20·2d2d·7175·6965·7420·2d71·2072··rpm·--quiet·-q·r | ||
| 0003b250:· | 0003b250:·706d·2d6f·7374·7265·6520·3b7d·2026·616d··pm-ostree·;}·&am | ||
| 0003b260:· | 0003b260:·703b·2661·6d70·3b20·7b20·7270·6d20·2d2d··p;&·{·rpm·-- | ||
| 0003b270:·7 | 0003b270:·7175·6965·7420·2d71·2062·6f6f·7463·203b··quiet·-q·bootc·; | ||
| 0003b280:·7 | 0003b280:·7d20·2661·6d70·3b26·616d·703b·207b·2021··}·&&·{·! | ||
| 0003b290:· | 0003b290:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b2a0:·6 | 0003b2a0:·6f70·656e·7368·6966·742d·6b75·6265·6c65··openshift-kubele | ||
| 0003b2b0:·7 | 0003b2b0:·7420·3b7d·2029·3b20·7468·656e·0a0a·2320··t·;}·);·then..#· | ||
| 0003b2c0:· | 0003b2c0:·4669·6e64·2077·6869·6368·2066·696c·6573··Find·which·files | ||
| 0003b2d0:· | 0003b2d0:·2068·6176·6520·696e·636f·7272·6563·7420···have·incorrect· | ||
| 0003b2e0:· | 0003b2e0:·6861·7368·2028·6e6f·7420·696e·202f·6574··hash·(not·in·/et | ||
| 0003b2f0:· | 0003b2f0:·632c·2062·6563·6175·7365·206f·6620·7468··c,·because·of·th | ||
| 0003b300:·73 | 0003b300:·6520·7379·7374·656d·2072·656c·6174·6564··e·system·related | ||
| 0003b310:· | 0003b310:·2063·6f6e·6669·6720·6669·6c65·7329·2061···config·files)·a | ||
| 0003b320:· | 0003b320:·6e64·2074·6865·6e20·6765·7420·6669·6c65··nd·then·get·file | ||
| 0003b330:· | 0003b330:·7320·6e61·6d65·730a·6669·6c65·735f·7769··s·names.files_wi | ||
| 0003b340:· | 0003b340:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | ||
| 0003b350:· | 0003b350:·683d·2224·2872·706d·202d·5661·202d·2d6e··h="$(rpm·-Va·--n | ||
| 0003b360:· | 0003b360:·6f63·6f6e·6669·6720·7c20·6772·6570·202d··oconfig·|·grep·- | ||
| 0003b370:· | 0003b370:·4520·275e·2e2e·3527·207c·2061·776b·2027··E·'^..5'·|·awk·' | ||
| 0003b380:· | 0003b380:·7b70·7269·6e74·2024·4e46·7d27·2029·220a··{print·$NF}'·)". | ||
| 0003b390:· | 0003b390:·0a69·6620·5b20·2d6e·2022·2466·696c·6573··.if·[·-n·"$files | ||
| 0003b3a0:· | 0003b3a0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | ||
| 0003b3b0:· | 0003b3b0:·6861·7368·2220·5d3b·2074·6865·6e0a·2020··hash"·];·then.·· | ||
| 0003b3c0:·2 | 0003b3c0:·2020·2320·4672·6f6d·2066·696c·6573·206e····#·From·files·n | ||
| 0003b3d0:· | 0003b3d0:·616d·6573·2067·6574·2070·6163·6b61·6765··ames·get·package | ||
| 0003b3e0:· | 0003b3e0:·206e·616d·6573·2061·6e64·2063·6861·6e67···names·and·chang | ||
| 0003b3f0:· | 0003b3f0:·6520·6e65·776c·696e·6520·746f·2073·7061··e·newline·to·spa | ||
| 0003b400:· | 0003b400:·6365·2c20·6265·6361·7573·6520·7270·6d20··ce,·because·rpm· | ||
| 0003b410:· | 0003b410:·7772·6974·6573·2065·6163·6820·7061·636b··writes·each·pack | ||
| 0003b420:· | 0003b420:·6167·6520·746f·206e·6577·206c·696e·650a··age·to·new·line. | ||
| 0003b430:· | 0003b430:·2020·2020·7061·636b·6167·6573·5f74·6f5f······packages_to_ | ||
| 0003b440:·7 | 0003b440:·7265·696e·7374·616c·6c3d·2224·2872·706d··reinstall="$(rpm | ||
| 0003b450:· | 0003b450:·202d·7166·2024·6669·6c65·735f·7769·7468···-qf·$files_with | ||
| 0003b460:· | 0003b460:·5f69·6e63·6f72·7265·6374·5f68·6173·6820··_incorrect_hash· | ||
| 0003b470:· | 0003b470:·7c20·7472·2027·5c6e·2720·2720·2729·220a··|·tr·'\n'·'·')". | ||
| 0003b480:· | 0003b480:·0a20·2020·200a·2020·2020·7975·6d20·7265··.····.····yum·re | ||
| 0003b490:· | 0003b490:·696e·7374·616c·6c20·2d79·2024·7061·636b··install·-y·$pack | ||
| 0003b4a0:· | 0003b4a0:·6167·6573·5f74·6f5f·7265·696e·7374·616c··ages_to_reinstal | ||
| 0003b4b0:· | 0003b4b0:·6c0a·2020·2020·0a66·690a·0a65·6c73·650a··l.····.fi..else. | ||
| 0003b4c0:· | 0003b4c0:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | ||
| 0003b4d0:· | 0003b4d0:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | ||
| 0003b4e0:· | 0003b4e0:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | ||
| 0003b4f0:· | 0003b4f0:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | ||
| 0003b500:·6 | 0003b500:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | ||
| 0003b510:· | 0003b510:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | ||
| 0003b520:·6c | 0003b520:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | ||
| 0003b530:· | 0003b530:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | ||
| 0003b540:·6 | 0003b540:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003b550:· | 0003b550:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | ||
| 0003b560:· | 0003b560:·3331·3122·2074·6162·696e·6465·783d·2230··311"·tabindex="0 | ||
| 0003b570:· | 0003b570:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b580:·61 | 0003b580:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b590:·6 | 0003b590:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b5a0:·6 | 0003b5a0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b5b0:· | 0003b5b0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b5c0:· | 0003b5c0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003b5d0:· | 0003b5d0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003b5e0:· | 0003b5e0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b5f0:·6e | 0003b5f0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b600:·6 | 0003b600:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | ||
| 0003b610:· | 0003b610:·3131·223e·3c74·6162·6c65·2063·6c61·7373··11"><table·class | ||
| 0003b620:· | 0003b620:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003b630:· | 0003b630:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b640:· | 0003b640:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003b650:· | 0003b650:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003b660:· | 0003b660:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003b670:· | 0003b670:·643e·6869·6768·3c2f·7464·3e3c·2f74·723e··d>high</td></tr> | ||
| 0003b680:· | 0003b680:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b690:· | 0003b690:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | ||
| 0003b6a0:· | 0003b6a0:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | ||
| 0003b6b0:· | 0003b6b0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b6c0:· | 0003b6c0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b6d0:· | 0003b6d0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b6e0:· | 0003b6e0:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | ||
| 0003b6f0:· | 0003b6f0:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | ||
| 0003b700:· | 0003b700:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003b710:· | 0003b710:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | ||
| 0003b720:·2 | 0003b720:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | ||
| 0003b730:· | 0003b730:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | ||
| 0003b740:· | 0003b740:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | ||
| 0003b750:·2 | 0003b750:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | ||
| 0003b760:· | 0003b760:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | ||
| 0003b770:· | 0003b770:·2020·2d20·4449·5341·2d53·5449·472d·4f4c····-·DISA-STIG-OL | ||
| 0003b780:· | 0003b780:·3037·2d30·302d·3031·3030·3230·0a20·202d··07-00-010020.··- | ||
| 0003b790:·20 | 0003b790:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003b7a0:· | 0003b7a0:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | ||
| 0003b7b0:· | 0003b7b0:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | ||
| 0003b7c0:· | 0003b7c0:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | ||
| 0003b7d0:·0a2 | 0003b7d0:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | ||
| 0003b7e0:· | 0003b7e0:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | ||
| 0003b7f0:· | 0003b7f0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003b800:·6 | 0003b800:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | ||
| 0003b810:· | 0003b810:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | ||
| 0003b820:· | 0003b820:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | ||
| 0003b830:· | 0003b830:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b840:· | 0003b840:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | ||
| 0003b850:· | 0003b850:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | ||
| 0003b860:·20 | 0003b860:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | ||
| 0003b870:· | 0003b870:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | ||
| 0003b880:·6 | 0003b880:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | ||
| 0003b890:· | 0003b890:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | ||
| 0003b8a0:· | 0003b8a0:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | ||
| 0003b8b0:·2 | 0003b8b0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | ||
| 0003b8c0:·6 | 0003b8c0:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | ||
| 0003b8d0:·7 | 0003b8d0:·7374·7261·7465·6779·0a20·202d·2072·706d··strategy.··-·rpm | ||
| 0003b8e0:· | 0003b8e0:·5f76·6572·6966·795f·6861·7368·6573·0a0a··_verify_hashes.. | ||
| Max diff block lines reached; 8837832/8894302 bytes (99.37%) of diff not shown. | |||
| Offset 98, 14 lines modified | Offset 98, 33 lines modified | ||
| 98 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 98 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 99 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 99 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 101 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 101 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 102 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 102 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule | 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule |
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 106 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 107 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 108 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 109 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 110 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 111 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 112 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 113 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 114 | fi | ||
| 115 | else | ||
| 116 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 117 | fi | ||
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 110 | -·name:·Gather·the·package·facts | 123 | -·name:·Gather·the·package·facts |
| 111 | ··package_facts: | 124 | ··package_facts: |
| Offset 278, 33 lines modified | Offset 297, 14 lines modified | ||
| 278 | ··-·PCI-DSSv4-11.5.2 | 297 | ··-·PCI-DSSv4-11.5.2 |
| 279 | ··-·high_complexity | 298 | ··-·high_complexity |
| 280 | ··-·high_severity | 299 | ··-·high_severity |
| 281 | ··-·medium_disruption | 300 | ··-·medium_disruption |
| 282 | ··-·no_reboot_needed | 301 | ··-·no_reboot_needed |
| 283 | ··-·restrict_strategy | 302 | ··-·restrict_strategy |
| 284 | ··-·rpm_verify_hashes | 303 | ··-·rpm_verify_hashes |
| 285 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 286 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 287 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 288 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 289 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 290 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 291 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 292 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 293 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 294 | fi | ||
| 295 | else | ||
| 296 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 297 | fi | ||
| 298 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 304 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 299 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 305 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 300 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 306 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 301 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 307 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 302 | $·rpm·-qf·FILENAME | 308 | $·rpm·-qf·FILENAME |
| 303 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 309 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 327, 14 lines modified | Offset 327, 50 lines modified | ||
| 327 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 327 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 328 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 328 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 329 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 329 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 330 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 330 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 331 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 331 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 332 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 332 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 333 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule | 333 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule |
| 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 335 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 336 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 337 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 338 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 339 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 340 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 341 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 342 | declare·-A·SETPERMS_RPM_DICT | ||
| 343 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 344 | #·is·expected·by·the·RPM·database | ||
| 345 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 346 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 347 | do | ||
| 348 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 349 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 350 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 351 | ········do | ||
| 352 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 353 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 354 | ········done | ||
| 355 | done | ||
| 356 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 357 | #·correct·values | ||
| 358 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 359 | do | ||
| 360 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 361 | done | ||
| 362 | else | ||
| 363 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 364 | fi | ||
| 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 335 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 336 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 337 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 338 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 339 | -·name:·Gather·the·package·facts | 370 | -·name:·Gather·the·package·facts |
| 340 | ··package_facts: | 371 | ··package_facts: |
| Offset 450, 50 lines modified | Offset 486, 14 lines modified | ||
| 450 | ··-·PCI-DSSv4-11.5.2 | 486 | ··-·PCI-DSSv4-11.5.2 |
| 451 | ··-·high_complexity | 487 | ··-·high_complexity |
| 452 | ··-·high_severity | 488 | ··-·high_severity |
| 453 | ··-·medium_disruption | 489 | ··-·medium_disruption |
| 454 | ··-·no_reboot_needed | 490 | ··-·no_reboot_needed |
| 455 | ··-·restrict_strategy | 491 | ··-·restrict_strategy |
| 456 | ··-·rpm_verify_permissions | 492 | ··-·rpm_verify_permissions |
| 457 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 861327/868897 bytes (99.13%) of diff not shown. | |||
| Offset 15071, 246 lines modified | Offset 15071, 246 lines modified | ||
| 0003ade0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ade0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003adf0:·6964·6d36·3138·3322·2074·6162·696e·6465··idm6183"·tabinde | 0003adf0:·6964·6d36·3138·3322·2074·6162·696e·6465··idm6183"·tabinde | ||
| 0003ae00:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ae00:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003ae10:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003ae10:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003ae20:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003ae20:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003ae30:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003ae30:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003ae40:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003ae40:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003ae50:·656d·6564·6961·7469·6f6e·20 | 0003ae50:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003ae60:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003ae60:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003ae70:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003ae80:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003ae90:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003aea0:·6d36·3138·3322·3e3c·7461·626c·6520·636c··m6183"><table·cl | |||
| 0003aeb0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003aec0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003aed0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003aee0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003aef0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003af00:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003af10:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003af20:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003af30:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003af40:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003af50:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003af60:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003af70:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003af80:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003af90:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003afa0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f64··nclude·install_d | |||
| 0003afb0:·7261·6375·742d·6669·7073·0a0a·636c·6173··racut-fips..clas | |||
| 0003afc0:·7320·696e·7374·616c·6c5f·6472·6163·7574··s·install_dracut | |||
| 0003afd0:·2d66·6970·7320·7b0a·2020·7061·636b·6167··-fips·{.··packag | |||
| 0003afe0:·6520·7b20·2764·7261·6375·742d·6669·7073··e·{·'dracut-fips | |||
| 0003aff0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b000:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b010:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003b020:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b030:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b040:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b050:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b060:·2d74·6172·6765·743d·2223·6964·6d36·3138··-target="#idm618 | |||
| 0003b070:·3422·2074·6162·696e·6465·783d·2230·2220··4"·tabindex="0"· | |||
| 0003b080:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b090:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b0a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b0b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b0c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b0d0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003 | 0003ae70:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003 | 0003ae80:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003 | 0003ae90:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003 | 0003aea0:·7073·6522·2069·643d·2269·646d·3631·3833··pse"·id="idm6183 | ||
| 0003 | 0003aeb0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 0003aec0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003aed0:·3d20·2264·7261·6375·742d·6669·7073·220a··=·"dracut-fips". | |||
| 0003aee0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003aef0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003af00:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003af10:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003af20:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003af30:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003af40:·2369·646d·3631·3834·2220·7461·6269·6e64··#idm6184"·tabind | |||
| 0003af50:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003af60:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003af70:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003af80:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003af90:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003afa0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003afb0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003afc0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003afd0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003afe0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003aff0:·3631·3834·223e·3c74·6162·6c65·2063·6c61··6184"><table·cla | |||
| 0003b | 0003b000:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b14 | 0003b010:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b | 0003b020:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b | 0003b030:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b | 0003b040:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b | 0003b050:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b | 0003b060:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b | 0003b070:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003b | 0003b080:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b090:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b0a0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b0b0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b0c0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b | 0003b0d0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003b0e0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 0003b0f0:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003b100:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003b110:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003b120:·726d·730a·6966·2028·2021·2028·205b·2022··rms.if·(·!·(·[·" | |||
| 0003b130:·247b·636f·6e74·6169·6e65·723a·2d7d·2220··${container:-}"· | |||
| 0003b140:·3d3d·2022·6277·7261·702d·6f73·6275·696c··==·"bwrap-osbuil | |||
| 0003b150:·6422·205d·2029·2026·616d·703b·2661·6d70··d"·]·)·&& | |||
| 0003b160:·3b20·7270·6d20·2d2d·7175·6965·7420·2d71··;·rpm·--quiet·-q | |||
| 0003b170:·206b·6572·6e65·6c20·7c7c·2072·706d·202d···kernel·||·rpm·- | |||
| 0003b180:·2d71·7569·6574·202d·7120·6b65·726e·656c··-quiet·-q·kernel | |||
| 0003b190:·2d75·656b·2029·3b20·7468·656e·0a0a·6966··-uek·);·then..if | |||
| 0003b1a0:·2021·2072·706d·202d·7120·2d2d·7175·6965···!·rpm·-q·--quie | |||
| 0003b1e0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b1f0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b200:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b210:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b220:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003b230:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003b240:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003b250:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003b260:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b270:·2e31·302e·312e·320a·2020·2d20·4e49·5354··.10.1.2.··-·NIST | |||
| 0003b280:·2d38·3030·2d31·3731·2d33·2e31·332e·3131··-800-171-3.13.11 | |||
| 0003b290:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | |||
| 0003b2a0:·312d·332e·3133·2e38·0a20·202d·204e·4953··1-3.13.8.··-·NIS | |||
| 0003b2b0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b2c0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b2d0:·2d49·412d·370a·2020·2d20·4e49·5354·2d38··-IA-7.··-·NIST-8 | |||
| 0003b2e0:·3030·2d35·332d·5343·2d31·320a·2020·2d20··00-53-SC-12.··-· | |||
| 0003b2f0:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003b300:·3228·3229·0a20·202d·204e·4953·542d·3830··2(2).··-·NIST-80 | |||
| 0003b310:·302d·3533·2d53·432d·3132·2833·290a·2020··0-53-SC-12(3).·· | |||
| 0003b320:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 0003b330:·2d31·330a·2020·2d20·656e·6162·6c65·5f73··-13.··-·enable_s | |||
| 0003b340:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b350:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b360:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b370:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| Max diff block lines reached; 6413930/6446526 bytes (99.49%) of diff not shown. | |||
| Offset 99, 26 lines modified | Offset 99, 34 lines modified | ||
| 99 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 | 99 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 |
| 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 102 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 102 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 103 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 103 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 | 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 |
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 107 | [[packages]] | ||
| 108 | name·=·"dracut-fips" | ||
| 109 | version·=·"*" | ||
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 111 | 115 | #·Remediation·is·applicable·only·in·certain·platforms | |
| 116 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·);·then | ||
| 112 | class·install_dracut-fips·{ | ||
| 113 | ··package·{·'dracut-fips': | ||
| 114 | ····ensure·=>·'installed', | ||
| 115 | ··} | ||
| 116 | 117 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | |
| 118 | ····yum·install·-y·"dracut-fips" | ||
| 119 | fi | ||
| 120 | else | ||
| 121 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 122 | fi | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 122 | -·name:·Gather·the·package·facts | 128 | -·name:·Gather·the·package·facts |
| 123 | ··package_facts: | 129 | ··package_facts: |
| Offset 158, 41 lines modified | Offset 166, 33 lines modified | ||
| 158 | ··-·NIST-800-53-SC-13 | 166 | ··-·NIST-800-53-SC-13 |
| 159 | ··-·enable_strategy | 167 | ··-·enable_strategy |
| 160 | ··-·low_complexity | 168 | ··-·low_complexity |
| 161 | ··-·low_disruption | 169 | ··-·low_disruption |
| 162 | ··-·medium_severity | 170 | ··-·medium_severity |
| 163 | ··-·no_reboot_needed | 171 | ··-·no_reboot_needed |
| 164 | ··-·package_dracut-fips_installed | 172 | ··-·package_dracut-fips_installed |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"dracut-fips" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 175 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·);·then | ||
| 176 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | ||
| 177 | ····yum·install·-y·"dracut-fips" | ||
| 178 | fi | ||
| 178 | package·--add=dracut-fips | ||
| 179 | else | ||
| 180 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 181 | fi | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 184 | include·install_dracut-fips | ||
| 187 | 185 | class·install_dracut-fips·{ | |
| 186 | ··package·{·'dracut-fips': | ||
| 187 | ····ensure·=>·'installed', | ||
| 188 | ··} | ||
| 189 | } | ||
| 188 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 189 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: | 191 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: |
| 190 | $·sudo·yum·install·dracut-fips | 192 | $·sudo·yum·install·dracut-fips |
| 191 | dracut·-f | 193 | dracut·-f |
| 192 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: | 194 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: |
| 193 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" | 195 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" |
| 194 | Finally,·rebuild·the·grub.cfg·file·by·using·the | 196 | Finally,·rebuild·the·grub.cfg·file·by·using·the |
| Offset 223, 14 lines modified | Offset 223, 80 lines modified | ||
| 223 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 223 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 224 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 224 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 225 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 225 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 226 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 226 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 | 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 |
| 228 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 | 228 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 |
| 229 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r958408_rule | 229 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r958408_rule |
| 230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 231 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 232 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·rpm·--quiet·-q·grub2-common;·};·then | ||
| 233 | #·prelink·not·installed | ||
| 234 | if·test·-e·/etc/sysconfig/prelink·-o·-e·/usr/sbin/prelink;·then | ||
| 235 | ····if·grep·-q·^PRELINKING·/etc/sysconfig/prelink | ||
| 236 | ····then | ||
| 237 | ········sed·-i·'s/^PRELINKING[:blank:]*=[:blank:]*[:alpha:]*/PRELINKING=no/'·/etc/sysconfig/prelink | ||
| 238 | ····else | ||
| 239 | ········printf·'\n'·>>·/etc/sysconfig/prelink | ||
| 240 | ········printf·'%s\n'·'#·Set·PRELINKING=no·per·security·requirements'·'PRELINKING=no'·>>·/etc/sysconfig/prelink | ||
| 241 | ····fi | ||
| 242 | ····#·Undo·previous·prelink·changes·to·binaries·if·prelink·is·available. | ||
| 243 | ····if·test·-x·/usr/sbin/prelink;·then | ||
| 244 | ········/usr/sbin/prelink·-ua | ||
| 245 | ····fi | ||
| 246 | fi | ||
| 247 | if·grep·-q·-m1·-o·aes·/proc/cpuinfo;·then | ||
| 248 | » if·!·rpm·-q·--quiet·"dracut-fips-aesni"·;·then | ||
| 249 | ····yum·install·-y·"dracut-fips-aesni" | ||
| 250 | fi | ||
| 251 | fi | ||
| 252 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | ||
| 253 | ····yum·install·-y·"dracut-fips" | ||
| 254 | fi | ||
| 255 | dracut·-f | ||
| 256 | #·Correct·the·form·of·default·kernel·command·line·in··grub | ||
| 257 | if·grep·-q·'^GRUB_CMDLINE_LINUX=.*fips=.*"'··/etc/default/grub;·then | ||
| Max diff block lines reached; 716802/724426 bytes (98.95%) of diff not shown. | |||
| Offset 15153, 419 lines modified | Offset 15153, 419 lines modified | ||
| 0003b300:·7267·6574·3d22·2369·646d·3533·3130·2220··rget="#idm5310"· | 0003b300:·7267·6574·3d22·2369·646d·3533·3130·2220··rget="#idm5310"· | ||
| 0003b310:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b310:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b320:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b320:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b330:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b330:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b340:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b340:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b350:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b350:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b360:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b360:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b370:·6e20· | 0003b370:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | ||
| 0003b380:· | 0003b380:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b390:· | 0003b390:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b3a0:·6 | 0003b3a0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b3b0:· | 0003b3b0:·643d·2269·646d·3533·3130·223e·3c70·7265··d="idm5310"><pre | ||
| 0003b3c0:· | 0003b3c0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 0003b3d0:· | 0003b3d0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 0003b3e0:· | 0003b3e0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 0003b3f0:· | 0003b3f0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 0003b400:· | 0003b400:·2120·2820·7b20·7270·6d20·2d2d·7175·6965··!·(·{·rpm·--quie | ||
| 0003b410:· | 0003b410:·7420·2d71·206b·6572·6e65·6c20·3b7d·2026··t·-q·kernel·;}·& | ||
| 0003b420:·6 | 0003b420:·616d·703b·2661·6d70·3b20·7b20·7270·6d20··amp;&·{·rpm· | ||
| 0003b430:· | 0003b430:·2d2d·7175·6965·7420·2d71·2072·706d·2d6f··--quiet·-q·rpm-o | ||
| 0003b440:·7 | 0003b440:·7374·7265·6520·3b7d·2026·616d·703b·2661··stree·;}·&&a | ||
| 0003b450:·6 | 0003b450:·6d70·3b20·7b20·7270·6d20·2d2d·7175·6965··mp;·{·rpm·--quie | ||
| 0003b460:· | 0003b460:·7420·2d71·2062·6f6f·7463·203b·7d20·2661··t·-q·bootc·;}·&a | ||
| 0003b470:·6 | 0003b470:·6d70·3b26·616d·703b·207b·2021·2072·706d··mp;&·{·!·rpm | ||
| 0003b480:· | 0003b480:·202d·2d71·7569·6574·202d·7120·6f70·656e···--quiet·-q·open | ||
| 0003b490:· | 0003b490:·7368·6966·742d·6b75·6265·6c65·7420·3b7d··shift-kubelet·;} | ||
| 0003b4a0:· | 0003b4a0:·2029·3b20·7468·656e·0a0a·2320·4669·6e64···);·then..#·Find | ||
| 0003b4b0:· | 0003b4b0:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | ||
| 0003b4c0:·6 | 0003b4c0:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | ||
| 0003b4d0:· | 0003b4d0:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | ||
| 0003b4e0:· | 0003b4e0:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | ||
| 0003b4f0:· | 0003b4f0:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | ||
| 0003b500:· | 0003b500:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | ||
| 0003b510:· | 0003b510:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | ||
| 0003b520:· | 0003b520:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | ||
| 0003b530:· | 0003b530:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | ||
| 0003b540:·2 | 0003b540:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | ||
| 0003b550:· | 0003b550:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | ||
| 0003b560:· | 0003b560:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | ||
| 0003b570:· | 0003b570:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | ||
| 0003b580:· | 0003b580:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | ||
| 0003b590:· | 0003b590:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b5a0:· | 0003b5a0:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | ||
| 0003b5b0:· | 0003b5b0:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | ||
| 0003b5c0:·2 | 0003b5c0:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | ||
| 0003b5d0:· | 0003b5d0:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | ||
| 0003b5e0:· | 0003b5e0:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | ||
| 0003b5f0:· | 0003b5f0:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | ||
| 0003b600:·657 | 0003b600:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | ||
| 0003b610:· | 0003b610:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | ||
| 0003b620:· | 0003b620:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | ||
| 0003b630:· | 0003b630:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | ||
| 0003b640:· | 0003b640:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | ||
| 0003b650:· | 0003b650:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | ||
| 0003b660:· | 0003b660:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | ||
| 0003b670:·2 | 0003b670:·200a·2020·2020·7975·6d20·7265·696e·7374···.····yum·reinst | ||
| 0003b680:·6 | 0003b680:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | ||
| 0003b690:· | 0003b690:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | ||
| 0003b6a0:· | 0003b6a0:·2020·0a66·690a·0a65·6c73·650a·2020·2020····.fi..else.···· | ||
| 0003b6b0:· | 0003b6b0:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | ||
| 0003b6c0:· | 0003b6c0:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | ||
| 0003b6d0:· | 0003b6d0:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | ||
| 0003b6e0:· | 0003b6e0:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | ||
| 0003b6f0:· | 0003b6f0:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | ||
| 0003b700:· | 0003b700:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | ||
| 0003b710:· | 0003b710:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | ||
| 0003b720:· | 0003b720:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003b730:·6 | 0003b730:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 0003b740:·6 | 0003b740:·6172·6765·743d·2223·6964·6d35·3331·3122··arget="#idm5311" | ||
| 0003b750:· | 0003b750:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b760:·6 | 0003b760:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b770:· | 0003b770:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b780:·2 | 0003b780:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b790:· | 0003b790:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b7a0:·6 | 0003b7a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b7b0:·6 | 0003b7b0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003b7c0:·65 | 0003b7c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003b7d0:· | 0003b7d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003b7e0:·6 | 0003b7e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003b7f0:·6 | 0003b7f0:·6522·2069·643d·2269·646d·3533·3131·223e··e"·id="idm5311"> | ||
| 0003b800:· | 0003b800:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003b810:· | 0003b810:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003b820:· | 0003b820:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003b830:· | 0003b830:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003b840:·2 | 0003b840:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003b850:· | 0003b850:·7869·7479·3a3c·2f74·683e·3c74·643e·6869··xity:</th><td>hi | ||
| 0003b860:· | 0003b860:·6768·3c2f·7464·3e3c·2f74·723e·3c74·723e··gh</td></tr><tr> | ||
| 0003b870:· | 0003b870:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b880:· | 0003b880:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | ||
| 0003b890:· | 0003b890:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b8a0:· | 0003b8a0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b8b0:· | 0003b8b0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003b8c0:· | 0003b8c0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003b8d0:· | 0003b8d0:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | ||
| 0003b8e0:· | 0003b8e0:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | ||
| 0003b8f0:· | 0003b8f0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | ||
| 0003b900:· | 0003b900:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | ||
| 0003b910:· | 0003b910:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | ||
| 0003b920:·2 | 0003b920:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | ||
| 0003b930:· | 0003b930:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | ||
| 0003b940:· | 0003b940:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | ||
| 0003b950:· | 0003b950:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | ||
| 0003b960:· | 0003b960:·4449·5341·2d53·5449·472d·4f4c·3037·2d30··DISA-STIG-OL07-0 | ||
| 0003b970:· | 0003b970:·302d·3031·3030·3230·0a20·202d·204e·4953··0-010020.··-·NIS | ||
| 0003b980:· | 0003b980:·542d·3830·302d·3137·312d·332e·332e·380a··T-800-171-3.3.8. | ||
| 0003b990:·2020·2d20· | 0003b990:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003b9a0:· | 0003b9a0:·2d33·2e34·2e31·0a20·202d·204e·4953·542d··-3.4.1.··-·NIST- | ||
| 0003b9b0:· | 0003b9b0:·3830·302d·3533·2d41·552d·3928·3329·0a20··800-53-AU-9(3).· | ||
| 0003b9c0:· | 0003b9c0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003b9d0:· | 0003b9d0:·4d2d·3628·6329·0a20·202d·204e·4953·542d··M-6(c).··-·NIST- | ||
| 0003b9e0:· | 0003b9e0:·3830·302d·3533·2d43·4d2d·3628·6429·0a20··800-53-CM-6(d).· | ||
| 0003b9f0:· | 0003b9f0:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003ba00:· | 0003ba00:·492d·370a·2020·2d20·4e49·5354·2d38·3030··I-7.··-·NIST-800 | ||
| 0003ba10:· | 0003ba10:·2d35·332d·5349·2d37·2831·290a·2020·2d20··-53-SI-7(1).··-· | ||
| 0003ba20:· | 0003ba20:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003ba30:· | 0003ba30:·2836·290a·2020·2d20·5043·492d·4453·532d··(6).··-·PCI-DSS- | ||
| 0003ba40:· | 0003ba40:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | ||
| 0003ba50:· | 0003ba50:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | ||
| 0003ba60:· | 0003ba60:·2d20·6869·6768·5f63·6f6d·706c·6578·6974··-·high_complexit | ||
| 0003ba70:· | 0003ba70:·790a·2020·2d20·6869·6768·5f73·6576·6572··y.··-·high_sever | ||
| 0003ba80:· | 0003ba80:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | ||
| 0003ba90:· | 0003ba90:·6973·7275·7074·696f·6e0a·2020·2d20·6e6f··isruption.··-·no | ||
| 0003baa0:· | 0003baa0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | ||
| 0003bab0:· | 0003bab0:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | ||
| 0003bac0:· | 0003bac0:·7465·6779·0a20·202d·2072·706d·5f76·6572··tegy.··-·rpm_ver | ||
| 0003bad0:·6 | 0003bad0:·6966·795f·6861·7368·6573·0a0a·2d20·6e61··ify_hashes..-·na | ||
| Max diff block lines reached; 6222096/6278566 bytes (99.10%) of diff not shown. | |||
| Offset 104, 14 lines modified | Offset 104, 33 lines modified | ||
| 104 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 104 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 105 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 105 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 107 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 108 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 108 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule | 110 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 112 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 113 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 114 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 115 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 116 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 117 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 118 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 119 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 120 | fi | ||
| 121 | else | ||
| 122 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 123 | fi | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 116 | -·name:·Gather·the·package·facts | 129 | -·name:·Gather·the·package·facts |
| 117 | ··package_facts: | 130 | ··package_facts: |
| Offset 284, 33 lines modified | Offset 303, 14 lines modified | ||
| 284 | ··-·PCI-DSSv4-11.5.2 | 303 | ··-·PCI-DSSv4-11.5.2 |
| 285 | ··-·high_complexity | 304 | ··-·high_complexity |
| 286 | ··-·high_severity | 305 | ··-·high_severity |
| 287 | ··-·medium_disruption | 306 | ··-·medium_disruption |
| 288 | ··-·no_reboot_needed | 307 | ··-·no_reboot_needed |
| 289 | ··-·restrict_strategy | 308 | ··-·restrict_strategy |
| 290 | ··-·rpm_verify_hashes | 309 | ··-·rpm_verify_hashes |
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 292 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 293 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 294 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 295 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 296 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 297 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 298 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 299 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 300 | fi | ||
| 301 | else | ||
| 302 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 303 | fi | ||
| 304 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 310 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 305 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 311 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 306 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 312 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 307 | run·the·following·command·to·determine·which·package·owns·it: | 313 | run·the·following·command·to·determine·which·package·owns·it: |
| 308 | $·rpm·-qf·FILENAME | 314 | $·rpm·-qf·FILENAME |
| 309 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 315 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 310 | $·sudo·rpm·--restore·PACKAGENAME | 316 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 331, 14 lines modified | Offset 331, 46 lines modified | ||
| 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 335 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 335 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 337 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule | 337 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule |
| 338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 339 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 340 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 341 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 342 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 343 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 344 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 345 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 346 | declare·-A·SETPERMS_RPM_DICT | ||
| 347 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 348 | #·is·expected·by·the·RPM·database | ||
| 349 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 350 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 351 | do | ||
| 352 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 353 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 354 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 355 | done | ||
| 356 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 357 | #·correct·values | ||
| 358 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 359 | do | ||
| 360 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 361 | done | ||
| 362 | else | ||
| 363 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 364 | fi | ||
| 338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 339 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 340 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 341 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 342 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 343 | -·name:·Gather·the·package·facts | 370 | -·name:·Gather·the·package·facts |
| 344 | ··package_facts: | 371 | ··package_facts: |
| Offset 450, 46 lines modified | Offset 482, 14 lines modified | ||
| 450 | ··-·PCI-DSSv4-11.5.2 | 482 | ··-·PCI-DSSv4-11.5.2 |
| 451 | ··-·high_complexity | 483 | ··-·high_complexity |
| 452 | ··-·high_severity | 484 | ··-·high_severity |
| 453 | ··-·medium_disruption | 485 | ··-·medium_disruption |
| 454 | ··-·no_reboot_needed | 486 | ··-·no_reboot_needed |
| 455 | ··-·restrict_strategy | 487 | ··-·restrict_strategy |
| 456 | ··-·rpm_verify_ownership | 488 | ··-·rpm_verify_ownership |
| 457 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 458 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 459 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 460 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 461 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 657147/664349 bytes (98.92%) of diff not shown. | |||
| Offset 15184, 419 lines modified | Offset 15184, 419 lines modified | ||
| 0003b4f0:·2d74·6172·6765·743d·2223·6964·6d35·3331··-target="#idm531 | 0003b4f0:·2d74·6172·6765·743d·2223·6964·6d35·3331··-target="#idm531 | ||
| 0003b500:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 0003b500:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 0003b510:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b510:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b520:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b520:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b530:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b530:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b540:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b540:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b550:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b550:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b560:·7469·6f6e·20 | 0003b560:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | ||
| 0003b570:·7 | 0003b570:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b580:· | 0003b580:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b590:·6 | 0003b590:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b5a0:· | 0003b5a0:·2220·6964·3d22·6964·6d35·3331·3022·3e3c··"·id="idm5310">< | ||
| 0003b5b0:·2 | 0003b5b0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 0003b5c0:· | 0003b5c0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 0003b5d0:· | 0003b5d0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | ||
| 0003b5e0:· | 0003b5e0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | ||
| 0003b5f0:·6 | 0003b5f0:·6966·2021·2028·207b·2072·706d·202d·2d71··if·!·(·{·rpm·--q | ||
| 0003b600:· | 0003b600:·7569·6574·202d·7120·6b65·726e·656c·203b··uiet·-q·kernel·; | ||
| 0003b610:· | 0003b610:·7d20·2661·6d70·3b26·616d·703b·207b·2072··}·&&·{·r | ||
| 0003b620:·7 | 0003b620:·706d·202d·2d71·7569·6574·202d·7120·7270··pm·--quiet·-q·rp | ||
| 0003b630:· | 0003b630:·6d2d·6f73·7472·6565·203b·7d20·2661·6d70··m-ostree·;}·& | ||
| 0003b640:·3 | 0003b640:·3b26·616d·703b·207b·2072·706d·202d·2d71··;&·{·rpm·--q | ||
| 0003b650:· | 0003b650:·7569·6574·202d·7120·626f·6f74·6320·3b7d··uiet·-q·bootc·;} | ||
| 0003b660:· | 0003b660:·2026·616d·703b·2661·6d70·3b20·7b20·2120···&&·{·!· | ||
| 0003b670:· | 0003b670:·7270·6d20·2d2d·7175·6965·7420·2d71·206f··rpm·--quiet·-q·o | ||
| 0003b680:·7 | 0003b680:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | ||
| 0003b690:· | 0003b690:·203b·7d20·293b·2074·6865·6e0a·0a23·2046···;}·);·then..#·F | ||
| 0003b6a0:·6 | 0003b6a0:·696e·6420·7768·6963·6820·6669·6c65·7320··ind·which·files· | ||
| 0003b6b0:· | 0003b6b0:·6861·7665·2069·6e63·6f72·7265·6374·2068··have·incorrect·h | ||
| 0003b6c0:·6 | 0003b6c0:·6173·6820·286e·6f74·2069·6e20·2f65·7463··ash·(not·in·/etc | ||
| 0003b6d0:· | 0003b6d0:·2c20·6265·6361·7573·6520·6f66·2074·6865··,·because·of·the | ||
| 0003b6e0:· | 0003b6e0:·2073·7973·7465·6d20·7265·6c61·7465·6420···system·related· | ||
| 0003b6f0:· | 0003b6f0:·636f·6e66·6967·2066·696c·6573·2920·616e··config·files)·an | ||
| 0003b700:· | 0003b700:·6420·7468·656e·2067·6574·2066·696c·6573··d·then·get·files | ||
| 0003b710:·2 | 0003b710:·206e·616d·6573·0a66·696c·6573·5f77·6974···names.files_wit | ||
| 0003b720:· | 0003b720:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b730:· | 0003b730:·3d22·2428·7270·6d20·2d56·6120·2d2d·6e6f··="$(rpm·-Va·--no | ||
| 0003b740:· | 0003b740:·636f·6e66·6967·207c·2067·7265·7020·2d45··config·|·grep·-E | ||
| 0003b750:· | 0003b750:·2027·5e2e·2e35·2720·7c20·6177·6b20·277b···'^..5'·|·awk·'{ | ||
| 0003b760:· | 0003b760:·7072·696e·7420·244e·467d·2720·2922·0a0a··print·$NF}'·)".. | ||
| 0003b770:· | 0003b770:·6966·205b·202d·6e20·2224·6669·6c65·735f··if·[·-n·"$files_ | ||
| 0003b780:· | 0003b780:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003b790:· | 0003b790:·6173·6822·205d·3b20·7468·656e·0a20·2020··ash"·];·then.··· | ||
| 0003b7a0:· | 0003b7a0:·2023·2046·726f·6d20·6669·6c65·7320·6e61···#·From·files·na | ||
| 0003b7b0:· | 0003b7b0:·6d65·7320·6765·7420·7061·636b·6167·6520··mes·get·package· | ||
| 0003b7c0:· | 0003b7c0:·6e61·6d65·7320·616e·6420·6368·616e·6765··names·and·change | ||
| 0003b7d0:·2 | 0003b7d0:·206e·6577·6c69·6e65·2074·6f20·7370·6163···newline·to·spac | ||
| 0003b7e0:· | 0003b7e0:·652c·2062·6563·6175·7365·2072·706d·2077··e,·because·rpm·w | ||
| 0003b7f0:· | 0003b7f0:·7269·7465·7320·6561·6368·2070·6163·6b61··rites·each·packa | ||
| 0003b800:· | 0003b800:·6765·2074·6f20·6e65·7720·6c69·6e65·0a20··ge·to·new·line.· | ||
| 0003b810:·2020·2 | 0003b810:·2020·2070·6163·6b61·6765·735f·746f·5f72·····packages_to_r | ||
| 0003b820:·6 | 0003b820:·6569·6e73·7461·6c6c·3d22·2428·7270·6d20··einstall="$(rpm· | ||
| 0003b830:· | 0003b830:·2d71·6620·2466·696c·6573·5f77·6974·685f··-qf·$files_with_ | ||
| 0003b840:· | 0003b840:·696e·636f·7272·6563·745f·6861·7368·207c··incorrect_hash·| | ||
| 0003b850:· | 0003b850:·2074·7220·275c·6e27·2027·2027·2922·0a0a···tr·'\n'·'·')".. | ||
| 0003b860:· | 0003b860:·2020·2020·0a20·2020·2079·756d·2072·6569······.····yum·rei | ||
| 0003b870:· | 0003b870:·6e73·7461·6c6c·202d·7920·2470·6163·6b61··nstall·-y·$packa | ||
| 0003b880:·6 | 0003b880:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003b890:· | 0003b890:·0a20·2020·200a·6669·0a0a·656c·7365·0a20··.····.fi..else.· | ||
| 0003b8a0:·20 | 0003b8a0:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | ||
| 0003b8b0:· | 0003b8b0:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | ||
| 0003b8c0:·6 | 0003b8c0:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | ||
| 0003b8d0:· | 0003b8d0:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | ||
| 0003b8e0:·6 | 0003b8e0:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | ||
| 0003b8f0:· | 0003b8f0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003b900:· | 0003b900:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003b910:·6 | 0003b910:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0003b920:·6 | 0003b920:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003b930:· | 0003b930:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | ||
| 0003b940:· | 0003b940:·3131·2220·7461·6269·6e64·6578·3d22·3022··11"·tabindex="0" | ||
| 0003b950:· | 0003b950:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b960:· | 0003b960:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b970:· | 0003b970:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b980:· | 0003b980:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b990:·6 | 0003b990:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b9a0:· | 0003b9a0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003b9b0:·69 | 0003b9b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003b9c0:· | 0003b9c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b9d0:· | 0003b9d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b9e0:·6 | 0003b9e0:·6170·7365·2220·6964·3d22·6964·6d35·3331··apse"·id="idm531 | ||
| 0003b9f0:· | 0003b9f0:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | ||
| 0003ba00:· | 0003ba00:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003ba10:· | 0003ba10:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003ba20:· | 0003ba20:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003ba30:· | 0003ba30:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003ba40:· | 0003ba40:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003ba50:· | 0003ba50:·3e68·6967·683c·2f74·643e·3c2f·7472·3e3c··>high</td></tr>< | ||
| 0003ba60:· | 0003ba60:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003ba70:· | 0003ba70:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | ||
| 0003ba80:· | 0003ba80:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | ||
| 0003ba90:· | 0003ba90:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003baa0:· | 0003baa0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003bab0:· | 0003bab0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003bac0:·6 | 0003bac0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | ||
| 0003bad0:· | 0003bad0:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | ||
| 0003bae0:· | 0003bae0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003baf0:· | 0003baf0:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | ||
| 0003bb00:· | 0003bb00:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | ||
| 0003bb10:· | 0003bb10:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | ||
| 0003bb20:· | 0003bb20:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | ||
| 0003bb30:· | 0003bb30:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | ||
| 0003bb40:· | 0003bb40:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003bb50:· | 0003bb50:·202d·2044·4953·412d·5354·4947·2d4f·4c30···-·DISA-STIG-OL0 | ||
| 0003bb60:· | 0003bb60:·372d·3030·2d30·3130·3032·300a·2020·2d20··7-00-010020.··-· | ||
| 0003bb70:· | 0003bb70:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | ||
| 0003bb80:· | 0003bb80:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | ||
| 0003bb90:· | 0003bb90:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | ||
| 0003bba0:·5 | 0003bba0:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | ||
| 0003bbb0:·2 | 0003bbb0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003bbc0:· | 0003bbc0:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | ||
| 0003bbd0:· | 0003bbd0:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | ||
| 0003bbe0:· | 0003bbe0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003bbf0:· | 0003bbf0:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | ||
| 0003bc00:· | 0003bc00:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | ||
| 0003bc10:· | 0003bc10:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003bc20:· | 0003bc20:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | ||
| 0003bc30:· | 0003bc30:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003bc40:· | 0003bc40:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003bc50:· | 0003bc50:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | ||
| 0003bc60:· | 0003bc60:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | ||
| 0003bc70:· | 0003bc70:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | ||
| 0003bc80:·6 | 0003bc80:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0003bc90:·20 | 0003bc90:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| 0003bca0:· | 0003bca0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 0003bcb0:· | 0003bcb0:·7472·6174·6567·790a·2020·2d20·7270·6d5f··trategy.··-·rpm_ | ||
| 0003bcc0:· | 0003bcc0:·7665·7269·6679·5f68·6173·6865·730a·0a2d··verify_hashes..- | ||
| Max diff block lines reached; 16244219/16300689 bytes (99.65%) of diff not shown. | |||
| Offset 111, 14 lines modified | Offset 111, 33 lines modified | ||
| 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 115 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 115 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 121 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 122 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 123 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 124 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 125 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 126 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 127 | fi | ||
| 128 | else | ||
| 129 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 130 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·Gather·the·package·facts | 136 | -·name:·Gather·the·package·facts |
| 124 | ··package_facts: | 137 | ··package_facts: |
| Offset 291, 33 lines modified | Offset 310, 14 lines modified | ||
| 291 | ··-·PCI-DSSv4-11.5.2 | 310 | ··-·PCI-DSSv4-11.5.2 |
| 292 | ··-·high_complexity | 311 | ··-·high_complexity |
| 293 | ··-·high_severity | 312 | ··-·high_severity |
| 294 | ··-·medium_disruption | 313 | ··-·medium_disruption |
| 295 | ··-·no_reboot_needed | 314 | ··-·no_reboot_needed |
| 296 | ··-·restrict_strategy | 315 | ··-·restrict_strategy |
| 297 | ··-·rpm_verify_hashes | 316 | ··-·rpm_verify_hashes |
| 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 299 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 300 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 301 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 302 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 303 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 304 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 305 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 306 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 307 | fi | ||
| 308 | else | ||
| 309 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 310 | fi | ||
| 311 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 317 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 312 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 318 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 313 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 319 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 314 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 320 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 315 | $·rpm·-qf·FILENAME | 321 | $·rpm·-qf·FILENAME |
| 316 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 322 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 340, 14 lines modified | Offset 340, 50 lines modified | ||
| 340 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 340 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 341 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 341 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 342 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 342 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 343 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 343 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 344 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 344 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 345 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 345 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 346 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule | 346 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule |
| 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 348 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 349 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 350 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 351 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 352 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 353 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 354 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 355 | declare·-A·SETPERMS_RPM_DICT | ||
| 356 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 357 | #·is·expected·by·the·RPM·database | ||
| 358 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 359 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 360 | do | ||
| 361 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 362 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 363 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 364 | ········do | ||
| 365 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 366 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 367 | ········done | ||
| 368 | done | ||
| 369 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 370 | #·correct·values | ||
| 371 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 372 | do | ||
| 373 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 374 | done | ||
| 375 | else | ||
| 376 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 377 | fi | ||
| 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 348 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 379 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 349 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 380 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 350 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 381 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 351 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 382 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 352 | -·name:·Gather·the·package·facts | 383 | -·name:·Gather·the·package·facts |
| 353 | ··package_facts: | 384 | ··package_facts: |
| Offset 463, 50 lines modified | Offset 499, 14 lines modified | ||
| 463 | ··-·PCI-DSSv4-11.5.2 | 499 | ··-·PCI-DSSv4-11.5.2 |
| 464 | ··-·high_complexity | 500 | ··-·high_complexity |
| 465 | ··-·high_severity | 501 | ··-·high_severity |
| 466 | ··-·medium_disruption | 502 | ··-·medium_disruption |
| 467 | ··-·no_reboot_needed | 503 | ··-·no_reboot_needed |
| 468 | ··-·restrict_strategy | 504 | ··-·restrict_strategy |
| 469 | ··-·rpm_verify_permissions | 505 | ··-·rpm_verify_permissions |
| 470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1239296/1246858 bytes (99.39%) of diff not shown. | |||
| Offset 15258, 419 lines modified | Offset 15258, 419 lines modified | ||
| 0003b990:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b990:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b9a0:·3533·3130·2220·7461·6269·6e64·6578·3d22··5310"·tabindex=" | 0003b9a0:·3533·3130·2220·7461·6269·6e64·6578·3d22··5310"·tabindex=" | ||
| 0003b9b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b9b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b9c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b9c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b9d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b9d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b9e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b9e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b9f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b9f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003ba00:·6469·6174·696f·6e20· | 0003ba00:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | ||
| 0003ba10:·7 | 0003ba10:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0003ba20:· | 0003ba20:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003ba30:·6 | 0003ba30:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003ba40:· | 0003ba40:·7073·6522·2069·643d·2269·646d·3533·3130··pse"·id="idm5310 | ||
| 0003ba50:· | 0003ba50:·223e·3c70·7265·3e3c·636f·6465·3e23·2052··"><pre><code>#·R | ||
| 0003ba60:· | 0003ba60:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 0003ba70:·7 | 0003ba70:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | ||
| 0003ba80:· | 0003ba80:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | ||
| 0003ba90:·6 | 0003ba90:·6d73·0a69·6620·2120·2820·7b20·7270·6d20··ms.if·!·(·{·rpm· | ||
| 0003baa0:· | 0003baa0:·2d2d·7175·6965·7420·2d71·206b·6572·6e65··--quiet·-q·kerne | ||
| 0003bab0:· | 0003bab0:·6c20·3b7d·2026·616d·703b·2661·6d70·3b20··l·;}·&&· | ||
| 0003bac0:· | 0003bac0:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | ||
| 0003bad0:· | 0003bad0:·2072·706d·2d6f·7374·7265·6520·3b7d·2026···rpm-ostree·;}·& | ||
| 0003bae0:·6 | 0003bae0:·616d·703b·2661·6d70·3b20·7b20·7270·6d20··amp;&·{·rpm· | ||
| 0003baf0:· | 0003baf0:·2d2d·7175·6965·7420·2d71·2062·6f6f·7463··--quiet·-q·bootc | ||
| 0003bb00:· | 0003bb00:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003bb10:·2 | 0003bb10:·2021·2072·706d·202d·2d71·7569·6574·202d···!·rpm·--quiet·- | ||
| 0003bb20:·7 | 0003bb20:·7120·6f70·656e·7368·6966·742d·6b75·6265··q·openshift-kube | ||
| 0003bb30:· | 0003bb30:·6c65·7420·3b7d·2029·3b20·7468·656e·0a0a··let·;}·);·then.. | ||
| 0003bb40:· | 0003bb40:·2320·4669·6e64·2077·6869·6368·2066·696c··#·Find·which·fil | ||
| 0003bb50:·6 | 0003bb50:·6573·2068·6176·6520·696e·636f·7272·6563··es·have·incorrec | ||
| 0003bb60:·7 | 0003bb60:·7420·6861·7368·2028·6e6f·7420·696e·202f··t·hash·(not·in·/ | ||
| 0003bb70:·6 | 0003bb70:·6574·632c·2062·6563·6175·7365·206f·6620··etc,·because·of· | ||
| 0003bb80:· | 0003bb80:·7468·6520·7379·7374·656d·2072·656c·6174··the·system·relat | ||
| 0003bb90:· | 0003bb90:·6564·2063·6f6e·6669·6720·6669·6c65·7329··ed·config·files) | ||
| 0003bba0:·20 | 0003bba0:·2061·6e64·2074·6865·6e20·6765·7420·6669···and·then·get·fi | ||
| 0003bbb0:· | 0003bbb0:·6c65·7320·6e61·6d65·730a·6669·6c65·735f··les·names.files_ | ||
| 0003bbc0:· | 0003bbc0:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003bbd0:· | 0003bbd0:·6173·683d·2224·2872·706d·202d·5661·202d··ash="$(rpm·-Va·- | ||
| 0003bbe0:·2 | 0003bbe0:·2d6e·6f63·6f6e·6669·6720·7c20·6772·6570··-noconfig·|·grep | ||
| 0003bbf0:· | 0003bbf0:·202d·4520·275e·2e2e·3527·207c·2061·776b···-E·'^..5'·|·awk | ||
| 0003bc00:· | 0003bc00:·2027·7b70·7269·6e74·2024·4e46·7d27·2029···'{print·$NF}'·) | ||
| 0003bc10:·2 | 0003bc10:·220a·0a69·6620·5b20·2d6e·2022·2466·696c··"..if·[·-n·"$fil | ||
| 0003bc20:· | 0003bc20:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003bc30:· | 0003bc30:·745f·6861·7368·2220·5d3b·2074·6865·6e0a··t_hash"·];·then. | ||
| 0003bc40:·2 | 0003bc40:·2020·2020·2320·4672·6f6d·2066·696c·6573······#·From·files | ||
| 0003bc50:·2 | 0003bc50:·206e·616d·6573·2067·6574·2070·6163·6b61···names·get·packa | ||
| 0003bc60:· | 0003bc60:·6765·206e·616d·6573·2061·6e64·2063·6861··ge·names·and·cha | ||
| 0003bc70:· | 0003bc70:·6e67·6520·6e65·776c·696e·6520·746f·2073··nge·newline·to·s | ||
| 0003bc80:· | 0003bc80:·7061·6365·2c20·6265·6361·7573·6520·7270··pace,·because·rp | ||
| 0003bc90:· | 0003bc90:·6d20·7772·6974·6573·2065·6163·6820·7061··m·writes·each·pa | ||
| 0003bca0:· | 0003bca0:·636b·6167·6520·746f·206e·6577·206c·696e··ckage·to·new·lin | ||
| 0003bcb0:· | 0003bcb0:·650a·2020·2020·7061·636b·6167·6573·5f74··e.····packages_t | ||
| 0003bcc0:·6 | 0003bcc0:·6f5f·7265·696e·7374·616c·6c3d·2224·2872··o_reinstall="$(r | ||
| 0003bcd0:·7 | 0003bcd0:·706d·202d·7166·2024·6669·6c65·735f·7769··pm·-qf·$files_wi | ||
| 0003bce0:· | 0003bce0:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | ||
| 0003bcf0:· | 0003bcf0:·6820·7c20·7472·2027·5c6e·2720·2720·2729··h·|·tr·'\n'·'·') | ||
| 0003bd00:· | 0003bd00:·220a·0a20·2020·200a·2020·2020·7975·6d20··"..····.····yum· | ||
| 0003bd10:· | 0003bd10:·7265·696e·7374·616c·6c20·2d79·2024·7061··reinstall·-y·$pa | ||
| 0003bd20:·6 | 0003bd20:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | ||
| 0003bd30:· | 0003bd30:·616c·6c0a·2020·2020·0a66·690a·0a65·6c73··all.····.fi..els | ||
| 0003bd40:·6 | 0003bd40:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | ||
| 0003bd50:· | 0003bd50:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | ||
| 0003bd60:·6 | 0003bd60:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | ||
| 0003bd70:· | 0003bd70:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | ||
| 0003bd80:· | 0003bd80:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | ||
| 0003bd90:· | 0003bd90:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0003bda0:· | 0003bda0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0003bdb0:· | 0003bdb0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0003bdc0:· | 0003bdc0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0003bdd0:· | 0003bdd0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003bde0:· | 0003bde0:·6d35·3331·3122·2074·6162·696e·6465·783d··m5311"·tabindex= | ||
| 0003bdf0:· | 0003bdf0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003be00:· | 0003be00:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003be10:· | 0003be10:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003be20:·6 | 0003be20:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003be30:· | 0003be30:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003be40:·6 | 0003be40:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003be50:· | 0003be50:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003be60:· | 0003be60:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003be70:· | 0003be70:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003be80:· | 0003be80:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003be90:· | 0003be90:·3533·3131·223e·3c74·6162·6c65·2063·6c61··5311"><table·cla | ||
| 0003bea0:· | 0003bea0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003beb0:· | 0003beb0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003bec0:· | 0003bec0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003bed0:· | 0003bed0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003bee0:· | 0003bee0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003bef0:· | 0003bef0:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | ||
| 0003bf00:· | 0003bf00:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003bf10:· | 0003bf10:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003bf20:· | 0003bf20:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003bf30:· | 0003bf30:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003bf40:· | 0003bf40:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003bf50:· | 0003bf50:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003bf60:· | 0003bf60:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003bf70:· | 0003bf70:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003bf80:· | 0003bf80:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003bf90:· | 0003bf90:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | ||
| 0003bfa0:· | 0003bfa0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | ||
| 0003bfb0:· | 0003bfb0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | ||
| 0003bfc0:· | 0003bfc0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | ||
| 0003bfd0:· | 0003bfd0:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | ||
| 0003bfe0:· | 0003bfe0:·2020·2d20·434a·4953·2d35·2e31·302e·342e····-·CJIS-5.10.4. | ||
| 0003bff0:· | 0003bff0:·310a·2020·2d20·4449·5341·2d53·5449·472d··1.··-·DISA-STIG- | ||
| 0003c000:· | 0003c000:·4f4c·3037·2d30·302d·3031·3030·3230·0a20··OL07-00-010020.· | ||
| 0003c010:· | 0003c010:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003c020:· | 0003c020:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003c030:· | 0003c030:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003c040:· | 0003c040:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003c050:· | 0003c050:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003c060:· | 0003c060:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003c070:· | 0003c070:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003c080:· | 0003c080:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003c090:· | 0003c090:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003c0a0:· | 0003c0a0:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003c0b0:· | 0003c0b0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c0c0:· | 0003c0c0:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003c0d0:· | 0003c0d0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003c0e0:·202 | 0003c0e0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003c0f0:· | 0003c0f0:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003c100:· | 0003c100:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003c110:· | 0003c110:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003c120:·6 | 0003c120:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003c130:· | 0003c130:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| 0003c140:· | 0003c140:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | ||
| 0003c150:·7 | 0003c150:·745f·7374·7261·7465·6779·0a20·202d·2072··t_strategy.··-·r | ||
| 0003c160:· | 0003c160:·706d·5f76·6572·6966·795f·6861·7368·6573··pm_verify_hashes | ||
| Max diff block lines reached; 27385257/27441727 bytes (99.79%) of diff not shown. | |||
| Offset 15046, 246 lines modified | Offset 15046, 246 lines modified | ||
| 0003ac50:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ac50:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ac60:·6964·6d36·3138·3322·2074·6162·696e·6465··idm6183"·tabinde | 0003ac60:·6964·6d36·3138·3322·2074·6162·696e·6465··idm6183"·tabinde | ||
| 0003ac70:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ac70:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003ac80:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003ac80:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003ac90:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003ac90:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003aca0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003aca0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003acb0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003acb0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003acc0:·656d·6564·6961·7469·6f6e·20 | 0003acc0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003acd0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003acd0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003ace0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003acf0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003ad00:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ad10:·6d36·3138·3322·3e3c·7461·626c·6520·636c··m6183"><table·cl | |||
| 0003ad20:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003ad30:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003ad40:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003ad50:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ad60:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003ad70:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ad80:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003ad90:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003ada0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003adb0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003adc0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003add0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003ade0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003adf0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003ae00:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003ae10:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f64··nclude·install_d | |||
| 0003ae20:·7261·6375·742d·6669·7073·0a0a·636c·6173··racut-fips..clas | |||
| 0003ae30:·7320·696e·7374·616c·6c5f·6472·6163·7574··s·install_dracut | |||
| 0003ae40:·2d66·6970·7320·7b0a·2020·7061·636b·6167··-fips·{.··packag | |||
| 0003ae50:·6520·7b20·2764·7261·6375·742d·6669·7073··e·{·'dracut-fips | |||
| 0003ae60:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003ae70:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003ae80:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003ae90:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003aea0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003aeb0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003aec0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003aed0:·2d74·6172·6765·743d·2223·6964·6d36·3138··-target="#idm618 | |||
| 0003aee0:·3422·2074·6162·696e·6465·783d·2230·2220··4"·tabindex="0"· | |||
| 0003aef0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003af00:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003af10:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003af20:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003af30:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003af40:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003a | 0003ace0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003a | 0003acf0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003a | 0003ad00:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003a | 0003ad10:·7073·6522·2069·643d·2269·646d·3631·3833··pse"·id="idm6183 | ||
| 0003ad20:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003ad30:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003ad40:·3d20·2264·7261·6375·742d·6669·7073·220a··=·"dracut-fips". | |||
| 0003ad50:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003ad60:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003ad70:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003ad80:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003ad90:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003ada0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003adb0:·2369·646d·3631·3834·2220·7461·6269·6e64··#idm6184"·tabind | |||
| 0003adc0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003add0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003ade0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003adf0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003ae00:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003ae10:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003ae20:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003a | 0003ae30:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003ae40:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003ae50:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ae60:·3631·3834·223e·3c74·6162·6c65·2063·6c61··6184"><table·cla | |||
| 0003a | 0003ae70:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003a | 0003ae80:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003a | 0003ae90:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003a | 0003aea0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003a | 0003aeb0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003a | 0003aec0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b000:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b010:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003 | 0003aed0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003aee0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003aef0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003 | 0003af00:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003af10:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003af20:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003af30:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003 | 0003af40:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003af50:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 0003af60:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003af70:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003af80:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003af90:·726d·730a·6966·2028·2021·2028·205b·2022··rms.if·(·!·(·[·" | |||
| 0003afa0:·247b·636f·6e74·6169·6e65·723a·2d7d·2220··${container:-}"· | |||
| 0003afb0:·3d3d·2022·6277·7261·702d·6f73·6275·696c··==·"bwrap-osbuil | |||
| 0003afc0:·6422·205d·2029·2026·616d·703b·2661·6d70··d"·]·)·&& | |||
| 0003afd0:·3b20·7270·6d20·2d2d·7175·6965·7420·2d71··;·rpm·--quiet·-q | |||
| 0003afe0:·206b·6572·6e65·6c20·7c7c·2072·706d·202d···kernel·||·rpm·- | |||
| 0003aff0:·2d71·7569·6574·202d·7120·6b65·726e·656c··-quiet·-q·kernel | |||
| 0003b000:·2d75·656b·2029·3b20·7468·656e·0a0a·6966··-uek·);·then..if | |||
| 0003b010:·2021·2072·706d·202d·7120·2d2d·7175·6965···!·rpm·-q·--quie | |||
| 0003b050:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b060:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b070:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b080:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b090:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003b0a0:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003b0b0:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003b0c0:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003b0d0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b0e0:·2e31·302e·312e·320a·2020·2d20·4e49·5354··.10.1.2.··-·NIST | |||
| 0003b0f0:·2d38·3030·2d31·3731·2d33·2e31·332e·3131··-800-171-3.13.11 | |||
| 0003b100:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | |||
| 0003b110:·312d·332e·3133·2e38·0a20·202d·204e·4953··1-3.13.8.··-·NIS | |||
| 0003b120:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b130:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b140:·2d49·412d·370a·2020·2d20·4e49·5354·2d38··-IA-7.··-·NIST-8 | |||
| 0003b150:·3030·2d35·332d·5343·2d31·320a·2020·2d20··00-53-SC-12.··-· | |||
| 0003b160:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003b170:·3228·3229·0a20·202d·204e·4953·542d·3830··2(2).··-·NIST-80 | |||
| 0003b180:·302d·3533·2d53·432d·3132·2833·290a·2020··0-53-SC-12(3).·· | |||
| 0003b190:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 0003b1a0:·2d31·330a·2020·2d20·656e·6162·6c65·5f73··-13.··-·enable_s | |||
| 0003b1b0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b1c0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| Max diff block lines reached; 6413930/6446526 bytes (99.49%) of diff not shown. | |||
| Offset 92, 26 lines modified | Offset 92, 34 lines modified | ||
| 92 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 | 92 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 |
| 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 95 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 95 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 96 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 96 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 97 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 97 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 |
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 100 | [[packages]] | ||
| 101 | name·=·"dracut-fips" | ||
| 102 | version·=·"*" | ||
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 104 | 108 | #·Remediation·is·applicable·only·in·certain·platforms | |
| 109 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·);·then | ||
| 105 | class·install_dracut-fips·{ | ||
| 106 | ··package·{·'dracut-fips': | ||
| 107 | ····ensure·=>·'installed', | ||
| 108 | ··} | ||
| 109 | 110 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | |
| 111 | ····yum·install·-y·"dracut-fips" | ||
| 112 | fi | ||
| 113 | else | ||
| 114 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 115 | fi | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 115 | -·name:·Gather·the·package·facts | 121 | -·name:·Gather·the·package·facts |
| 116 | ··package_facts: | 122 | ··package_facts: |
| Offset 151, 41 lines modified | Offset 159, 33 lines modified | ||
| 151 | ··-·NIST-800-53-SC-13 | 159 | ··-·NIST-800-53-SC-13 |
| 152 | ··-·enable_strategy | 160 | ··-·enable_strategy |
| 153 | ··-·low_complexity | 161 | ··-·low_complexity |
| 154 | ··-·low_disruption | 162 | ··-·low_disruption |
| 155 | ··-·medium_severity | 163 | ··-·medium_severity |
| 156 | ··-·no_reboot_needed | 164 | ··-·no_reboot_needed |
| 157 | ··-·package_dracut-fips_installed | 165 | ··-·package_dracut-fips_installed |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"dracut-fips" | ||
| 161 | version·=·"*" | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 167 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 168 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·);·then | ||
| 169 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | ||
| 170 | ····yum·install·-y·"dracut-fips" | ||
| 171 | fi | ||
| 171 | package·--add=dracut-fips | ||
| 172 | else | ||
| 173 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 174 | fi | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 177 | include·install_dracut-fips | ||
| 180 | 178 | class·install_dracut-fips·{ | |
| 179 | ··package·{·'dracut-fips': | ||
| 180 | ····ensure·=>·'installed', | ||
| 181 | ··} | ||
| 182 | } | ||
| 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 183 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 182 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: | 184 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: |
| 183 | $·sudo·yum·install·dracut-fips | 185 | $·sudo·yum·install·dracut-fips |
| 184 | dracut·-f | 186 | dracut·-f |
| 185 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: | 187 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: |
| 186 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" | 188 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" |
| 187 | Finally,·rebuild·the·grub.cfg·file·by·using·the | 189 | Finally,·rebuild·the·grub.cfg·file·by·using·the |
| Offset 216, 14 lines modified | Offset 216, 80 lines modified | ||
| 216 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 216 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 217 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 217 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 218 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 218 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 219 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 219 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 220 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 | 220 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 |
| 221 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 | 221 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 |
| 222 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r958408_rule | 222 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r958408_rule |
| 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 224 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 225 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·rpm·--quiet·-q·grub2-common;·};·then | ||
| 226 | #·prelink·not·installed | ||
| 227 | if·test·-e·/etc/sysconfig/prelink·-o·-e·/usr/sbin/prelink;·then | ||
| 228 | ····if·grep·-q·^PRELINKING·/etc/sysconfig/prelink | ||
| 229 | ····then | ||
| 230 | ········sed·-i·'s/^PRELINKING[:blank:]*=[:blank:]*[:alpha:]*/PRELINKING=no/'·/etc/sysconfig/prelink | ||
| 231 | ····else | ||
| 232 | ········printf·'\n'·>>·/etc/sysconfig/prelink | ||
| 233 | ········printf·'%s\n'·'#·Set·PRELINKING=no·per·security·requirements'·'PRELINKING=no'·>>·/etc/sysconfig/prelink | ||
| 234 | ····fi | ||
| 235 | ····#·Undo·previous·prelink·changes·to·binaries·if·prelink·is·available. | ||
| 236 | ····if·test·-x·/usr/sbin/prelink;·then | ||
| 237 | ········/usr/sbin/prelink·-ua | ||
| 238 | ····fi | ||
| 239 | fi | ||
| 240 | if·grep·-q·-m1·-o·aes·/proc/cpuinfo;·then | ||
| 241 | » if·!·rpm·-q·--quiet·"dracut-fips-aesni"·;·then | ||
| 242 | ····yum·install·-y·"dracut-fips-aesni" | ||
| 243 | fi | ||
| 244 | fi | ||
| 245 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | ||
| 246 | ····yum·install·-y·"dracut-fips" | ||
| 247 | fi | ||
| 248 | dracut·-f | ||
| 249 | #·Correct·the·form·of·default·kernel·command·line·in··grub | ||
| 250 | if·grep·-q·'^GRUB_CMDLINE_LINUX=.*fips=.*"'··/etc/default/grub;·then | ||
| Max diff block lines reached; 716802/724426 bytes (98.95%) of diff not shown. | |||
| Offset 15123, 419 lines modified | Offset 15123, 419 lines modified | ||
| 0003b120:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b120:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b130:·2223·6964·6d35·3331·3022·2074·6162·696e··"#idm5310"·tabin | 0003b130:·2223·6964·6d35·3331·3022·2074·6162·696e··"#idm5310"·tabin | ||
| 0003b140:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b140:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b150:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b150:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b160:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b160:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b170:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b170:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b180:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b180:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b190:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b190:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b1a0:·6 | 0003b1a0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003b1b0:·3 | 0003b1b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b1c0:· | 0003b1c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b1d0:· | 0003b1d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b1e0:· | 0003b1e0:·6d35·3331·3022·3e3c·7072·653e·3c63·6f64··m5310"><pre><cod | ||
| 0003b1f0:· | 0003b1f0:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003b200:·6 | 0003b200:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003b210:·6 | 0003b210:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003b220:· | 0003b220:·6174·666f·726d·730a·6966·2021·2028·207b··atforms.if·!·(·{ | ||
| 0003b230:· | 0003b230:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b240:· | 0003b240:·6b65·726e·656c·203b·7d20·2661·6d70·3b26··kernel·;}·&& | ||
| 0003b250:· | 0003b250:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003b260:·7 | 0003b260:·6574·202d·7120·7270·6d2d·6f73·7472·6565··et·-q·rpm-ostree | ||
| 0003b270:· | 0003b270:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b280:· | 0003b280:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b290:· | 0003b290:·626f·6f74·6320·3b7d·2026·616d·703b·2661··bootc·;}·&&a | ||
| 0003b2a0:· | 0003b2a0:·6d70·3b20·7b20·2120·7270·6d20·2d2d·7175··mp;·{·!·rpm·--qu | ||
| 0003b2b0:· | 0003b2b0:·6965·7420·2d71·206f·7065·6e73·6869·6674··iet·-q·openshift | ||
| 0003b2c0:· | 0003b2c0:·2d6b·7562·656c·6574·203b·7d20·293b·2074··-kubelet·;}·);·t | ||
| 0003b2d0:· | 0003b2d0:·6865·6e0a·0a23·2046·696e·6420·7768·6963··hen..#·Find·whic | ||
| 0003b2e0:·6 | 0003b2e0:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | ||
| 0003b2f0:· | 0003b2f0:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | ||
| 0003b300:· | 0003b300:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | ||
| 0003b310:·6 | 0003b310:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | ||
| 0003b320:· | 0003b320:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | ||
| 0003b330:·6 | 0003b330:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | ||
| 0003b340:· | 0003b340:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | ||
| 0003b350:· | 0003b350:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003b360:· | 0003b360:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | ||
| 0003b370:· | 0003b370:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | ||
| 0003b380:· | 0003b380:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | ||
| 0003b390:· | 0003b390:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | ||
| 0003b3a0:· | 0003b3a0:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | ||
| 0003b3b0:· | 0003b3b0:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | ||
| 0003b3c0:· | 0003b3c0:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | ||
| 0003b3d0:· | 0003b3d0:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | ||
| 0003b3e0:· | 0003b3e0:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | ||
| 0003b3f0:· | 0003b3f0:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | ||
| 0003b400:· | 0003b400:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | ||
| 0003b410:· | 0003b410:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | ||
| 0003b420:· | 0003b420:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | ||
| 0003b430:· | 0003b430:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | ||
| 0003b440:· | 0003b440:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | ||
| 0003b450:· | 0003b450:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003b460:· | 0003b460:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | ||
| 0003b470:· | 0003b470:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003b480:· | 0003b480:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | ||
| 0003b490:· | 0003b490:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | ||
| 0003b4a0:· | 0003b4a0:·2079·756d·2072·6569·6e73·7461·6c6c·202d···yum·reinstall·- | ||
| 0003b4b0:· | 0003b4b0:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | ||
| 0003b4c0:· | 0003b4c0:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | ||
| 0003b4d0:· | 0003b4d0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | ||
| 0003b4e0:· | 0003b4e0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | ||
| 0003b4f0:·6 | 0003b4f0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | ||
| 0003b500:·7 | 0003b500:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | ||
| 0003b510:·6 | 0003b510:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | ||
| 0003b520:· | 0003b520:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003b530:·6 | 0003b530:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b540:· | 0003b540:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b550:· | 0003b550:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003b560:·65 | 0003b560:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b570:· | 0003b570:·3d22·2369·646d·3533·3131·2220·7461·6269··="#idm5311"·tabi | ||
| 0003b580:· | 0003b580:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b590:·7 | 0003b590:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b5a0:·6 | 0003b5a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b5b0:·6 | 0003b5b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b5c0:· | 0003b5c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b5d0:· | 0003b5d0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b5e0:· | 0003b5e0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003b5f0:· | 0003b5f0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003b600:· | 0003b600:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003b610:·7 | 0003b610:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b620:· | 0003b620:·3d22·6964·6d35·3331·3122·3e3c·7461·626c··="idm5311"><tabl | ||
| 0003b630:· | 0003b630:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003b640:· | 0003b640:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003b650:· | 0003b650:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003b660:· | 0003b660:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003b670:· | 0003b670:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003b680:·3 | 0003b680:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003b690:· | 0003b690:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b6a0:· | 0003b6a0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b6b0:· | 0003b6b0:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003b6c0:· | 0003b6c0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b6d0:· | 0003b6d0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b6e0:· | 0003b6e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b6f0:· | 0003b6f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003b700:· | 0003b700:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003b710:· | 0003b710:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b720:· | 0003b720:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003b730:·2 | 0003b730:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003b740:· | 0003b740:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003b750:· | 0003b750:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003b760:· | 0003b760:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003b770:·6 | 0003b770:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003b780:· | 0003b780:·3130·2e34·2e31·0a20·202d·2044·4953·412d··10.4.1.··-·DISA- | ||
| 0003b790:· | 0003b790:·5354·4947·2d4f·4c30·372d·3030·2d30·3130··STIG-OL07-00-010 | ||
| 0003b7a0:· | 0003b7a0:·3032·300a·2020·2d20·4e49·5354·2d38·3030··020.··-·NIST-800 | ||
| 0003b7b0:· | 0003b7b0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | ||
| 0003b7c0:· | 0003b7c0:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | ||
| 0003b7d0:· | 0003b7d0:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | ||
| 0003b7e0:· | 0003b7e0:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | ||
| 0003b7f0:· | 0003b7f0:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | ||
| 0003b800:· | 0003b800:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b810:· | 0003b810:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | ||
| 0003b820:· | 0003b820:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | ||
| 0003b830:· | 0003b830:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003b840:· | 0003b840:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | ||
| 0003b850:· | 0003b850:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | ||
| 0003b860:·2 | 0003b860:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | ||
| 0003b870:· | 0003b870:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | ||
| 0003b880:· | 0003b880:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | ||
| 0003b890:· | 0003b890:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | ||
| 0003b8a0:· | 0003b8a0:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | ||
| 0003b8b0:· | 0003b8b0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | ||
| 0003b8c0:· | 0003b8c0:·7469·6f6e·0a20·202d·206e·6f5f·7265·626f··tion.··-·no_rebo | ||
| 0003b8d0:·6f | 0003b8d0:·6f74·5f6e·6565·6465·640a·2020·2d20·7265··ot_needed.··-·re | ||
| 0003b8e0:· | 0003b8e0:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | ||
| 0003b8f0:· | 0003b8f0:·2020·2d20·7270·6d5f·7665·7269·6679·5f68····-·rpm_verify_h | ||
| Max diff block lines reached; 9746227/9802697 bytes (99.42%) of diff not shown. | |||
| Offset 97, 14 lines modified | Offset 97, 33 lines modified | ||
| 97 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 97 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 98 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 98 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 100 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 100 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 103 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule | 103 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule |
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 105 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 106 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 107 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 108 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 109 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 110 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 111 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 112 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 113 | fi | ||
| 114 | else | ||
| 115 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 116 | fi | ||
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 109 | -·name:·Gather·the·package·facts | 122 | -·name:·Gather·the·package·facts |
| 110 | ··package_facts: | 123 | ··package_facts: |
| Offset 277, 33 lines modified | Offset 296, 14 lines modified | ||
| 277 | ··-·PCI-DSSv4-11.5.2 | 296 | ··-·PCI-DSSv4-11.5.2 |
| 278 | ··-·high_complexity | 297 | ··-·high_complexity |
| 279 | ··-·high_severity | 298 | ··-·high_severity |
| 280 | ··-·medium_disruption | 299 | ··-·medium_disruption |
| 281 | ··-·no_reboot_needed | 300 | ··-·no_reboot_needed |
| 282 | ··-·restrict_strategy | 301 | ··-·restrict_strategy |
| 283 | ··-·rpm_verify_hashes | 302 | ··-·rpm_verify_hashes |
| 284 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 285 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 286 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 287 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 288 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 289 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 290 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 291 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 292 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 293 | fi | ||
| 294 | else | ||
| 295 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 296 | fi | ||
| 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 303 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 298 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 304 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 299 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 305 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 300 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 306 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 301 | $·rpm·-qf·FILENAME | 307 | $·rpm·-qf·FILENAME |
| 302 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 308 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 326, 14 lines modified | Offset 326, 50 lines modified | ||
| 326 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 326 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 327 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 327 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 328 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 328 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 329 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 329 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 330 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 330 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 331 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 331 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 332 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule | 332 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule |
| 333 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 334 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 335 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 336 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 337 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 338 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 339 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 340 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 341 | declare·-A·SETPERMS_RPM_DICT | ||
| 342 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 343 | #·is·expected·by·the·RPM·database | ||
| 344 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 345 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 346 | do | ||
| 347 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 348 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 349 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 350 | ········do | ||
| 351 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 352 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 353 | ········done | ||
| 354 | done | ||
| 355 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 356 | #·correct·values | ||
| 357 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 358 | do | ||
| 359 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 360 | done | ||
| 361 | else | ||
| 362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 363 | fi | ||
| 333 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 334 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 335 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 336 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 337 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 338 | -·name:·Gather·the·package·facts | 369 | -·name:·Gather·the·package·facts |
| 339 | ··package_facts: | 370 | ··package_facts: |
| Offset 449, 50 lines modified | Offset 485, 14 lines modified | ||
| 449 | ··-·PCI-DSSv4-11.5.2 | 485 | ··-·PCI-DSSv4-11.5.2 |
| 450 | ··-·high_complexity | 486 | ··-·high_complexity |
| 451 | ··-·high_severity | 487 | ··-·high_severity |
| 452 | ··-·medium_disruption | 488 | ··-·medium_disruption |
| 453 | ··-·no_reboot_needed | 489 | ··-·no_reboot_needed |
| 454 | ··-·restrict_strategy | 490 | ··-·restrict_strategy |
| 455 | ··-·rpm_verify_permissions | 491 | ··-·rpm_verify_permissions |
| 456 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 853629/861199 bytes (99.12%) of diff not shown. | |||
| Offset 14650, 177 lines modified | Offset 14650, 177 lines modified | ||
| 00039390:·7461·7267·6574·3d22·2369·646d·3839·3931··target="#idm8991 | 00039390:·7461·7267·6574·3d22·2369·646d·3839·3931··target="#idm8991 | ||
| 000393a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 000393a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 000393b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 000393b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 000393c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 000393c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 000393d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 000393d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 000393e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 000393e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 000393f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 000393f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00039400:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 00039400:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 00039410:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00039420:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00039430:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00039440:·6522·2069·643d·2269·646d·3839·3931·223e··e"·id="idm8991"> | |||
| 00039450:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00039460:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00039470:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 00039480:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 00039490:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 000394a0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 000394b0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 000394c0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 000394d0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 000394e0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 000394f0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 00039500:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 00039510:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00039520:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 00039530:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 00039540:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 00039550:·696e·7374·616c·6c5f·676c·6962·630a·0a63··install_glibc..c | |||
| 00039560:·6c61·7373·2069·6e73·7461·6c6c·5f67·6c69··lass·install_gli | |||
| 00039570:·6263·207b·0a20·2070·6163·6b61·6765·207b··bc·{.··package·{ | |||
| 00039580:·2027·676c·6962·6327·3a0a·2020·2020·656e···'glibc':.····en | |||
| 00039590:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 000395a0:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 000395b0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 000395c0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 000395d0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 000395e0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 000395f0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00039600:·2369·646d·3839·3932·2220·7461·6269·6e64··#idm8992"·tabind | |||
| 00039610:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00039620:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00039630:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00039640:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00039650:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00039660:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 00039 | 00039410:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | ||
| 00039420:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00039430:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00039440:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00039450:·3d22·6964·6d38·3939·3122·3e3c·7072·653e··="idm8991"><pre> | |||
| 00039460:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 00039470:·735d·5d0a·6e61·6d65·203d·2022·676c·6962··s]].name·=·"glib | |||
| 00039480:·6322·0a76·6572·7369·6f6e·203d·2022·2a22··c".version·=·"*" | |||
| 00039490:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 000394a0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 000394b0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 000394c0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 000394d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 000394e0:·743d·2223·6964·6d38·3939·3222·2074·6162··t="#idm8992"·tab | |||
| 000394f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00039500:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00039510:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00039520:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00039530:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00039540:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 00039550:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 00039 | 00039560:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 00039 | 00039570:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 00039 | 00039580:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 00039 | 00039590:·6964·6d38·3939·3222·3e3c·7461·626c·6520··idm8992"><table· | ||
| 00039 | 000395a0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 00039 | 000395b0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 00039 | 000395c0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 00039 | 000395d0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 00039 | 000395e0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 00039 | 000395f0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 00039 | 00039600:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 00039 | 00039610:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 00039 | 00039620:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 00039 | 00039630:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 00039 | 00039640:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 00039 | 00039650:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 00039 | 00039660:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 00039 | 00039670:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 00039 | 00039680:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 00039690:·3e0a·6966·2021·2072·706d·202d·7120·2d2d··>.if·!·rpm·-q·-- | |||
| 000396a0:·7175·6965·7420·2267·6c69·6263·2220·3b20··quiet·"glibc"·;· | |||
| 000396b0:·7468·656e·0a20·2020·2079·756d·2069·6e73··then.····yum·ins | |||
| 000396c0:·7461·6c6c·202d·7920·2267·6c69·6263·220a··tall·-y·"glibc". | |||
| 000397b0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 000397c0:·676c·6962·6320·6973·2069·6e73·7461·6c6c··glibc·is·install | |||
| 000397d0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 000397e0:·2020·6e61·6d65·3a20·676c·6962·630a·2020····name:·glibc.·· | |||
| 000397f0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 00039800:·0a20·2074·6167·733a·0a20·202d·2065·6e61··.··tags:.··-·ena | |||
| 00039810:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 00039820:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 00039830:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 00039840:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 00039850:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 00039860:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 00039870:·7061·636b·6167·655f·676c·6962·635f·696e··package_glibc_in | |||
| 00039880:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 00039890:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 000398a0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 000398b0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 000398c0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 000398d0:·612d·7461·7267·6574·3d22·2369·646d·3839··a-target="#idm89 | |||
| 000398e0:·3933·2220·7461·6269·6e64·6578·3d22·3022··93"·tabindex="0" | |||
| 000398f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 00039900:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00039910:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00039920:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 00039930:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 00039940:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 00039950:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 00039960:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00039970:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00039980:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00039990:·6964·3d22·6964·6d38·3939·3322·3e3c·7072··id="idm8993"><pr | |||
| 000399a0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 000399b0:·6765·735d·5d0a·6e61·6d65·203d·2022·676c··ges]].name·=·"gl | |||
| 000399c0:·6962·6322·0a76·6572·7369·6f6e·203d·2022··ibc".version·=·" | |||
| 00039 | 000396d0:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | ||
| 00039 | 000396e0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| Max diff block lines reached; 207334/230408 bytes (89.99%) of diff not shown. | |||
| Offset 64, 26 lines modified | Offset 64, 28 lines modified | ||
| 64 | The·package·glibc·is·installed·on·Linux·by·default,·but·the·glibc·version·might·not·be·sufficient·for·SAP.·Please·refer·to·SAP·note·of·your·Linux·version·for·the | 64 | The·package·glibc·is·installed·on·Linux·by·default,·but·the·glibc·version·might·not·be·sufficient·for·SAP.·Please·refer·to·SAP·note·of·your·Linux·version·for·the |
| 65 | minimum·requirement·on·glibc.·The·glibc·package·can·be·installed·with·the·following·command: | 65 | minimum·requirement·on·glibc.·The·glibc·package·can·be·installed·with·the·following·command: |
| 66 | $·sudo·yum·install·glibc | 66 | $·sudo·yum·install·glibc |
| 67 | Rationale:·The·glibc·package·contains·standard·C·and·math·libraries·used·by·multiple·programs·on·Linux.·The·glibc·shipped·with·first·release·of·each·major·Linux | 67 | Rationale:·The·glibc·package·contains·standard·C·and·math·libraries·used·by·multiple·programs·on·Linux.·The·glibc·shipped·with·first·release·of·each·major·Linux |
| 68 | ···········version·is·often·not·sufficient·for·SAP.·An·update·is·required·after·the·first·OS·installation. | 68 | ···········version·is·often·not·sufficient·for·SAP.·An·update·is·required·after·the·first·OS·installation. |
| 69 | Severity: ·medium | 69 | Severity: ·medium |
| 70 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_glibc_installed | 70 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_glibc_installed |
| 71 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 72 | [[packages]] | ||
| 73 | name·=·"glibc" | ||
| 74 | version·=·"*" | ||
| 71 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 75 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 72 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 76 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 73 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 77 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 74 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 78 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 75 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 79 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 76 | include·install_glibc | ||
| 80 | if·!·rpm·-q·--quiet·"glibc"·;·then | ||
| 81 | ····yum·install·-y·"glibc" | ||
| 82 | fi | ||
| 77 | class·install_glibc·{ | ||
| 78 | ··package·{·'glibc': | ||
| 79 | ····ensure·=>·'installed', | ||
| 80 | ··} | ||
| 81 | } | ||
| 82 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 83 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 83 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 84 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 84 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 85 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 85 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 86 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 86 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 87 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 87 | -·name:·Ensure·glibc·is·installed | 88 | -·name:·Ensure·glibc·is·installed |
| 88 | ··package: | 89 | ··package: |
| Offset 92, 55 lines modified | Offset 94, 55 lines modified | ||
| 92 | ··tags: | 94 | ··tags: |
| 93 | ··-·enable_strategy | 95 | ··-·enable_strategy |
| 94 | ··-·low_complexity | 96 | ··-·low_complexity |
| 95 | ··-·low_disruption | 97 | ··-·low_disruption |
| 96 | ··-·medium_severity | 98 | ··-·medium_severity |
| 97 | ··-·no_reboot_needed | 99 | ··-·no_reboot_needed |
| 98 | ··-·package_glibc_installed | 100 | ··-·package_glibc_installed |
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 100 | [[packages]] | ||
| 101 | name·=·"glibc" | ||
| 102 | version·=·"*" | ||
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 101 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 102 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 103 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 104 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 105 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 106 | package·--add=glibc | ||
| 108 | if·!·rpm·-q·--quiet·"glibc"·;·then | ||
| 109 | ····yum·install·-y·"glibc" | ||
| 110 | fi | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 112 | include·install_glibc | ||
| 116 | 113 | class·install_glibc·{ | |
| 114 | ··package·{·'glibc': | ||
| 115 | ····ensure·=>·'installed', | ||
| 116 | ··} | ||
| 117 | } | ||
| 117 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·u\x8uu\x8ui\x8id\x8dd\x8d·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 118 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·u\x8uu\x8ui\x8id\x8dd\x8d·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 118 | The·package·uuidd·is·not·installed·on·normal·Linux·distribution·by·default.·Applications·require·this·package·to·avoid·database·inconsistences·caused·by·duplicated | 119 | The·package·uuidd·is·not·installed·on·normal·Linux·distribution·by·default.·Applications·require·this·package·to·avoid·database·inconsistences·caused·by·duplicated |
| 119 | UUIDs.·Especially·in·banking·services·with·SAP·where·massive·UUIDs·are·created·in·a·short·time·period,·it·is·important·to·install·the·package·uuidd.·More·information | 120 | UUIDs.·Especially·in·banking·services·with·SAP·where·massive·UUIDs·are·created·in·a·short·time·period,·it·is·important·to·install·the·package·uuidd.·More·information |
| 120 | can·be·found·in·SAP·note·1391070.·The·uuidd·package·can·be·installed·with·the·following·command: | 121 | can·be·found·in·SAP·note·1391070.·The·uuidd·package·can·be·installed·with·the·following·command: |
| 121 | $·sudo·yum·install·uuidd | 122 | $·sudo·yum·install·uuidd |
| 122 | Rationale:·The·uuidd·package·contains·a·userspace·daemon·(uuidd)·which·is·used·to·generate·unique·identifiers·even·at·very·high·rates·on·SMP·systems. | 123 | Rationale:·The·uuidd·package·contains·a·userspace·daemon·(uuidd)·which·is·used·to·generate·unique·identifiers·even·at·very·high·rates·on·SMP·systems. |
| 123 | Severity: ·medium | 124 | Severity: ·medium |
| 124 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_uuidd_installed | 125 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_uuidd_installed |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | [[packages]] | ||
| 128 | name·=·"uuidd" | ||
| 129 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | include·install_uuidd | ||
| 135 | if·!·rpm·-q·--quiet·"uuidd"·;·then | ||
| 136 | ····yum·install·-y·"uuidd" | ||
| 137 | fi | ||
| 131 | class·install_uuidd·{ | ||
| 132 | ··package·{·'uuidd': | ||
| 133 | ····ensure·=>·'installed', | ||
| 134 | ··} | ||
| 135 | } | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 141 | -·name:·Ensure·uuidd·is·installed | 143 | -·name:·Ensure·uuidd·is·installed |
| 142 | ··package: | 144 | ··package: |
| Offset 149, 35 lines modified | Offset 151, 33 lines modified | ||
| 149 | ··tags: | 151 | ··tags: |
| 150 | ··-·enable_strategy | 152 | ··-·enable_strategy |
| 151 | ··-·low_complexity | 153 | ··-·low_complexity |
| 152 | ··-·low_disruption | 154 | ··-·low_disruption |
| 153 | ··-·medium_severity | 155 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 156 | ··-·no_reboot_needed |
| 155 | ··-·package_uuidd_installed | 157 | ··-·package_uuidd_installed |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"uuidd" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 163 | package·--add=uuidd | ||
| 165 | if·!·rpm·-q·--quiet·"uuidd"·;·then | ||
| 166 | ····yum·install·-y·"uuidd" | ||
| 167 | fi | ||
| Max diff block lines reached; 23545/29074 bytes (80.98%) of diff not shown. | |||
| Offset 15108, 419 lines modified | Offset 15108, 419 lines modified | ||
| 0003b030:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | 0003b030:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | ||
| 0003b040:·3331·3022·2074·6162·696e·6465·783d·2230··310"·tabindex="0 | 0003b040:·3331·3022·2074·6162·696e·6465·783d·2230··310"·tabindex="0 | ||
| 0003b050:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b050:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b060:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b060:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b070:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b070:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b080:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b080:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b090:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b090:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b0a0:·6961·7469·6f6e·20 | 0003b0a0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 0003b0b0:·6 | 0003b0b0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003b0c0:· | 0003b0c0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b0d0:· | 0003b0d0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b0e0:· | 0003b0e0:·7365·2220·6964·3d22·6964·6d35·3331·3022··se"·id="idm5310" | ||
| 0003b0f0:·3 | 0003b0f0:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | ||
| 0003b100:· | 0003b100:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | ||
| 0003b110:· | 0003b110:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | ||
| 0003b120:·6 | 0003b120:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | ||
| 0003b130:· | 0003b130:·730a·6966·2021·2028·207b·2072·706d·202d··s.if·!·(·{·rpm·- | ||
| 0003b140:· | 0003b140:·2d71·7569·6574·202d·7120·6b65·726e·656c··-quiet·-q·kernel | ||
| 0003b150:· | 0003b150:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b160:· | 0003b160:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b170:· | 0003b170:·7270·6d2d·6f73·7472·6565·203b·7d20·2661··rpm-ostree·;}·&a | ||
| 0003b180:· | 0003b180:·6d70·3b26·616d·703b·207b·2072·706d·202d··mp;&·{·rpm·- | ||
| 0003b190:· | 0003b190:·2d71·7569·6574·202d·7120·626f·6f74·6320··-quiet·-q·bootc· | ||
| 0003b1a0:·3 | 0003b1a0:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003b1b0:· | 0003b1b0:·2120·7270·6d20·2d2d·7175·6965·7420·2d71··!·rpm·--quiet·-q | ||
| 0003b1c0:· | 0003b1c0:·206f·7065·6e73·6869·6674·2d6b·7562·656c···openshift-kubel | ||
| 0003b1d0:·74 | 0003b1d0:·6574·203b·7d20·293b·2074·6865·6e0a·0a23··et·;}·);·then..# | ||
| 0003b1e0:·2 | 0003b1e0:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | ||
| 0003b1f0:· | 0003b1f0:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | ||
| 0003b200:·20 | 0003b200:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | ||
| 0003b210:·74 | 0003b210:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | ||
| 0003b220:· | 0003b220:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | ||
| 0003b230:·206 | 0003b230:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | ||
| 0003b240:· | 0003b240:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | ||
| 0003b250:· | 0003b250:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | ||
| 0003b260:· | 0003b260:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b270:· | 0003b270:·7368·3d22·2428·7270·6d20·2d56·6120·2d2d··sh="$(rpm·-Va·-- | ||
| 0003b280:· | 0003b280:·6e6f·636f·6e66·6967·207c·2067·7265·7020··noconfig·|·grep· | ||
| 0003b290:·2d | 0003b290:·2d45·2027·5e2e·2e35·2720·7c20·6177·6b20··-E·'^..5'·|·awk· | ||
| 0003b2a0:· | 0003b2a0:·277b·7072·696e·7420·244e·467d·2720·2922··'{print·$NF}'·)" | ||
| 0003b2b0:· | 0003b2b0:·0a0a·6966·205b·202d·6e20·2224·6669·6c65··..if·[·-n·"$file | ||
| 0003b2c0:·35 | 0003b2c0:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003b2d0:· | 0003b2d0:·5f68·6173·6822·205d·3b20·7468·656e·0a20··_hash"·];·then.· | ||
| 0003b2e0:· | 0003b2e0:·2020·2023·2046·726f·6d20·6669·6c65·7320·····#·From·files· | ||
| 0003b2f0:· | 0003b2f0:·6e61·6d65·7320·6765·7420·7061·636b·6167··names·get·packag | ||
| 0003b300:· | 0003b300:·6520·6e61·6d65·7320·616e·6420·6368·616e··e·names·and·chan | ||
| 0003b310:· | 0003b310:·6765·206e·6577·6c69·6e65·2074·6f20·7370··ge·newline·to·sp | ||
| 0003b320:· | 0003b320:·6163·652c·2062·6563·6175·7365·2072·706d··ace,·because·rpm | ||
| 0003b330:· | 0003b330:·2077·7269·7465·7320·6561·6368·2070·6163···writes·each·pac | ||
| 0003b340:· | 0003b340:·6b61·6765·2074·6f20·6e65·7720·6c69·6e65··kage·to·new·line | ||
| 0003b350:· | 0003b350:·0a20·2020·2070·6163·6b61·6765·735f·746f··.····packages_to | ||
| 0003b360:· | 0003b360:·5f72·6569·6e73·7461·6c6c·3d22·2428·7270··_reinstall="$(rp | ||
| 0003b370:·6 | 0003b370:·6d20·2d71·6620·2466·696c·6573·5f77·6974··m·-qf·$files_wit | ||
| 0003b380:· | 0003b380:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b390:·2 | 0003b390:·207c·2074·7220·275c·6e27·2027·2027·2922···|·tr·'\n'·'·')" | ||
| 0003b3a0:· | 0003b3a0:·0a0a·2020·2020·0a20·2020·2079·756d·2072··..····.····yum·r | ||
| 0003b3b0:· | 0003b3b0:·6569·6e73·7461·6c6c·202d·7920·2470·6163··einstall·-y·$pac | ||
| 0003b3c0:· | 0003b3c0:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | ||
| 0003b3d0:· | 0003b3d0:·6c6c·0a20·2020·200a·6669·0a0a·656c·7365··ll.····.fi..else | ||
| 0003b3e0:· | 0003b3e0:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | ||
| 0003b3f0:·65 | 0003b3f0:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | ||
| 0003b400:·6 | 0003b400:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | ||
| 0003b410:· | 0003b410:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | ||
| 0003b420:· | 0003b420:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | ||
| 0003b430:· | 0003b430:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003b440:·6 | 0003b440:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003b450:· | 0003b450:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003b460:· | 0003b460:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003b470:· | 0003b470:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b480:· | 0003b480:·3533·3131·2220·7461·6269·6e64·6578·3d22··5311"·tabindex=" | ||
| 0003b490:· | 0003b490:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b4a0:· | 0003b4a0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b4b0:·6 | 0003b4b0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b4c0:· | 0003b4c0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b4d0:· | 0003b4d0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b4e0:·6 | 0003b4e0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b4f0:· | 0003b4f0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003b500:·6 | 0003b500:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b510:·616e· | 0003b510:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b520:· | 0003b520:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | ||
| 0003b530:· | 0003b530:·3331·3122·3e3c·7461·626c·6520·636c·6173··311"><table·clas | ||
| 0003b540:· | 0003b540:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b550:· | 0003b550:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b560:· | 0003b560:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b570:· | 0003b570:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b580:· | 0003b580:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b590:· | 0003b590:·7464·3e68·6967·683c·2f74·643e·3c2f·7472··td>high</td></tr | ||
| 0003b5a0:·3 | 0003b5a0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b5b0:· | 0003b5b0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 0003b5c0:· | 0003b5c0:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0003b5d0:·3 | 0003b5d0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b5e0:·3 | 0003b5e0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b5f0:·2 | 0003b5f0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b600:· | 0003b600:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 0003b610:· | 0003b610:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 0003b620:· | 0003b620:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003b630:· | 0003b630:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | ||
| 0003b640:· | 0003b640:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | ||
| 0003b650:· | 0003b650:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | ||
| 0003b660:· | 0003b660:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | ||
| 0003b670:·3 | 0003b670:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | ||
| 0003b680:· | 0003b680:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003b690:· | 0003b690:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | ||
| 0003b6a0:· | 0003b6a0:·4c30·372d·3030·2d30·3130·3032·300a·2020··L07-00-010020.·· | ||
| 0003b6b0:·2 | 0003b6b0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003b6c0:· | 0003b6c0:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003b6d0:· | 0003b6d0:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003b6e0:· | 0003b6e0:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003b6f0:· | 0003b6f0:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003b700:· | 0003b700:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003b710:· | 0003b710:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003b720:· | 0003b720:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003b730:· | 0003b730:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003b740:· | 0003b740:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003b750:· | 0003b750:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b760:· | 0003b760:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003b770:·2 | 0003b770:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003b780:·2 | 0003b780:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003b790:· | 0003b790:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003b7a0:·6 | 0003b7a0:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003b7b0:·7 | 0003b7b0:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003b7c0:· | 0003b7c0:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003b7d0:·202 | 0003b7d0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003b7e0:·6 | 0003b7e0:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003b7f0:· | 0003b7f0:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003b800:· | 0003b800:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| Max diff block lines reached; 9455005/9511475 bytes (99.41%) of diff not shown. | |||
| Offset 95, 14 lines modified | Offset 95, 33 lines modified | ||
| 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 99 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 99 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule | 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule |
| 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 103 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 104 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 105 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 106 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 107 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 108 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 109 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 110 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 111 | fi | ||
| 112 | else | ||
| 113 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 114 | fi | ||
| 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 103 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 104 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 105 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 106 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 107 | -·name:·Gather·the·package·facts | 120 | -·name:·Gather·the·package·facts |
| 108 | ··package_facts: | 121 | ··package_facts: |
| Offset 275, 33 lines modified | Offset 294, 14 lines modified | ||
| 275 | ··-·PCI-DSSv4-11.5.2 | 294 | ··-·PCI-DSSv4-11.5.2 |
| 276 | ··-·high_complexity | 295 | ··-·high_complexity |
| 277 | ··-·high_severity | 296 | ··-·high_severity |
| 278 | ··-·medium_disruption | 297 | ··-·medium_disruption |
| 279 | ··-·no_reboot_needed | 298 | ··-·no_reboot_needed |
| 280 | ··-·restrict_strategy | 299 | ··-·restrict_strategy |
| 281 | ··-·rpm_verify_hashes | 300 | ··-·rpm_verify_hashes |
| 282 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 283 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 284 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 285 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 286 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 287 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 288 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 289 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 290 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 291 | fi | ||
| 292 | else | ||
| 293 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 294 | fi | ||
| 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 301 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 296 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 302 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 297 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 303 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 298 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 304 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 299 | $·rpm·-qf·FILENAME | 305 | $·rpm·-qf·FILENAME |
| 300 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 306 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 324, 14 lines modified | Offset 324, 50 lines modified | ||
| 324 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 324 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 327 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 327 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 328 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 328 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 329 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 329 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 330 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule | 330 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule |
| 331 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 332 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 333 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 334 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 335 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 336 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 337 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 338 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 339 | declare·-A·SETPERMS_RPM_DICT | ||
| 340 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 341 | #·is·expected·by·the·RPM·database | ||
| 342 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 343 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 344 | do | ||
| 345 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 346 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 347 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 348 | ········do | ||
| 349 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 350 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 351 | ········done | ||
| 352 | done | ||
| 353 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 354 | #·correct·values | ||
| 355 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 356 | do | ||
| 357 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 358 | done | ||
| 359 | else | ||
| 360 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 361 | fi | ||
| 331 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 362 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 332 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 363 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 333 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 364 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 334 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 365 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 335 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 366 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 336 | -·name:·Gather·the·package·facts | 367 | -·name:·Gather·the·package·facts |
| 337 | ··package_facts: | 368 | ··package_facts: |
| Offset 447, 50 lines modified | Offset 483, 14 lines modified | ||
| 447 | ··-·PCI-DSSv4-11.5.2 | 483 | ··-·PCI-DSSv4-11.5.2 |
| 448 | ··-·high_complexity | 484 | ··-·high_complexity |
| 449 | ··-·high_severity | 485 | ··-·high_severity |
| 450 | ··-·medium_disruption | 486 | ··-·medium_disruption |
| 451 | ··-·no_reboot_needed | 487 | ··-·no_reboot_needed |
| 452 | ··-·restrict_strategy | 488 | ··-·restrict_strategy |
| 453 | ··-·rpm_verify_permissions | 489 | ··-·rpm_verify_permissions |
| 454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 775254/782815 bytes (99.03%) of diff not shown. | |||
| Offset 15172, 419 lines modified | Offset 15172, 419 lines modified | ||
| 0003b430:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b430:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b440:·2369·646d·3533·3130·2220·7461·6269·6e64··#idm5310"·tabind | 0003b440:·2369·646d·3533·3130·2220·7461·6269·6e64··#idm5310"·tabind | ||
| 0003b450:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b450:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b460:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b460:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b470:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b470:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b480:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b480:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b490:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b490:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b4a0:·5265·6d65·6469·6174·696f·6e20· | 0003b4a0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003b4b0:·6 | 0003b4b0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | ||
| 0003b4c0:· | 0003b4c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b4d0:·7 | 0003b4d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b4e0:·6 | 0003b4e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b4f0:· | 0003b4f0:·3533·3130·223e·3c70·7265·3e3c·636f·6465··5310"><pre><code | ||
| 0003b500:· | 0003b500:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | ||
| 0003b510:· | 0003b510:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | ||
| 0003b520:· | 0003b520:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | ||
| 0003b530:· | 0003b530:·7466·6f72·6d73·0a69·6620·2120·2820·7b20··tforms.if·!·(·{· | ||
| 0003b540:·7 | 0003b540:·7270·6d20·2d2d·7175·6965·7420·2d71·206b··rpm·--quiet·-q·k | ||
| 0003b550:· | 0003b550:·6572·6e65·6c20·3b7d·2026·616d·703b·2661··ernel·;}·&&a | ||
| 0003b560:· | 0003b560:·6d70·3b20·7b20·7270·6d20·2d2d·7175·6965··mp;·{·rpm·--quie | ||
| 0003b570:·727 | 0003b570:·7420·2d71·2072·706d·2d6f·7374·7265·6520··t·-q·rpm-ostree· | ||
| 0003b580:·3 | 0003b580:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003b590:· | 0003b590:·7270·6d20·2d2d·7175·6965·7420·2d71·2062··rpm·--quiet·-q·b | ||
| 0003b5a0:· | 0003b5a0:·6f6f·7463·203b·7d20·2661·6d70·3b26·616d··ootc·;}·&&am | ||
| 0003b5b0:·7 | 0003b5b0:·703b·207b·2021·2072·706d·202d·2d71·7569··p;·{·!·rpm·--qui | ||
| 0003b5c0:· | 0003b5c0:·6574·202d·7120·6f70·656e·7368·6966·742d··et·-q·openshift- | ||
| 0003b5d0:·6 | 0003b5d0:·6b75·6265·6c65·7420·3b7d·2029·3b20·7468··kubelet·;}·);·th | ||
| 0003b5e0:· | 0003b5e0:·656e·0a0a·2320·4669·6e64·2077·6869·6368··en..#·Find·which | ||
| 0003b5f0:· | 0003b5f0:·2066·696c·6573·2068·6176·6520·696e·636f···files·have·inco | ||
| 0003b600:· | 0003b600:·7272·6563·7420·6861·7368·2028·6e6f·7420··rrect·hash·(not· | ||
| 0003b610:·6 | 0003b610:·696e·202f·6574·632c·2062·6563·6175·7365··in·/etc,·because | ||
| 0003b620:· | 0003b620:·206f·6620·7468·6520·7379·7374·656d·2072···of·the·system·r | ||
| 0003b630:·6 | 0003b630:·656c·6174·6564·2063·6f6e·6669·6720·6669··elated·config·fi | ||
| 0003b640:· | 0003b640:·6c65·7329·2061·6e64·2074·6865·6e20·6765··les)·and·then·ge | ||
| 0003b650:· | 0003b650:·7420·6669·6c65·7320·6e61·6d65·730a·6669··t·files·names.fi | ||
| 0003b660:· | 0003b660:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003b670:· | 0003b670:·6374·5f68·6173·683d·2224·2872·706d·202d··ct_hash="$(rpm·- | ||
| 0003b680:· | 0003b680:·5661·202d·2d6e·6f63·6f6e·6669·6720·7c20··Va·--noconfig·|· | ||
| 0003b690:· | 0003b690:·6772·6570·202d·4520·275e·2e2e·3527·207c··grep·-E·'^..5'·| | ||
| 0003b6a0:·20 | 0003b6a0:·2061·776b·2027·7b70·7269·6e74·2024·4e46···awk·'{print·$NF | ||
| 0003b6b0:· | 0003b6b0:·7d27·2029·220a·0a69·6620·5b20·2d6e·2022··}'·)"..if·[·-n·" | ||
| 0003b6c0:·2 | 0003b6c0:·2466·696c·6573·5f77·6974·685f·696e·636f··$files_with_inco | ||
| 0003b6d0:·2 | 0003b6d0:·7272·6563·745f·6861·7368·2220·5d3b·2074··rrect_hash"·];·t | ||
| 0003b6e0:· | 0003b6e0:·6865·6e0a·2020·2020·2320·4672·6f6d·2066··hen.····#·From·f | ||
| 0003b6f0:· | 0003b6f0:·696c·6573·206e·616d·6573·2067·6574·2070··iles·names·get·p | ||
| 0003b700:· | 0003b700:·6163·6b61·6765·206e·616d·6573·2061·6e64··ackage·names·and | ||
| 0003b710:· | 0003b710:·2063·6861·6e67·6520·6e65·776c·696e·6520···change·newline· | ||
| 0003b720:· | 0003b720:·746f·2073·7061·6365·2c20·6265·6361·7573··to·space,·becaus | ||
| 0003b730:· | 0003b730:·6520·7270·6d20·7772·6974·6573·2065·6163··e·rpm·writes·eac | ||
| 0003b740:· | 0003b740:·6820·7061·636b·6167·6520·746f·206e·6577··h·package·to·new | ||
| 0003b750:· | 0003b750:·206c·696e·650a·2020·2020·7061·636b·6167···line.····packag | ||
| 0003b760:·63 | 0003b760:·6573·5f74·6f5f·7265·696e·7374·616c·6c3d··es_to_reinstall= | ||
| 0003b770:· | 0003b770:·2224·2872·706d·202d·7166·2024·6669·6c65··"$(rpm·-qf·$file | ||
| 0003b780:· | 0003b780:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003b790:· | 0003b790:·5f68·6173·6820·7c20·7472·2027·5c6e·2720··_hash·|·tr·'\n'· | ||
| 0003b7a0:· | 0003b7a0:·2720·2729·220a·0a20·2020·200a·2020·2020··'·')"..····.···· | ||
| 0003b7b0:·7 | 0003b7b0:·7975·6d20·7265·696e·7374·616c·6c20·2d79··yum·reinstall·-y | ||
| 0003b7c0:·2 | 0003b7c0:·2024·7061·636b·6167·6573·5f74·6f5f·7265···$packages_to_re | ||
| 0003b7d0:·6 | 0003b7d0:·696e·7374·616c·6c0a·2020·2020·0a66·690a··install.····.fi. | ||
| 0003b7e0:· | 0003b7e0:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | ||
| 0003b7f0:·6d | 0003b7f0:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | ||
| 0003b800:·6 | 0003b800:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | ||
| 0003b810:· | 0003b810:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | ||
| 0003b820:·67 | 0003b820:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | ||
| 0003b830:· | 0003b830:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003b840:· | 0003b840:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003b850:·6 | 0003b850:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003b860:· | 0003b860:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003b870:· | 0003b870:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b880:· | 0003b880:·2223·6964·6d35·3331·3122·2074·6162·696e··"#idm5311"·tabin | ||
| 0003b890:· | 0003b890:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b8a0:·7 | 0003b8a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b8b0:·6 | 0003b8b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b8c0:· | 0003b8c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b8d0:·6 | 0003b8d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b8e0:·656 | 0003b8e0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b8f0:· | 0003b8f0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b900:· | 0003b900:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b910:· | 0003b910:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b920:·7 | 0003b920:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b930:· | 0003b930:·2269·646d·3533·3131·223e·3c74·6162·6c65··"idm5311"><table | ||
| 0003b940:·2 | 0003b940:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b950:·6 | 0003b950:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b960:·6 | 0003b960:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b970:· | 0003b970:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b980:· | 0003b980:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b990:· | 0003b990:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b9a0:· | 0003b9a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b9b0:· | 0003b9b0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b9c0:· | 0003b9c0:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b9d0:· | 0003b9d0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b9e0:· | 0003b9e0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b9f0:·2 | 0003b9f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003ba00:·3 | 0003ba00:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003ba10:· | 0003ba10:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003ba20:· | 0003ba20:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003ba30:· | 0003ba30:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003ba40:· | 0003ba40:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | ||
| 0003ba50:· | 0003ba50:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | ||
| 0003ba60:· | 0003ba60:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | ||
| 0003ba70:· | 0003ba70:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | ||
| 0003ba80:·6 | 0003ba80:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003ba90:· | 0003ba90:·302e·342e·310a·2020·2d20·4449·5341·2d53··0.4.1.··-·DISA-S | ||
| 0003baa0:· | 0003baa0:·5449·472d·4f4c·3037·2d30·302d·3031·3030··TIG-OL07-00-0100 | ||
| 0003bab0:· | 0003bab0:·3230·0a20·202d·204e·4953·542d·3830·302d··20.··-·NIST-800- | ||
| 0003bac0:· | 0003bac0:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003bad0:· | 0003bad0:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003bae0:· | 0003bae0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003baf0:· | 0003baf0:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | ||
| 0003bb00:·5 | 0003bb00:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | ||
| 0003bb10:· | 0003bb10:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bb20:· | 0003bb20:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003bb30:· | 0003bb30:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003bb40:· | 0003bb40:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003bb50:· | 0003bb50:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003bb60:· | 0003bb60:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003bb70:· | 0003bb70:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003bb80:·2 | 0003bb80:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003bb90:· | 0003bb90:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003bba0:· | 0003bba0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003bbb0:· | 0003bbb0:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| 0003bbc0:· | 0003bbc0:·2d20·6d65·6469·756d·5f64·6973·7275·7074··-·medium_disrupt | ||
| 0003bbd0:·6 | 0003bbd0:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | ||
| 0003bbe0:· | 0003bbe0:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | ||
| 0003bbf0:· | 0003bbf0:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | ||
| 0003bc00:· | 0003bc00:·202d·2072·706d·5f76·6572·6966·795f·6861···-·rpm_verify_ha | ||
| Max diff block lines reached; 21840912/21897382 bytes (99.74%) of diff not shown. | |||
| Offset 15191, 418 lines modified | Offset 15191, 418 lines modified | ||
| 0003b560:·6574·3d22·2369·646d·3533·3130·2220·7461··et="#idm5310"·ta | 0003b560:·6574·3d22·2369·646d·3533·3130·2220·7461··et="#idm5310"·ta | ||
| 0003b570:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b570:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b580:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b580:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b590:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b590:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b5a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b5a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b5b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b5b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | Diff chunk too large, falling back to line-by-line diff (404 lines added, 404 lines removed) | |
| 0003b5c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b5c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b5d0:· | 0003b5d0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 0003b5e0:· | 0003b5e0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b5f0:· | 0003b5f0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b600:· | 0003b600:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b610:· | 0003b610:·2269·646d·3533·3130·223e·3c70·7265·3e3c··"idm5310"><pre>< | ||
| 0003b620:·6 | 0003b620:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 0003b630:· | 0003b630:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | ||
| 0003b640:· | 0003b640:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | ||
| 0003b650:· | 0003b650:·2070·6c61·7466·6f72·6d73·0a69·6620·2120···platforms.if·!· | ||
| 0003b660:· | 0003b660:·2820·7b20·7270·6d20·2d2d·7175·6965·7420··(·{·rpm·--quiet· | ||
| 0003b670:· | 0003b670:·2d71·206b·6572·6e65·6c20·3b7d·2026·616d··-q·kernel·;}·&am | ||
| 0003b680:· | 0003b680:·703b·2661·6d70·3b20·7b20·7270·6d20·2d2d··p;&·{·rpm·-- | ||
| 0003b690:· | 0003b690:·7175·6965·7420·2d71·2072·706d·2d6f·7374··quiet·-q·rpm-ost | ||
| 0003b6a0:· | 0003b6a0:·7265·6520·3b7d·2026·616d·703b·2661·6d70··ree·;}·&& | ||
| 0003b6b0:·3 | 0003b6b0:·3b20·7b20·7270·6d20·2d2d·7175·6965·7420··;·{·rpm·--quiet· | ||
| 0003b6c0:· | 0003b6c0:·2d71·2062·6f6f·7463·203b·7d20·2661·6d70··-q·bootc·;}·& | ||
| 0003b6d0:· | 0003b6d0:·3b26·616d·703b·207b·2021·2072·706d·202d··;&·{·!·rpm·- | ||
| 0003b6e0:· | 0003b6e0:·2d71·7569·6574·202d·7120·6f70·656e·7368··-quiet·-q·opensh | ||
| 0003b6f0:·6 | 0003b6f0:·6966·742d·6b75·6265·6c65·7420·3b7d·2029··ift-kubelet·;}·) | ||
| 0003b700:· | 0003b700:·3b20·7468·656e·0a0a·2320·4669·6e64·2077··;·then..#·Find·w | ||
| 0003b710:· | 0003b710:·6869·6368·2066·696c·6573·2068·6176·6520··hich·files·have· | ||
| 0003b720:·6 | 0003b720:·696e·636f·7272·6563·7420·6861·7368·2028··incorrect·hash·( | ||
| 0003b730:·6 | 0003b730:·6e6f·7420·696e·202f·6574·632c·2062·6563··not·in·/etc,·bec | ||
| 0003b740:·6 | 0003b740:·6175·7365·206f·6620·7468·6520·7379·7374··ause·of·the·syst | ||
| 0003b750:· | 0003b750:·656d·2072·656c·6174·6564·2063·6f6e·6669··em·related·confi | ||
| 0003b760:· | 0003b760:·6720·6669·6c65·7329·2061·6e64·2074·6865··g·files)·and·the | ||
| 0003b770:· | 0003b770:·6e20·6765·7420·6669·6c65·7320·6e61·6d65··n·get·files·name | ||
| 0003b780:· | 0003b780:·730a·6669·6c65·735f·7769·7468·5f69·6e63··s.files_with_inc | ||
| 0003b790:· | 0003b790:·6f72·7265·6374·5f68·6173·683d·2224·2872··orrect_hash="$(r | ||
| 0003b7a0:· | 0003b7a0:·706d·202d·5661·202d·2d6e·6f63·6f6e·6669··pm·-Va·--noconfi | ||
| 0003b7b0:· | 0003b7b0:·6720·7c20·6772·6570·202d·4520·275e·2e2e··g·|·grep·-E·'^.. | ||
| 0003b7c0:·3 | 0003b7c0:·3527·207c·2061·776b·2027·7b70·7269·6e74··5'·|·awk·'{print | ||
| 0003b7d0:·2 | 0003b7d0:·2024·4e46·7d27·2029·220a·0a69·6620·5b20···$NF}'·)"..if·[· | ||
| 0003b7e0:· | 0003b7e0:·2d6e·2022·2466·696c·6573·5f77·6974·685f··-n·"$files_with_ | ||
| 0003b7f0:· | 0003b7f0:·696e·636f·7272·6563·745f·6861·7368·2220··incorrect_hash"· | ||
| 0003b800:· | 0003b800:·5d3b·2074·6865·6e0a·2020·2020·2320·4672··];·then.····#·Fr | ||
| 0003b810:· | 0003b810:·6f6d·2066·696c·6573·206e·616d·6573·2067··om·files·names·g | ||
| 0003b820:· | 0003b820:·6574·2070·6163·6b61·6765·206e·616d·6573··et·package·names | ||
| 0003b830:·2 | 0003b830:·2061·6e64·2063·6861·6e67·6520·6e65·776c···and·change·newl | ||
| 0003b840:· | 0003b840:·696e·6520·746f·2073·7061·6365·2c20·6265··ine·to·space,·be | ||
| 0003b850:· | 0003b850:·6361·7573·6520·7270·6d20·7772·6974·6573··cause·rpm·writes | ||
| 0003b860:·2 | 0003b860:·2065·6163·6820·7061·636b·6167·6520·746f···each·package·to | ||
| 0003b870:· | 0003b870:·206e·6577·206c·696e·650a·2020·2020·7061···new·line.····pa | ||
| 0003b880:·6 | 0003b880:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | ||
| 0003b890:· | 0003b890:·616c·6c3d·2224·2872·706d·202d·7166·2024··all="$(rpm·-qf·$ | ||
| 0003b8a0:· | 0003b8a0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | ||
| 0003b8b0:·7 | 0003b8b0:·7265·6374·5f68·6173·6820·7c20·7472·2027··rect_hash·|·tr·' | ||
| 0003b8c0:· | 0003b8c0:·5c6e·2720·2720·2729·220a·0a20·2020·200a··\n'·'·')"..····. | ||
| 0003b8d0:· | 0003b8d0:·2020·2020·7975·6d20·7265·696e·7374·616c······yum·reinstal | ||
| 0003b8e0:· | 0003b8e0:·6c20·2d79·2024·7061·636b·6167·6573·5f74··l·-y·$packages_t | ||
| 0003b8f0:· | 0003b8f0:·6f5f·7265·696e·7374·616c·6c0a·2020·2020··o_reinstall.···· | ||
| 0003b900:· | 0003b900:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | ||
| 0003b910:· | 0003b910:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | ||
| 0003b920:· | 0003b920:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | ||
| 0003b930:· | 0003b930:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | ||
| 0003b940:· | 0003b940:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | ||
| 0003b950:·6 | 0003b950:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | ||
| 0003b960:· | 0003b960:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003b970:· | 0003b970:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003b980:·20 | 0003b980:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003b990:·6 | 0003b990:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003b9a0:·6765·7 | 0003b9a0:·6765·743d·2223·6964·6d35·3331·3122·2074··get="#idm5311"·t | ||
| 0003b9b0:· | 0003b9b0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b9c0:· | 0003b9c0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b9d0:· | 0003b9d0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b9e0:· | 0003b9e0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b9f0:·7 | 0003b9f0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003ba00:·2 | 0003ba00:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003ba10:· | 0003ba10:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003ba20:· | 0003ba20:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003ba30:·20 | 0003ba30:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003ba40:· | 0003ba40:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003ba50:·20 | 0003ba50:·2069·643d·2269·646d·3533·3131·223e·3c74···id="idm5311"><t | ||
| 0003ba60:·6 | 0003ba60:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003ba70:· | 0003ba70:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003ba80:· | 0003ba80:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003ba90:· | 0003ba90:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003baa0:· | 0003baa0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003bab0:· | 0003bab0:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | ||
| 0003bac0:· | 0003bac0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bad0:· | 0003bad0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003bae0:· | 0003bae0:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 0003baf0:·3 | 0003baf0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003bb00:· | 0003bb00:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003bb10:· | 0003bb10:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003bb20:·3 | 0003bb20:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003bb30:· | 0003bb30:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003bb40:·2 | 0003bb40:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003bb50:·3 | 0003bb50:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003bb60:· | 0003bb60:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | ||
| 0003bb70:· | 0003bb70:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | ||
| 0003bb80:·6 | 0003bb80:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | ||
| 0003bb90:· | 0003bb90:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | ||
| 0003bba0:·20 | 0003bba0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 0003bbb0:· | 0003bbb0:·2d35·2e31·302e·342e·310a·2020·2d20·4449··-5.10.4.1.··-·DI | ||
| 0003bbc0:· | 0003bbc0:·5341·2d53·5449·472d·4f4c·3037·2d30·302d··SA-STIG-OL07-00- | ||
| 0003bbd0:· | 0003bbd0:·3031·3030·3230·0a20·202d·204e·4953·542d··010020.··-·NIST- | ||
| 0003bbe0:· | 0003bbe0:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003bbf0:·2d20· | 0003bbf0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003bc00:· | 0003bc00:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003bc10:· | 0003bc10:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003bc20:· | 0003bc20:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003bc30:· | 0003bc30:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003bc40:· | 0003bc40:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003bc50:·2 | 0003bc50:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003bc60:· | 0003bc60:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003bc70:· | 0003bc70:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003bc80:· | 0003bc80:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003bc90:· | 0003bc90:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003bca0:· | 0003bca0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003bcb0:· | 0003bcb0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003bcc0:·6 | 0003bcc0:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003bcd0:· | 0003bcd0:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003bce0:· | 0003bce0:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003bcf0:·7 | 0003bcf0:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003bd00:· | 0003bd00:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003bd10:· | 0003bd10:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003bd20:·6 | 0003bd20:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003bd30:·7 | 0003bd30:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| Max diff block lines reached; 21825150/21881482 bytes (99.74%) of diff not shown. | |||
| Offset 15058, 222 lines modified | Offset 15058, 222 lines modified | ||
| 0003ad10:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003ad10:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003ad20:·3d22·2369·646d·3536·3936·2220·7461·6269··="#idm5696"·tabi | 0003ad20:·3d22·2369·646d·3536·3936·2220·7461·6269··="#idm5696"·tabi | ||
| 0003ad30:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ad30:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003ad40:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003ad40:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ad50:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ad50:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ad60:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ad60:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ad70:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ad70:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ad80:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003ad90:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003ada0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003adb0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003adc0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003add0:·2269·646d·3536·3936·223e·3c74·6162·6c65··"idm5696"><table | |||
| 0003ade0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003adf0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003ae00:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003ae10:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003ae20:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003ae30:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ae40:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003ae50:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003ae60:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003ae70:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003ae80:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003ae90:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003aea0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003aeb0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003aec0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003aed0:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003aee0:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003aef0:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003af00:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003af10:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003af20:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003af30:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003af40:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003af50:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003af60:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003af70:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003af80:·6172·6765·743d·2223·6964·6d35·3639·3722··arget="#idm5697" | |||
| 0003af90:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003afa0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003afb0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003afc0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003afd0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003afe0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003aff0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b000:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b010:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b020:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b030:·6522·2069·643d·2269·646d·3536·3937·223e··e"·id="idm5697"> | |||
| 0003b040:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b050:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b060:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b070:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b080:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b090:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b0a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b0b0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b0c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b0d0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b0e0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b0f0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b100:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b110:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b120:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b130:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b140:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b150:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b160:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b170:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b180:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b190:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b1a0:·5449·472d·4f4c·3038·2d30·302d·3031·3033··TIG-OL08-00-0103 | |||
| 0003b1b0:·3539·0a20·202d·204e·4953·542d·3830·302d··59.··-·NIST-800- | |||
| 0003b1c0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b1d0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b1e0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b1f0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b200:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b210:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b220:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b230:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b240:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b250:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b260:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b270:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b280:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b290:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b2a0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b2b0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b2c0:·740a·2020·7768·656e·3a20·2822·6b65·726e··t.··when:·("kern | |||
| 0003b2d0:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003b2e0:·6163·7473·2e70·6163·6b61·6765·7320·6f72··acts.packages·or | |||
| 0003b2f0:·2022·6b65·726e·656c·2d75·656b·2220·696e···"kernel-uek"·in | |||
| 0003b300:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003b310:·6163·6b61·6765·7329·0a20·2074·6167·733a··ackages).··tags: | |||
| 0003b320:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b330:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b340:·2d4f·4c30·382d·3030·2d30·3130·3335·390a··-OL08-00-010359. | |||
| 0003b350:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b360:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b370:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b380:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b390:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b3a0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b3b0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b3c0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b3d0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b3e0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b3f0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b400:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b410:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b420:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b430:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b440:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b450:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b460:·3d22·2369·646d·3536·3938·2220·7461·6269··="#idm5698"·tabi | |||
| 0003b470:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b480:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b490:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b4a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b4b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003 | 0003ad80:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003 | 0003ad90:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003 | 0003ada0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003 | 0003adb0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| Max diff block lines reached; 22926548/22955832 bytes (99.87%) of diff not shown. | |||
| Offset 15064, 221 lines modified | Offset 15064, 221 lines modified | ||
| 0003ad70:·6765·743d·2223·6964·6d35·3639·3622·2074··get="#idm5696"·t | 0003ad70:·6765·743d·2223·6964·6d35·3639·3622·2074··get="#idm5696"·t | ||
| 0003ad80:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ad80:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ad90:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ad90:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ada0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ada0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003adb0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003adb0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003adc0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003adc0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003add0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003add0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003ade0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003adf0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003ae00:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003ae10:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003ae20:·6964·3d22·6964·6d35·3639·3622·3e3c·7461··id="idm5696"><ta | |||
| 0003ae30:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003ae40:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003ae50:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003ae60:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003ae70:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003ae80:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003ae90:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003aea0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003aeb0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003aec0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003aed0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003aee0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003aef0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003af00:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003af10:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003af20:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003af30:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003af40:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003af50:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003af60:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003af70:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003af80:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003af90:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003afa0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003afb0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003afc0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003afd0:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | |||
| 0003afe0:·3937·2220·7461·6269·6e64·6578·3d22·3022··97"·tabindex="0" | |||
| 0003aff0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b000:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b010:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b020:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b030:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b040:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b050:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b060:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b070:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b080:·6170·7365·2220·6964·3d22·6964·6d35·3639··apse"·id="idm569 | |||
| 0003b090:·3722·3e3c·7461·626c·6520·636c·6173·733d··7"><table·class= | |||
| 0003b0a0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b0b0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b0c0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b0d0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b0e0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b0f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b100:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b110:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b120:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b130:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b140:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b150:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b160:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b170:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b180:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b190:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b1a0:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b1b0:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b1c0:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b1d0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b1e0:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b1f0:·412d·5354·4947·2d4f·4c30·382d·3030·2d30··A-STIG-OL08-00-0 | |||
| 0003b200:·3130·3335·390a·2020·2d20·4e49·5354·2d38··10359.··-·NIST-8 | |||
| 0003b210:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b220:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b230:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b240:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b250:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b260:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b270:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b280:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b290:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b2a0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b2b0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b2c0:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003b2d0:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b2e0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b2f0:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b300:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b310:·7365·6e74·0a20·2077·6865·6e3a·2028·226b··sent.··when:·("k | |||
| 0003b320:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | |||
| 0003b330:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003b340:·206f·7220·226b·6572·6e65·6c2d·7565·6b22···or·"kernel-uek" | |||
| 0003b350:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003b360:·732e·7061·636b·6167·6573·290a·2020·7461··s.packages).··ta | |||
| 0003b370:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b380:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b390:·5449·472d·4f4c·3038·2d30·302d·3031·3033··TIG-OL08-00-0103 | |||
| 0003b3a0:·3539·0a20·202d·204e·4953·542d·3830·302d··59.··-·NIST-800- | |||
| 0003b3b0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b3c0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b3d0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b3e0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b3f0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b400:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b410:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b420:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b430:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b440:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b450:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b460:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b470:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b480:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b490:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b4a0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b4b0:·6765·743d·2223·6964·6d35·3639·3822·2074··get="#idm5698"·t | |||
| 0003b4c0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b4d0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b4e0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b4f0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b500:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b510:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003 | 0003ade0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003 | 0003adf0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | ||
| 0003 | 0003ae00:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003 | 0003ae10:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| Max diff block lines reached; 23232998/23262144 bytes (99.87%) of diff not shown. | |||
| Offset 15054, 221 lines modified | Offset 15054, 221 lines modified | ||
| 0003acd0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003acd0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ace0:·6964·6d35·3639·3622·2074·6162·696e·6465··idm5696"·tabinde | 0003ace0:·6964·6d35·3639·3622·2074·6162·696e·6465··idm5696"·tabinde | ||
| 0003acf0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003acf0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003ad00:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003ad00:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003ad10:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003ad10:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003ad20:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003ad20:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003ad30:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003ad30:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003ad40:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003ad50:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003ad60:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003ad70:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003ad80:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ad90:·6d35·3639·3622·3e3c·7461·626c·6520·636c··m5696"><table·cl | |||
| 0003ada0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003adb0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003adc0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003add0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ade0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003adf0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ae00:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003ae10:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003ae20:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ae30:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003ae40:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003ae50:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003ae60:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003ae70:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003ae80:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003ae90:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003aea0:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003aeb0:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003aec0:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003aed0:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003aee0:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003aef0:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003af00:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003af10:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003af20:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003af30:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003af40:·6574·3d22·2369·646d·3536·3937·2220·7461··et="#idm5697"·ta | |||
| 0003af50:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003af60:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003af70:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003af80:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003af90:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003afa0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003afb0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003afc0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003afd0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003afe0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003aff0:·6964·3d22·6964·6d35·3639·3722·3e3c·7461··id="idm5697"><ta | |||
| 0003b000:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b010:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b020:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b030:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b040:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b050:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b060:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b070:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b080:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b090:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b0a0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b0b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b0c0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b0d0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b0e0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b0f0:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b100:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b110:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b120:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b130:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b140:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b150:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b160:·2d4f·4c30·382d·3030·2d30·3130·3335·390a··-OL08-00-010359. | |||
| 0003b170:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b180:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b190:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b1a0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b1b0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b1c0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b1d0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b1e0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b1f0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b200:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b210:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b220:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b230:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003b240:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b250:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b260:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b270:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b280:·2077·6865·6e3a·2028·226b·6572·6e65·6c22···when:·("kernel" | |||
| 0003b290:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003b2a0:·732e·7061·636b·6167·6573·206f·7220·226b··s.packages·or·"k | |||
| 0003b2b0:·6572·6e65·6c2d·7565·6b22·2069·6e20·616e··ernel-uek"·in·an | |||
| 0003b2c0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003b2d0:·6167·6573·290a·2020·7461·6773·3a0a·2020··ages).··tags:.·· | |||
| 0003b2e0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b2f0:·2020·2d20·4449·5341·2d53·5449·472d·4f4c····-·DISA-STIG-OL | |||
| 0003b300:·3038·2d30·302d·3031·3033·3539·0a20·202d··08-00-010359.··- | |||
| 0003b310:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b320:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b330:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b340:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b350:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b360:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b370:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b380:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b390:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b3a0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b3b0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b3c0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b3d0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b3e0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b3f0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b400:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b410:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b420:·6964·6d35·3639·3822·2074·6162·696e·6465··idm5698"·tabinde | |||
| 0003b430:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b440:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b450:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b460:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b470:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003 | 0003ad40:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003 | 0003ad50:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003 | 0003ad60:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003 | 0003ad70:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| Max diff block lines reached; 9928777/9957923 bytes (99.71%) of diff not shown. | |||
| Offset 115, 26 lines modified | Offset 115, 34 lines modified | ||
| 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | incl | 131 | #·Remediation·is·applicable·only·in·certain·platforms |
| 132 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 128 | class·install_aide·{ | ||
| 129 | ··package·{·'aide': | ||
| 130 | ····ensure·=>·'installed', | ||
| 131 | ··} | ||
| 132 | 133 | if·!·rpm·-q·--quiet·"aide"·;·then | |
| 134 | ····yum·install·-y·"aide" | ||
| 135 | fi | ||
| 136 | else | ||
| 137 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 138 | fi | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | -·name:·Gather·the·package·facts | 144 | -·name:·Gather·the·package·facts |
| 139 | ··package_facts: | 145 | ··package_facts: |
| Offset 165, 41 lines modified | Offset 173, 33 lines modified | ||
| 165 | ··-·PCI-DSSv4-11.5.2 | 173 | ··-·PCI-DSSv4-11.5.2 |
| 166 | ··-·enable_strategy | 174 | ··-·enable_strategy |
| 167 | ··-·low_complexity | 175 | ··-·low_complexity |
| 168 | ··-·low_disruption | 176 | ··-·low_disruption |
| 169 | ··-·medium_severity | 177 | ··-·medium_severity |
| 170 | ··-·no_reboot_needed | 178 | ··-·no_reboot_needed |
| 171 | ··-·package_aide_installed | 179 | ··-·package_aide_installed |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 182 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 183 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 184 | ····yum·install·-y·"aide" | ||
| 185 | fi | ||
| 185 | package·--add=aide | ||
| 186 | else | ||
| 187 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 188 | fi | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 191 | include·install_aide | ||
| 194 | 192 | class·install_aide·{ | |
| 193 | ··package·{·'aide': | ||
| 194 | ····ensure·=>·'installed', | ||
| 195 | ··} | ||
| 196 | } | ||
| 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 197 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 196 | Run·the·following·command·to·generate·a·new·database: | 198 | Run·the·following·command·to·generate·a·new·database: |
| 197 | $·sudo·/usr/sbin/aide·--init | 199 | $·sudo·/usr/sbin/aide·--init |
| 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 200 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 199 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 201 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 200 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 202 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 201 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 203 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 225, 14 lines modified | Offset 225, 28 lines modified | ||
| 225 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 225 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 228 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 228 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 229 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 229 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 230 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 230 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 231 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 231 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 232 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 233 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 234 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 235 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 236 | ····yum·install·-y·"aide" | ||
| 237 | fi | ||
| 238 | /usr/sbin/aide·--init | ||
| 239 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 240 | else | ||
| 241 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 242 | fi | ||
| 232 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 243 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 233 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 244 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 234 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 245 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 235 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 246 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 236 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 247 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 237 | -·name:·Gather·the·package·facts | 248 | -·name:·Gather·the·package·facts |
| 238 | ··package_facts: | 249 | ··package_facts: |
| Offset 322, 28 lines modified | Offset 336, 14 lines modified | ||
| 322 | ··-·PCI-DSSv4-11.5.2 | 336 | ··-·PCI-DSSv4-11.5.2 |
| 323 | ··-·aide_build_database | 337 | ··-·aide_build_database |
| 324 | ··-·low_complexity | 338 | ··-·low_complexity |
| 325 | ··-·low_disruption | 339 | ··-·low_disruption |
| 326 | ··-·medium_severity | 340 | ··-·medium_severity |
| 327 | ··-·no_reboot_needed | 341 | ··-·no_reboot_needed |
| 328 | ··-·restrict_strategy | 342 | ··-·restrict_strategy |
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 330 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 331 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| Max diff block lines reached; 1069669/1075088 bytes (99.50%) of diff not shown. | |||
| Offset 14725, 228 lines modified | Offset 14725, 228 lines modified | ||
| 00039840:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 00039840:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 00039850:·646d·3130·3539·3722·2074·6162·696e·6465··dm10597"·tabinde | 00039850:·646d·3130·3539·3722·2074·6162·696e·6465··dm10597"·tabinde | ||
| 00039860:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 00039860:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 00039870:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 00039870:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 00039880:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 00039880:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 00039890:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 00039890:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 000398a0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 000398a0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 000398b0:·656d·6564·6961·7469·6f6e·20 | 000398b0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 000398c0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 000398d0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 000398e0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 000398f0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00039900:·7073·6522·2069·643d·2269·646d·3130·3539··pse"·id="idm1059 | |||
| 000398c0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 000398d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 000398e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 000398f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00039900:·6d31·3035·3937·223e·3c74·6162·6c65·2063··m10597"><table·c | |||
| 00039910:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00039920:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00039930:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00039940:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00039950:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00039960:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00039970:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00039980:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00039990:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 000399a0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 000399b0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 000399c0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 000399d0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 000399e0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 000399 | 00039910:·3722·3e3c·7072·653e·3c63·6f64·653e·0a5b··7"><pre><code>.[ | ||
| 00039 | 00039920:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | ||
| 00039 | 00039930:·203d·2022·646e·662d·6175·746f·6d61·7469···=·"dnf-automati | ||
| 00039940:·6322·0a76·6572·7369·6f6e·203d·2022·2a22··c".version·=·"*" | |||
| 00039950:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00039960:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00039970:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00039980:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00039990:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 000399a0:·743d·2223·6964·6d31·3035·3938·2220·7461··t="#idm10598"·ta | |||
| 000399b0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 000399c0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 000399d0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 000399e0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 000399f0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00039a00:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00039a10:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 00039a20:·6c61·7373·2069·6e73·7461·6c6c·5f64·6e66··lass·install_dnf | |||
| 00039a30:·2d61·7574·6f6d·6174·6963·207b·0a20·2070··-automatic·{.··p | |||
| 00039a40:·6163·6b61·6765·207b·2027·646e·662d·6175··ackage·{·'dnf-au | |||
| 00039a50:·746f·6d61·7469·6327·3a0a·2020·2020·656e··tomatic':.····en | |||
| 00039a60:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 00039a70:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 00039a80:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00039a90:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00039aa0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00039ab0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00039ac0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00039ad0:·2369·646d·3130·3539·3822·2074·6162·696e··#idm10598"·tabin | |||
| 00039ae0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00039af0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00039b00:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00039b10:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00039b20:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 00039b30:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 00039b40:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 00039 | 00039a20:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 00039 | 00039a30:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 00039 | 00039a40:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 00039 | 00039a50:·2269·646d·3130·3539·3822·3e3c·7461·626c··"idm10598"><tabl | ||
| 00039 | 00039a60:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 00039 | 00039a70:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 00039 | 00039a80:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 00039 | 00039a90:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 00039 | 00039aa0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 00039 | 00039ab0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 00039 | 00039ac0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 00039 | 00039ad0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 00039 | 00039ae0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 00039 | 00039af0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 00039 | 00039b00:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 00039 | 00039b10:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 00039 | 00039b20:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 00039 | 00039b30:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 00039 | 00039b40:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 00039b50:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 00039b60:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 00039b70:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 00039b80:·6c61·7466·6f72·6d73·0a69·6620·2120·2820··latforms.if·!·(· | |||
| 00039b90:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | |||
| 00039ba0:·206b·6572·6e65·6c20·3b7d·2026·616d·703b···kernel·;}·& | |||
| 00039bb0:·2661·6d70·3b20·7b20·7270·6d20·2d2d·7175··&·{·rpm·--qu | |||
| 00039bc0:·6965·7420·2d71·2072·706d·2d6f·7374·7265··iet·-q·rpm-ostre | |||
| 00039bd0:·6520·3b7d·2026·616d·703b·2661·6d70·3b20··e·;}·&&· | |||
| 00039be0:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | |||
| 00039bf0:·2062·6f6f·7463·203b·7d20·2661·6d70·3b26···bootc·;}·&& | |||
| 00039c00:·616d·703b·207b·2021·2072·706d·202d·2d71··amp;·{·!·rpm·--q | |||
| 00039c10:·7569·6574·202d·7120·6f70·656e·7368·6966··uiet·-q·openshif | |||
| 00039c20:·742d·6b75·6265·6c65·7420·3b7d·2029·3b20··t-kubelet·;}·);· | |||
| 00039c30:·7468·656e·0a0a·6966·2021·2072·706d·202d··then..if·!·rpm·- | |||
| 00039c40:·7120·2d2d·7175·6965·7420·2264·6e66·2d61··q·--quiet·"dnf-a | |||
| 00039c50:·7574·6f6d·6174·6963·2220·3b20·7468·656e··utomatic"·;·then | |||
| 00039c60:·0a20·2020·2079·756d·2069·6e73·7461·6c6c··.····yum·install | |||
| 00039c70:·202d·7920·2264·6e66·2d61·7574·6f6d·6174···-y·"dnf-automat | |||
| 00039c80:·6963·220a·6669·0a0a·656c·7365·0a20·2020··ic".fi..else.··· | |||
| 00039c90:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 00039ca0:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | |||
| 00039cb0:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 00039cc0:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 00039cd0:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | |||
| 00039c80:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 00039c90:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 00039ca0:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 00039cb0:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 00039cc0:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 00039cd0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 00039ce0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 00039cf0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 00039d00:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 00039d10:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 00039d20:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 00039d30:·640a·2020·2d20·7061·636b·6167·655f·646e··d.··-·package_dn | |||
| 00039d40:·662d·6175·746f·6d61·7469·635f·696e·7374··f-automatic_inst | |||
| 00039d50:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 00039d60:·6e73·7572·6520·646e·662d·6175·746f·6d61··nsure·dnf-automa | |||
| Max diff block lines reached; 3832097/3862209 bytes (99.22%) of diff not shown. | |||
| Offset 81, 26 lines modified | Offset 81, 35 lines modified | ||
| 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 82 | ············suitable·for·automatic,·regular·execution. | 82 | ············suitable·for·automatic,·regular·execution. |
| 83 | Severity: ··medium | 83 | Severity: ··medium |
| 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 85 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 85 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 86 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 86 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 87 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 87 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 88 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 89 | [[packages]] | ||
| 90 | name·=·"dnf-automatic" | ||
| 91 | version·=·"*" | ||
| 88 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 92 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 89 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 93 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 90 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 94 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 91 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 95 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 92 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 96 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 93 | 97 | #·Remediation·is·applicable·only·in·certain·platforms | |
| 98 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 99 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 94 | class·install_dnf-automatic·{ | ||
| 95 | ··package·{·'dnf-automatic': | ||
| 96 | ····ensure·=>·'installed', | ||
| 97 | ··} | ||
| 98 | 100 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | |
| 101 | ····yum·install·-y·"dnf-automatic" | ||
| 102 | fi | ||
| 103 | else | ||
| 104 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 105 | fi | ||
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 104 | -·name:·Gather·the·package·facts | 111 | -·name:·Gather·the·package·facts |
| 105 | ··package_facts: | 112 | ··package_facts: |
| Offset 124, 42 lines modified | Offset 133, 33 lines modified | ||
| 124 | ··tags: | 133 | ··tags: |
| 125 | ··-·enable_strategy | 134 | ··-·enable_strategy |
| 126 | ··-·low_complexity | 135 | ··-·low_complexity |
| 127 | ··-·low_disruption | 136 | ··-·low_disruption |
| 128 | ··-·medium_severity | 137 | ··-·medium_severity |
| 129 | ··-·no_reboot_needed | 138 | ··-·no_reboot_needed |
| 130 | ··-·package_dnf-automatic_installed | 139 | ··-·package_dnf-automatic_installed |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | [[packages]] | ||
| 133 | name·=·"dnf-automatic" | ||
| 134 | version·=·"*" | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 141 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 142 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 143 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 144 | ····yum·install·-y·"dnf-automatic" | ||
| 145 | fi | ||
| 145 | package·--add=dnf-automatic | ||
| 146 | else | ||
| 147 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 148 | fi | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | include·install_dnf-automatic | ||
| 152 | class·install_dnf-automatic·{ | ||
| 154 | package· | 153 | ··package·{·'dnf-automatic': |
| 154 | ····ensure·=>·'installed', | ||
| 155 | ··} | ||
| 156 | } | ||
| 155 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 156 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 158 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 157 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 159 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 158 | automatic.conf. | 160 | automatic.conf. |
| 159 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 161 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 160 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 162 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 161 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 163 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 169, 54 lines modified | Offset 169, 14 lines modified | ||
| 169 | Severity: ··medium | 169 | Severity: ··medium |
| 170 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 170 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 171 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 171 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 172 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 172 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 173 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 173 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 174 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 | 174 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 |
| 175 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 175 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 181 | -·name:·Gather·the·package·facts | ||
| 182 | ··package_facts: | ||
| 183 | ····manager:·auto | ||
| 184 | ··tags: | ||
| 185 | ··-·NIST-800-53-CM-6(a) | ||
| 186 | ··-·NIST-800-53-SI-2(5) | ||
| 187 | ··-·NIST-800-53-SI-2(c) | ||
| 188 | ··-·dnf-automatic_apply_updates | ||
| 189 | ··-·low_complexity | ||
| 190 | ··-·medium_disruption | ||
| 191 | ··-·medium_severity | ||
| 192 | ··-·no_reboot_needed | ||
| 193 | ··-·unknown_strategy | ||
| 194 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically | ||
| 195 | ··ini_file: | ||
| 196 | ····dest:·/etc/dnf/automatic.conf | ||
| 197 | ····section:·commands | ||
| 198 | ····option:·apply_updates | ||
| 199 | ····value:·'yes' | ||
| 200 | ····create:·true | ||
| 201 | ··when:·not·(·"kernel"·in·ansible_facts.packages·and·"rpm-ostree"·in·ansible_facts.packages | ||
| 202 | ····and·"bootc"·in·ansible_facts.packages·and·not·"openshift-kubelet"·in | ||
| 203 | ansible_facts.packages | ||
| 204 | ····) | ||
| 205 | ··tags: | ||
| Max diff block lines reached; 250972/256568 bytes (97.82%) of diff not shown. | |||
| Offset 15098, 221 lines modified | Offset 15098, 221 lines modified | ||
| 0003af90:·6172·6765·743d·2223·6964·6d35·3639·3622··arget="#idm5696" | 0003af90:·6172·6765·743d·2223·6964·6d35·3639·3622··arget="#idm5696" | ||
| 0003afa0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003afa0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003afb0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003afb0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003afc0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003afc0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003afd0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003afd0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003afe0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003afe0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003aff0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003aff0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b000:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b010:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b020:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b030:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b040:·2220·6964·3d22·6964·6d35·3639·3622·3e3c··"·id="idm5696">< | |||
| 0003b050:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b060:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b070:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b080:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b090:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b0a0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b0b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b0c0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b0d0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b0e0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b0f0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b100:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b110:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b120:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b130:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b140:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003b150:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003b160:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003b170:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003b180:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003b190:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b1a0:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003b1b0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b1c0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b1d0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b1e0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b1f0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b200:·3536·3937·2220·7461·6269·6e64·6578·3d22··5697"·tabindex=" | |||
| 0003b210:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b220:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b230:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b240:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b250:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b260:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003b270:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b280:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b290:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b2a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b2b0:·3639·3722·3e3c·7461·626c·6520·636c·6173··697"><table·clas | |||
| 0003b2c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b2d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b2e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b2f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b300:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b310:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b320:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b330:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b340:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b350:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b360:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b370:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b380:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b390:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b3a0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b3b0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003b3c0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003b3d0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003b3e0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003b3f0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b400:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b410:·4953·412d·5354·4947·2d4f·4c30·382d·3030··ISA-STIG-OL08-00 | |||
| 0003b420:·2d30·3130·3335·390a·2020·2d20·4e49·5354··-010359.··-·NIST | |||
| 0003b430:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b440:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b450:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b460:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b470:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b480:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b490:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b4a0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b4b0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b4c0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b4d0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b4e0:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003b4f0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b500:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b510:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b520:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b530:·7265·7365·6e74·0a20·2077·6865·6e3a·2028··resent.··when:·( | |||
| 0003b540:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003b550:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003b560:·6573·206f·7220·226b·6572·6e65·6c2d·7565··es·or·"kernel-ue | |||
| 0003b570:·6b22·2069·6e20·616e·7369·626c·655f·6661··k"·in·ansible_fa | |||
| 0003b580:·6374·732e·7061·636b·6167·6573·290a·2020··cts.packages).·· | |||
| 0003b590:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b5a0:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003b5b0:·2d53·5449·472d·4f4c·3038·2d30·302d·3031··-STIG-OL08-00-01 | |||
| 0003b5c0:·3033·3539·0a20·202d·204e·4953·542d·3830··0359.··-·NIST-80 | |||
| 0003b5d0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b5e0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b5f0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b600:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b610:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b620:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b630:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b640:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b650:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b660:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b670:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b680:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003b690:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b6a0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b6b0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b6c0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b6d0:·6172·6765·743d·2223·6964·6d35·3639·3822··arget="#idm5698" | |||
| 0003b6e0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b6f0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b700:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b710:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b720:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b730:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b | 0003b000:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | ||
| 0003b | 0003b010:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | ||
| 0003b | 0003b020:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b | 0003b030:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| Max diff block lines reached; 9703463/9732609 bytes (99.70%) of diff not shown. | |||
| Offset 108, 26 lines modified | Offset 108, 34 lines modified | ||
| 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 116 | [[packages]] | ||
| 117 | name·=·"aide" | ||
| 118 | version·=·"*" | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 120 | incl | 124 | #·Remediation·is·applicable·only·in·certain·platforms |
| 125 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 121 | class·install_aide·{ | ||
| 122 | ··package·{·'aide': | ||
| 123 | ····ensure·=>·'installed', | ||
| 124 | ··} | ||
| 125 | 126 | if·!·rpm·-q·--quiet·"aide"·;·then | |
| 127 | ····yum·install·-y·"aide" | ||
| 128 | fi | ||
| 129 | else | ||
| 130 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 131 | fi | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | -·name:·Gather·the·package·facts | 137 | -·name:·Gather·the·package·facts |
| 132 | ··package_facts: | 138 | ··package_facts: |
| Offset 158, 41 lines modified | Offset 166, 33 lines modified | ||
| 158 | ··-·PCI-DSSv4-11.5.2 | 166 | ··-·PCI-DSSv4-11.5.2 |
| 159 | ··-·enable_strategy | 167 | ··-·enable_strategy |
| 160 | ··-·low_complexity | 168 | ··-·low_complexity |
| 161 | ··-·low_disruption | 169 | ··-·low_disruption |
| 162 | ··-·medium_severity | 170 | ··-·medium_severity |
| 163 | ··-·no_reboot_needed | 171 | ··-·no_reboot_needed |
| 164 | ··-·package_aide_installed | 172 | ··-·package_aide_installed |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 175 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 176 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 177 | ····yum·install·-y·"aide" | ||
| 178 | fi | ||
| 178 | package·--add=aide | ||
| 179 | else | ||
| 180 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 181 | fi | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 184 | include·install_aide | ||
| 187 | 185 | class·install_aide·{ | |
| 186 | ··package·{·'aide': | ||
| 187 | ····ensure·=>·'installed', | ||
| 188 | ··} | ||
| 189 | } | ||
| 188 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 190 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 189 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 191 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 190 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. | 192 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. |
| 191 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 193 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 208, 14 lines modified | Offset 208, 27 lines modified | ||
| 208 | ············_\x8i_\x8s_\x8m······1446 | 208 | ············_\x8i_\x8s_\x8m······1446 |
| 209 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 209 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 210 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 210 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 211 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 211 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 212 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 212 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 213 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 213 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 214 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 214 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 216 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 217 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 218 | fips-mode-setup·--enable | ||
| 219 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 220 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 221 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 222 | fi | ||
| 223 | else | ||
| 224 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 225 | fi | ||
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 220 | -·name:·Gather·the·package·facts | 231 | -·name:·Gather·the·package·facts |
| 221 | ··package_facts: | 232 | ··package_facts: |
| Offset 305, 27 lines modified | Offset 318, 14 lines modified | ||
| 305 | ··-·NIST-800-53-SC-13 | 318 | ··-·NIST-800-53-SC-13 |
| 306 | ··-·enable_dracut_fips_module | 319 | ··-·enable_dracut_fips_module |
| 307 | ··-·high_severity | 320 | ··-·high_severity |
| 308 | ··-·medium_complexity | 321 | ··-·medium_complexity |
| 309 | ··-·medium_disruption | 322 | ··-·medium_disruption |
| 310 | ··-·reboot_required | 323 | ··-·reboot_required |
| 311 | ··-·restrict_strategy | 324 | ··-·restrict_strategy |
| 312 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 313 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 314 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 315 | fips-mode-setup·--enable | ||
| Max diff block lines reached; 1164361/1170850 bytes (99.45%) of diff not shown. | |||
| Offset 15137, 408 lines modified | Offset 15137, 408 lines modified | ||
| 0003b200:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b200:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b210:·6d35·3335·3922·2074·6162·696e·6465·783d··m5359"·tabindex= | 0003b210:·6d35·3335·3922·2074·6162·696e·6465·783d··m5359"·tabindex= | ||
| 0003b220:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b220:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b230:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b230:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b240:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b240:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b250:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b250:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b260:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b260:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b270:·6564·6961·7469·6f6e·20 | 0003b270:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 0003b280:· | 0003b280:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 0003b290:·3 | 0003b290:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b2a0:· | 0003b2a0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b2b0:·6 | 0003b2b0:·6170·7365·2220·6964·3d22·6964·6d35·3335··apse"·id="idm535 | ||
| 0003b2c0:·3 | 0003b2c0:·3922·3e3c·7072·653e·3c63·6f64·653e·2320··9"><pre><code>#· | ||
| 0003b2d0:· | 0003b2d0:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 0003b2e0:·7 | 0003b2e0:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 0003b2f0:· | 0003b2f0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 0003b300:· | 0003b300:·726d·730a·6966·2021·2028·207b·2072·706d··rms.if·!·(·{·rpm | ||
| 0003b310:· | 0003b310:·202d·2d71·7569·6574·202d·7120·6b65·726e···--quiet·-q·kern | ||
| 0003b320:· | 0003b320:·656c·203b·7d20·2661·6d70·3b26·616d·703b··el·;}·&& | ||
| 0003b330:· | 0003b330:·207b·2072·706d·202d·2d71·7569·6574·202d···{·rpm·--quiet·- | ||
| 0003b340:·7 | 0003b340:·7120·7270·6d2d·6f73·7472·6565·203b·7d20··q·rpm-ostree·;}· | ||
| 0003b350:· | 0003b350:·2661·6d70·3b26·616d·703b·207b·2072·706d··&&·{·rpm | ||
| 0003b360:· | 0003b360:·202d·2d71·7569·6574·202d·7120·626f·6f74···--quiet·-q·boot | ||
| 0003b370:·6 | 0003b370:·6320·3b7d·2026·616d·703b·2661·6d70·3b20··c·;}·&&· | ||
| 0003b380:· | 0003b380:·7b20·2120·7270·6d20·2d2d·7175·6965·7420··{·!·rpm·--quiet· | ||
| 0003b390:· | 0003b390:·2d71·206f·7065·6e73·6869·6674·2d6b·7562··-q·openshift-kub | ||
| 0003b3a0:·65 | 0003b3a0:·656c·6574·203b·7d20·293b·2074·6865·6e0a··elet·;}·);·then. | ||
| 0003b3b0:· | 0003b3b0:·0a23·2046·696e·6420·7768·6963·6820·6669··.#·Find·which·fi | ||
| 0003b3c0:·6 | 0003b3c0:·6c65·7320·6861·7665·2069·6e63·6f72·7265··les·have·incorre | ||
| 0003b3d0:·6 | 0003b3d0:·6374·2068·6173·6820·286e·6f74·2069·6e20··ct·hash·(not·in· | ||
| 0003b3e0:· | 0003b3e0:·2f65·7463·2c20·6265·6361·7573·6520·6f66··/etc,·because·of | ||
| 0003b3f0:·6 | 0003b3f0:·2074·6865·2073·7973·7465·6d20·7265·6c61···the·system·rela | ||
| 0003b400:·7 | 0003b400:·7465·6420·636f·6e66·6967·2066·696c·6573··ted·config·files | ||
| 0003b410:·2 | 0003b410:·2920·616e·6420·7468·656e·2067·6574·2066··)·and·then·get·f | ||
| 0003b420:· | 0003b420:·696c·6573·206e·616d·6573·0a66·696c·6573··iles·names.files | ||
| 0003b430:· | 0003b430:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | ||
| 0003b440:· | 0003b440:·6861·7368·3d22·2428·7270·6d20·2d56·6120··hash="$(rpm·-Va· | ||
| 0003b450:·2 | 0003b450:·2d2d·6e6f·636f·6e66·6967·207c·2067·7265··--noconfig·|·gre | ||
| 0003b460:· | 0003b460:·7020·2d45·2027·5e2e·2e35·2720·7c20·6177··p·-E·'^..5'·|·aw | ||
| 0003b470:· | 0003b470:·6b20·277b·7072·696e·7420·244e·467d·2720··k·'{print·$NF}'· | ||
| 0003b480:·2 | 0003b480:·2922·0a0a·6966·205b·202d·6e20·2224·6669··)"..if·[·-n·"$fi | ||
| 0003b490:· | 0003b490:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003b4a0:· | 0003b4a0:·6374·5f68·6173·6822·205d·3b20·7468·656e··ct_hash"·];·then | ||
| 0003b4b0:· | 0003b4b0:·0a20·2020·2023·2046·726f·6d20·6669·6c65··.····#·From·file | ||
| 0003b4c0:· | 0003b4c0:·7320·6e61·6d65·7320·6765·7420·7061·636b··s·names·get·pack | ||
| 0003b4d0:· | 0003b4d0:·6167·6520·6e61·6d65·7320·616e·6420·6368··age·names·and·ch | ||
| 0003b4e0:· | 0003b4e0:·616e·6765·206e·6577·6c69·6e65·2074·6f20··ange·newline·to· | ||
| 0003b4f0:·3 | 0003b4f0:·7370·6163·652c·2062·6563·6175·7365·2072··space,·because·r | ||
| 0003b500:· | 0003b500:·706d·2077·7269·7465·7320·6561·6368·2070··pm·writes·each·p | ||
| 0003b510:·6 | 0003b510:·6163·6b61·6765·2074·6f20·6e65·7720·6c69··ackage·to·new·li | ||
| 0003b520:·6 | 0003b520:·6e65·0a20·2020·2070·6163·6b61·6765·735f··ne.····packages_ | ||
| 0003b530:· | 0003b530:·746f·5f72·6569·6e73·7461·6c6c·3d22·2428··to_reinstall="$( | ||
| 0003b540:· | 0003b540:·7270·6d20·2d71·6620·2466·696c·6573·5f77··rpm·-qf·$files_w | ||
| 0003b550:· | 0003b550:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b560:·7 | 0003b560:·7368·207c·2074·7220·275c·6e27·2027·2027··sh·|·tr·'\n'·'·' | ||
| 0003b570:·2 | 0003b570:·2922·0a0a·2020·2020·0a20·2020·2079·756d··)"..····.····yum | ||
| 0003b580:· | 0003b580:·2072·6569·6e73·7461·6c6c·202d·7920·2470···reinstall·-y·$p | ||
| 0003b590:· | 0003b590:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | ||
| 0003b5a0:· | 0003b5a0:·7461·6c6c·0a20·2020·200a·6669·0a0a·656c··tall.····.fi..el | ||
| 0003b5b0:· | 0003b5b0:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | ||
| 0003b5c0:· | 0003b5c0:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | ||
| 0003b5d0:·6 | 0003b5d0:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | ||
| 0003b5e0:· | 0003b5e0:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | ||
| 0003b5f0:·6 | 0003b5f0:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | ||
| 0003b600:·6 | 0003b600:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0003b610:· | 0003b610:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0003b620:· | 0003b620:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0003b630:·6 | 0003b630:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0003b640:·206 | 0003b640:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b650:· | 0003b650:·646d·3533·3630·2220·7461·6269·6e64·6578··dm5360"·tabindex | ||
| 0003b660:· | 0003b660:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b670:· | 0003b670:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b680:· | 0003b680:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b690:· | 0003b690:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b6a0:· | 0003b6a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b6b0:· | 0003b6b0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b6c0:· | 0003b6c0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003b6d0:· | 0003b6d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b6e0:· | 0003b6e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b6f0:· | 0003b6f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b700:·6 | 0003b700:·6d35·3336·3022·3e3c·7461·626c·6520·636c··m5360"><table·cl | ||
| 0003b710:·61 | 0003b710:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b720:· | 0003b720:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b730:· | 0003b730:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b740:· | 0003b740:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b750:· | 0003b750:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b760:·3 | 0003b760:·3e3c·7464·3e68·6967·683c·2f74·643e·3c2f··><td>high</td></ | ||
| 0003b770:· | 0003b770:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b780:· | 0003b780:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | ||
| 0003b790:· | 0003b790:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003b7a0:· | 0003b7a0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b7b0:· | 0003b7b0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b7c0:·3 | 0003b7c0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b7d0:· | 0003b7d0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b7e0:· | 0003b7e0:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 0003b7f0:·7 | 0003b7f0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b800:· | 0003b800:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | ||
| 0003b810:·686 | 0003b810:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | ||
| 0003b820:· | 0003b820:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | ||
| 0003b830:· | 0003b830:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | ||
| 0003b840:· | 0003b840:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | ||
| 0003b850:· | 0003b850:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | ||
| 0003b860:·2 | 0003b860:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003b870:· | 0003b870:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003b880:· | 0003b880:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003b890:· | 0003b890:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b8a0:· | 0003b8a0:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | ||
| 0003b8b0:· | 0003b8b0:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | ||
| 0003b8c0:· | 0003b8c0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b8d0:· | 0003b8d0:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003b8e0:·5 | 0003b8e0:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003b8f0:· | 0003b8f0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b900:· | 0003b900:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003b910:· | 0003b910:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003b920:· | 0003b920:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003b930:· | 0003b930:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003b940:·2 | 0003b940:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003b950:· | 0003b950:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003b960:·6 | 0003b960:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| 0003b970:·2 | 0003b970:·2d20·6d65·6469·756d·5f64·6973·7275·7074··-·medium_disrupt | ||
| 0003b980:·6 | 0003b980:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | ||
| 0003b990:·7 | 0003b990:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | ||
| 0003b9a0:· | 0003b9a0:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | ||
| 0003b9b0:·20 | 0003b9b0:·202d·2072·706d·5f76·6572·6966·795f·6861···-·rpm_verify_ha | ||
| 0003b9c0:· | 0003b9c0:·7368·6573·0a0a·2d20·6e61·6d65·3a20·2753··shes..-·name:·'S | ||
| 0003b9d0:· | 0003b9d0:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | ||
| Max diff block lines reached; 6444981/6499933 bytes (99.15%) of diff not shown. | |||
| Offset 102, 14 lines modified | Offset 102, 33 lines modified | ||
| 102 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 102 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 103 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 103 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 104 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 104 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 105 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 105 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 107 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 108 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 108 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 110 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 111 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 112 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 113 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 114 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 115 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 116 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 117 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 118 | fi | ||
| 119 | else | ||
| 120 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 121 | fi | ||
| 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 110 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 111 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 112 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 113 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 114 | -·name:·Gather·the·package·facts | 127 | -·name:·Gather·the·package·facts |
| 115 | ··package_facts: | 128 | ··package_facts: |
| Offset 276, 33 lines modified | Offset 295, 14 lines modified | ||
| 276 | ··-·PCI-DSSv4-11.5.2 | 295 | ··-·PCI-DSSv4-11.5.2 |
| 277 | ··-·high_complexity | 296 | ··-·high_complexity |
| 278 | ··-·high_severity | 297 | ··-·high_severity |
| 279 | ··-·medium_disruption | 298 | ··-·medium_disruption |
| 280 | ··-·no_reboot_needed | 299 | ··-·no_reboot_needed |
| 281 | ··-·restrict_strategy | 300 | ··-·restrict_strategy |
| 282 | ··-·rpm_verify_hashes | 301 | ··-·rpm_verify_hashes |
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 284 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 285 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 286 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 287 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 288 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 289 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 290 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 291 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 292 | fi | ||
| 293 | else | ||
| 294 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 295 | fi | ||
| 296 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 302 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 297 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 303 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 298 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 304 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 299 | run·the·following·command·to·determine·which·package·owns·it: | 305 | run·the·following·command·to·determine·which·package·owns·it: |
| 300 | $·rpm·-qf·FILENAME | 306 | $·rpm·-qf·FILENAME |
| 301 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 307 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 302 | $·sudo·rpm·--restore·PACKAGENAME | 308 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 321, 14 lines modified | Offset 321, 46 lines modified | ||
| 321 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 321 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 322 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 322 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 323 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 323 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 325 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 325 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 327 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 327 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 333 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 334 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 335 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 336 | declare·-A·SETPERMS_RPM_DICT | ||
| 337 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 338 | #·is·expected·by·the·RPM·database | ||
| 339 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 340 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 341 | do | ||
| 342 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 343 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 344 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 345 | done | ||
| 346 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 347 | #·correct·values | ||
| 348 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 349 | do | ||
| 350 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 351 | done | ||
| 352 | else | ||
| 353 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 354 | fi | ||
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 356 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 357 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 358 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 359 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 333 | -·name:·Gather·the·package·facts | 360 | -·name:·Gather·the·package·facts |
| 334 | ··package_facts: | 361 | ··package_facts: |
| Offset 436, 46 lines modified | Offset 468, 14 lines modified | ||
| 436 | ··-·PCI-DSSv4-11.5.2 | 468 | ··-·PCI-DSSv4-11.5.2 |
| 437 | ··-·high_complexity | 469 | ··-·high_complexity |
| 438 | ··-·high_severity | 470 | ··-·high_severity |
| 439 | ··-·medium_disruption | 471 | ··-·medium_disruption |
| 440 | ··-·no_reboot_needed | 472 | ··-·no_reboot_needed |
| 441 | ··-·restrict_strategy | 473 | ··-·restrict_strategy |
| 442 | ··-·rpm_verify_ownership | 474 | ··-·rpm_verify_ownership |
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 680739/688450 bytes (98.88%) of diff not shown. | |||
| Offset 15162, 408 lines modified | Offset 15162, 408 lines modified | ||
| 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b3a0:·3533·3539·2220·7461·6269·6e64·6578·3d22··5359"·tabindex=" | 0003b3a0:·3533·3539·2220·7461·6269·6e64·6578·3d22··5359"·tabindex=" | ||
| 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b400:·6469·6174·696f·6e20· | 0003b400:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | ||
| 0003b410:·7 | 0003b410:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0003b420:· | 0003b420:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b430:·6 | 0003b430:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b440:· | 0003b440:·7073·6522·2069·643d·2269·646d·3533·3539··pse"·id="idm5359 | ||
| 0003b450:· | 0003b450:·223e·3c70·7265·3e3c·636f·6465·3e23·2052··"><pre><code>#·R | ||
| 0003b460:· | 0003b460:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 0003b470:·7 | 0003b470:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | ||
| 0003b480:· | 0003b480:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | ||
| 0003b490:·6 | 0003b490:·6d73·0a69·6620·2120·2820·7b20·7270·6d20··ms.if·!·(·{·rpm· | ||
| 0003b4a0:· | 0003b4a0:·2d2d·7175·6965·7420·2d71·206b·6572·6e65··--quiet·-q·kerne | ||
| 0003b4b0:· | 0003b4b0:·6c20·3b7d·2026·616d·703b·2661·6d70·3b20··l·;}·&&· | ||
| 0003b4c0:· | 0003b4c0:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | ||
| 0003b4d0:· | 0003b4d0:·2072·706d·2d6f·7374·7265·6520·3b7d·2026···rpm-ostree·;}·& | ||
| 0003b4e0:·6 | 0003b4e0:·616d·703b·2661·6d70·3b20·7b20·7270·6d20··amp;&·{·rpm· | ||
| 0003b4f0:· | 0003b4f0:·2d2d·7175·6965·7420·2d71·2062·6f6f·7463··--quiet·-q·bootc | ||
| 0003b500:· | 0003b500:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b510:·2 | 0003b510:·2021·2072·706d·202d·2d71·7569·6574·202d···!·rpm·--quiet·- | ||
| 0003b520:·7 | 0003b520:·7120·6f70·656e·7368·6966·742d·6b75·6265··q·openshift-kube | ||
| 0003b530:· | 0003b530:·6c65·7420·3b7d·2029·3b20·7468·656e·0a0a··let·;}·);·then.. | ||
| 0003b540:· | 0003b540:·2320·4669·6e64·2077·6869·6368·2066·696c··#·Find·which·fil | ||
| 0003b550:·6 | 0003b550:·6573·2068·6176·6520·696e·636f·7272·6563··es·have·incorrec | ||
| 0003b560:·7 | 0003b560:·7420·6861·7368·2028·6e6f·7420·696e·202f··t·hash·(not·in·/ | ||
| 0003b570:·6 | 0003b570:·6574·632c·2062·6563·6175·7365·206f·6620··etc,·because·of· | ||
| 0003b580:· | 0003b580:·7468·6520·7379·7374·656d·2072·656c·6174··the·system·relat | ||
| 0003b590:· | 0003b590:·6564·2063·6f6e·6669·6720·6669·6c65·7329··ed·config·files) | ||
| 0003b5a0:·20 | 0003b5a0:·2061·6e64·2074·6865·6e20·6765·7420·6669···and·then·get·fi | ||
| 0003b5b0:· | 0003b5b0:·6c65·7320·6e61·6d65·730a·6669·6c65·735f··les·names.files_ | ||
| 0003b5c0:· | 0003b5c0:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003b5d0:· | 0003b5d0:·6173·683d·2224·2872·706d·202d·5661·202d··ash="$(rpm·-Va·- | ||
| 0003b5e0:·2 | 0003b5e0:·2d6e·6f63·6f6e·6669·6720·7c20·6772·6570··-noconfig·|·grep | ||
| 0003b5f0:· | 0003b5f0:·202d·4520·275e·2e2e·3527·207c·2061·776b···-E·'^..5'·|·awk | ||
| 0003b600:· | 0003b600:·2027·7b70·7269·6e74·2024·4e46·7d27·2029···'{print·$NF}'·) | ||
| 0003b610:·2 | 0003b610:·220a·0a69·6620·5b20·2d6e·2022·2466·696c··"..if·[·-n·"$fil | ||
| 0003b620:· | 0003b620:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003b630:· | 0003b630:·745f·6861·7368·2220·5d3b·2074·6865·6e0a··t_hash"·];·then. | ||
| 0003b640:· | 0003b640:·2020·2020·2320·4672·6f6d·2066·696c·6573······#·From·files | ||
| 0003b650:·2 | 0003b650:·206e·616d·6573·2067·6574·2070·6163·6b61···names·get·packa | ||
| 0003b660:· | 0003b660:·6765·206e·616d·6573·2061·6e64·2063·6861··ge·names·and·cha | ||
| 0003b670:· | 0003b670:·6e67·6520·6e65·776c·696e·6520·746f·2073··nge·newline·to·s | ||
| 0003b680:· | 0003b680:·7061·6365·2c20·6265·6361·7573·6520·7270··pace,·because·rp | ||
| 0003b690:· | 0003b690:·6d20·7772·6974·6573·2065·6163·6820·7061··m·writes·each·pa | ||
| 0003b6a0:·6 | 0003b6a0:·636b·6167·6520·746f·206e·6577·206c·696e··ckage·to·new·lin | ||
| 0003b6b0:·6 | 0003b6b0:·650a·2020·2020·7061·636b·6167·6573·5f74··e.····packages_t | ||
| 0003b6c0:·6 | 0003b6c0:·6f5f·7265·696e·7374·616c·6c3d·2224·2872··o_reinstall="$(r | ||
| 0003b6d0:· | 0003b6d0:·706d·202d·7166·2024·6669·6c65·735f·7769··pm·-qf·$files_wi | ||
| 0003b6e0:· | 0003b6e0:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | ||
| 0003b6f0:·6 | 0003b6f0:·6820·7c20·7472·2027·5c6e·2720·2720·2729··h·|·tr·'\n'·'·') | ||
| 0003b700:·20 | 0003b700:·220a·0a20·2020·200a·2020·2020·7975·6d20··"..····.····yum· | ||
| 0003b710:· | 0003b710:·7265·696e·7374·616c·6c20·2d79·2024·7061··reinstall·-y·$pa | ||
| 0003b720:· | 0003b720:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | ||
| 0003b730:·616 | 0003b730:·616c·6c0a·2020·2020·0a66·690a·0a65·6c73··all.····.fi..els | ||
| 0003b740:· | 0003b740:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | ||
| 0003b750:· | 0003b750:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | ||
| 0003b760:·6 | 0003b760:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | ||
| 0003b770:·616 | 0003b770:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | ||
| 0003b780:· | 0003b780:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | ||
| 0003b790:· | 0003b790:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0003b7a0:· | 0003b7a0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0003b7b0:· | 0003b7b0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0003b7c0:·6 | 0003b7c0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0003b7d0:·6 | 0003b7d0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b7e0:· | 0003b7e0:·6d35·3336·3022·2074·6162·696e·6465·783d··m5360"·tabindex= | ||
| 0003b7f0:· | 0003b7f0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b800:· | 0003b800:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b810:· | 0003b810:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b820:·6 | 0003b820:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b830:·6 | 0003b830:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b840:· | 0003b840:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b850:·20 | 0003b850:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b860:· | 0003b860:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b870:· | 0003b870:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b880:· | 0003b880:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b890:· | 0003b890:·3533·3630·223e·3c74·6162·6c65·2063·6c61··5360"><table·cla | ||
| 0003b8a0:· | 0003b8a0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b8b0:· | 0003b8b0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b8c0:· | 0003b8c0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b8d0:· | 0003b8d0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b8e0:· | 0003b8e0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b8f0:· | 0003b8f0:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | ||
| 0003b900:· | 0003b900:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b910:· | 0003b910:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003b920:· | 0003b920:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003b930:· | 0003b930:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b940:· | 0003b940:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b950:· | 0003b950:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b960:· | 0003b960:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b970:· | 0003b970:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003b980:· | 0003b980:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b990:· | 0003b990:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | ||
| 0003b9a0:·6 | 0003b9a0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | ||
| 0003b9b0:· | 0003b9b0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | ||
| 0003b9c0:· | 0003b9c0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | ||
| 0003b9d0:·7 | 0003b9d0:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | ||
| 0003b9e0:· | 0003b9e0:·2020·2d20·434a·4953·2d35·2e31·302e·342e····-·CJIS-5.10.4. | ||
| 0003b9f0:· | 0003b9f0:·310a·2020·2d20·4e49·5354·2d38·3030·2d31··1.··-·NIST-800-1 | ||
| 0003ba00:· | 0003ba00:·3731·2d33·2e33·2e38·0a20·202d·204e·4953··71-3.3.8.··-·NIS | ||
| 0003ba10:·5 | 0003ba10:·542d·3830·302d·3137·312d·332e·342e·310a··T-800-171-3.4.1. | ||
| 0003ba20:·202 | 0003ba20:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003ba30:· | 0003ba30:·4155·2d39·2833·290a·2020·2d20·4e49·5354··AU-9(3).··-·NIST | ||
| 0003ba40:· | 0003ba40:·2d38·3030·2d35·332d·434d·2d36·2863·290a··-800-53-CM-6(c). | ||
| 0003ba50:· | 0003ba50:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003ba60:· | 0003ba60:·434d·2d36·2864·290a·2020·2d20·4e49·5354··CM-6(d).··-·NIST | ||
| 0003ba70:· | 0003ba70:·2d38·3030·2d35·332d·5349·2d37·0a20·202d··-800-53-SI-7.··- | ||
| 0003ba80:· | 0003ba80:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003ba90:· | 0003ba90:·3728·3129·0a20·202d·204e·4953·542d·3830··7(1).··-·NIST-80 | ||
| 0003baa0:· | 0003baa0:·302d·3533·2d53·492d·3728·3629·0a20·202d··0-53-SI-7(6).··- | ||
| 0003bab0:·2 | 0003bab0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | ||
| 0003bac0:· | 0003bac0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | ||
| 0003bad0:· | 0003bad0:·3131·2e35·2e32·0a20·202d·2068·6967·685f··11.5.2.··-·high_ | ||
| 0003bae0:·6 | 0003bae0:·636f·6d70·6c65·7869·7479·0a20·202d·2068··complexity.··-·h | ||
| 0003baf0:·6 | 0003baf0:·6967·685f·7365·7665·7269·7479·0a20·202d··igh_severity.··- | ||
| 0003bb00:· | 0003bb00:·206d·6564·6975·6d5f·6469·7372·7570·7469···medium_disrupti | ||
| 0003bb10:·6 | 0003bb10:·6f6e·0a20·202d·206e·6f5f·7265·626f·6f74··on.··-·no_reboot | ||
| 0003bb20:· | 0003bb20:·5f6e·6565·6465·640a·2020·2d20·7265·7374··_needed.··-·rest | ||
| 0003bb30:·69 | 0003bb30:·7269·6374·5f73·7472·6174·6567·790a·2020··rict_strategy.·· | ||
| 0003bb40:· | 0003bb40:·2d20·7270·6d5f·7665·7269·6679·5f68·6173··-·rpm_verify_has | ||
| 0003bb50:·6 | 0003bb50:·6865·730a·0a2d·206e·616d·653a·2027·5365··hes..-·name:·'Se | ||
| 0003bb60:· | 0003bb60:·7420·6661·6374·3a20·5061·636b·6167·6520··t·fact:·Package· | ||
| Max diff block lines reached; 17330203/17385155 bytes (99.68%) of diff not shown. | |||
| Offset 108, 14 lines modified | Offset 108, 33 lines modified | ||
| 108 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 108 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 109 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 109 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 110 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 110 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 111 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 111 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 116 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 117 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 118 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 119 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 120 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 121 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 122 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 123 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 124 | fi | ||
| 125 | else | ||
| 126 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 127 | fi | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 120 | -·name:·Gather·the·package·facts | 133 | -·name:·Gather·the·package·facts |
| 121 | ··package_facts: | 134 | ··package_facts: |
| Offset 282, 33 lines modified | Offset 301, 14 lines modified | ||
| 282 | ··-·PCI-DSSv4-11.5.2 | 301 | ··-·PCI-DSSv4-11.5.2 |
| 283 | ··-·high_complexity | 302 | ··-·high_complexity |
| 284 | ··-·high_severity | 303 | ··-·high_severity |
| 285 | ··-·medium_disruption | 304 | ··-·medium_disruption |
| 286 | ··-·no_reboot_needed | 305 | ··-·no_reboot_needed |
| 287 | ··-·restrict_strategy | 306 | ··-·restrict_strategy |
| 288 | ··-·rpm_verify_hashes | 307 | ··-·rpm_verify_hashes |
| 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 290 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 291 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 292 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 293 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 294 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 295 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 296 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 297 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 298 | fi | ||
| 299 | else | ||
| 300 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 301 | fi | ||
| 302 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 308 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 303 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 309 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 304 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 310 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 305 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 311 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 306 | $·rpm·-qf·FILENAME | 312 | $·rpm·-qf·FILENAME |
| 307 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 313 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 329, 14 lines modified | Offset 329, 50 lines modified | ||
| 329 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 329 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 330 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 330 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 341 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 342 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 343 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 344 | declare·-A·SETPERMS_RPM_DICT | ||
| 345 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 346 | #·is·expected·by·the·RPM·database | ||
| 347 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 348 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 349 | do | ||
| 350 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 351 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 352 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 353 | ········do | ||
| 354 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 355 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 356 | ········done | ||
| 357 | done | ||
| 358 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 359 | #·correct·values | ||
| 360 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 361 | do | ||
| 362 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 363 | done | ||
| 364 | else | ||
| 365 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 366 | fi | ||
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 368 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 369 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 370 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 371 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 341 | -·name:·Gather·the·package·facts | 372 | -·name:·Gather·the·package·facts |
| 342 | ··package_facts: | 373 | ··package_facts: |
| Offset 448, 50 lines modified | Offset 484, 14 lines modified | ||
| 448 | ··-·PCI-DSSv4-11.5.2 | 484 | ··-·PCI-DSSv4-11.5.2 |
| 449 | ··-·high_complexity | 485 | ··-·high_complexity |
| 450 | ··-·high_severity | 486 | ··-·high_severity |
| 451 | ··-·medium_disruption | 487 | ··-·medium_disruption |
| 452 | ··-·no_reboot_needed | 488 | ··-·no_reboot_needed |
| 453 | ··-·restrict_strategy | 489 | ··-·restrict_strategy |
| 454 | ··-·rpm_verify_permissions | 490 | ··-·rpm_verify_permissions |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1287355/1295439 bytes (99.38%) of diff not shown. | |||
| Offset 15178, 408 lines modified | Offset 15178, 408 lines modified | ||
| 0003b490:·6765·743d·2223·6964·6d35·3335·3922·2074··get="#idm5359"·t | 0003b490:·6765·743d·2223·6964·6d35·3335·3922·2074··get="#idm5359"·t | ||
| 0003b4a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b4a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b4b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b4b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b4c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b4c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b4d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b4d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b4e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b4e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b4f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b4f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b500:·20 | 0003b500:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | ||
| 0003b510:· | 0003b510:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003b520:· | 0003b520:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003b530:· | 0003b530:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b540:· | 0003b540:·3d22·6964·6d35·3335·3922·3e3c·7072·653e··="idm5359"><pre> | ||
| 0003b550:· | 0003b550:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | ||
| 0003b560:·6 | 0003b560:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | ||
| 0003b570:· | 0003b570:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | ||
| 0003b580:·6 | 0003b580:·6e20·706c·6174·666f·726d·730a·6966·2021··n·platforms.if·! | ||
| 0003b590:· | 0003b590:·2028·207b·2072·706d·202d·2d71·7569·6574···(·{·rpm·--quiet | ||
| 0003b5a0:· | 0003b5a0:·202d·7120·6b65·726e·656c·203b·7d20·2661···-q·kernel·;}·&a | ||
| 0003b5b0:·3 | 0003b5b0:·6d70·3b26·616d·703b·207b·2072·706d·202d··mp;&·{·rpm·- | ||
| 0003b5c0:· | 0003b5c0:·2d71·7569·6574·202d·7120·7270·6d2d·6f73··-quiet·-q·rpm-os | ||
| 0003b5d0:· | 0003b5d0:·7472·6565·203b·7d20·2661·6d70·3b26·616d··tree·;}·&&am | ||
| 0003b5e0:· | 0003b5e0:·703b·207b·2072·706d·202d·2d71·7569·6574··p;·{·rpm·--quiet | ||
| 0003b5f0:· | 0003b5f0:·202d·7120·626f·6f74·6320·3b7d·2026·616d···-q·bootc·;}·&am | ||
| 0003b600:· | 0003b600:·703b·2661·6d70·3b20·7b20·2120·7270·6d20··p;&·{·!·rpm· | ||
| 0003b610:· | 0003b610:·2d2d·7175·6965·7420·2d71·206f·7065·6e73··--quiet·-q·opens | ||
| 0003b620:· | 0003b620:·6869·6674·2d6b·7562·656c·6574·203b·7d20··hift-kubelet·;}· | ||
| 0003b630:·2 | 0003b630:·293b·2074·6865·6e0a·0a23·2046·696e·6420··);·then..#·Find· | ||
| 0003b640:· | 0003b640:·7768·6963·6820·6669·6c65·7320·6861·7665··which·files·have | ||
| 0003b650:· | 0003b650:·2069·6e63·6f72·7265·6374·2068·6173·6820···incorrect·hash· | ||
| 0003b660:· | 0003b660:·286e·6f74·2069·6e20·2f65·7463·2c20·6265··(not·in·/etc,·be | ||
| 0003b670:·6 | 0003b670:·6361·7573·6520·6f66·2074·6865·2073·7973··cause·of·the·sys | ||
| 0003b680:· | 0003b680:·7465·6d20·7265·6c61·7465·6420·636f·6e66··tem·related·conf | ||
| 0003b690:· | 0003b690:·6967·2066·696c·6573·2920·616e·6420·7468··ig·files)·and·th | ||
| 0003b6a0:· | 0003b6a0:·656e·2067·6574·2066·696c·6573·206e·616d··en·get·files·nam | ||
| 0003b6b0:· | 0003b6b0:·6573·0a66·696c·6573·5f77·6974·685f·696e··es.files_with_in | ||
| 0003b6c0:· | 0003b6c0:·636f·7272·6563·745f·6861·7368·3d22·2428··correct_hash="$( | ||
| 0003b6d0:· | 0003b6d0:·7270·6d20·2d56·6120·2d2d·6e6f·636f·6e66··rpm·-Va·--noconf | ||
| 0003b6e0:· | 0003b6e0:·6967·207c·2067·7265·7020·2d45·2027·5e2e··ig·|·grep·-E·'^. | ||
| 0003b6f0:·2 | 0003b6f0:·2e35·2720·7c20·6177·6b20·277b·7072·696e··.5'·|·awk·'{prin | ||
| 0003b700:· | 0003b700:·7420·244e·467d·2720·2922·0a0a·6966·205b··t·$NF}'·)"..if·[ | ||
| 0003b710:·2 | 0003b710:·202d·6e20·2224·6669·6c65·735f·7769·7468···-n·"$files_with | ||
| 0003b720:· | 0003b720:·5f69·6e63·6f72·7265·6374·5f68·6173·6822··_incorrect_hash" | ||
| 0003b730:·534 | 0003b730:·205d·3b20·7468·656e·0a20·2020·2023·2046···];·then.····#·F | ||
| 0003b740:· | 0003b740:·726f·6d20·6669·6c65·7320·6e61·6d65·7320··rom·files·names· | ||
| 0003b750:· | 0003b750:·6765·7420·7061·636b·6167·6520·6e61·6d65··get·package·name | ||
| 0003b760:· | 0003b760:·7320·616e·6420·6368·616e·6765·206e·6577··s·and·change·new | ||
| 0003b770:· | 0003b770:·6c69·6e65·2074·6f20·7370·6163·652c·2062··line·to·space,·b | ||
| 0003b780:· | 0003b780:·6563·6175·7365·2072·706d·2077·7269·7465··ecause·rpm·write | ||
| 0003b790:· | 0003b790:·7320·6561·6368·2070·6163·6b61·6765·2074··s·each·package·t | ||
| 0003b7a0:· | 0003b7a0:·6f20·6e65·7720·6c69·6e65·0a20·2020·2070··o·new·line.····p | ||
| 0003b7b0:· | 0003b7b0:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | ||
| 0003b7c0:· | 0003b7c0:·7461·6c6c·3d22·2428·7270·6d20·2d71·6620··tall="$(rpm·-qf· | ||
| 0003b7d0:· | 0003b7d0:·2466·696c·6573·5f77·6974·685f·696e·636f··$files_with_inco | ||
| 0003b7e0:·2 | 0003b7e0:·7272·6563·745f·6861·7368·207c·2074·7220··rrect_hash·|·tr· | ||
| 0003b7f0:· | 0003b7f0:·275c·6e27·2027·2027·2922·0a0a·2020·2020··'\n'·'·')"..···· | ||
| 0003b800:· | 0003b800:·0a20·2020·2079·756d·2072·6569·6e73·7461··.····yum·reinsta | ||
| 0003b810:·6 | 0003b810:·6c6c·202d·7920·2470·6163·6b61·6765·735f··ll·-y·$packages_ | ||
| 0003b820:· | 0003b820:·746f·5f72·6569·6e73·7461·6c6c·0a20·2020··to_reinstall.··· | ||
| 0003b830:· | 0003b830:·200a·6669·0a0a·656c·7365·0a20·2020·2026···.fi..else.····& | ||
| 0003b840:·6 | 0003b840:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | ||
| 0003b850:· | 0003b850:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | ||
| 0003b860:·6 | 0003b860:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | ||
| 0003b870:· | 0003b870:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | ||
| 0003b880:· | 0003b880:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | ||
| 0003b890:· | 0003b890:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b8a0:·2 | 0003b8a0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b8b0:· | 0003b8b0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b8c0:· | 0003b8c0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003b8d0:· | 0003b8d0:·7267·6574·3d22·2369·646d·3533·3630·2220··rget="#idm5360"· | ||
| 0003b8e0:· | 0003b8e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b8f0:·6 | 0003b8f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b900:·6 | 0003b900:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b910:·20 | 0003b910:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b920:· | 0003b920:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b930:· | 0003b930:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b940:·6 | 0003b940:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003b950:· | 0003b950:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b960:· | 0003b960:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b970:· | 0003b970:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b980:· | 0003b980:·2220·6964·3d22·6964·6d35·3336·3022·3e3c··"·id="idm5360">< | ||
| 0003b990:·7 | 0003b990:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003b9a0:· | 0003b9a0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003b9b0:·20 | 0003b9b0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003b9c0:· | 0003b9c0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003b9d0:·3 | 0003b9d0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003b9e0:· | 0003b9e0:·6974·793a·3c2f·7468·3e3c·7464·3e68·6967··ity:</th><td>hig | ||
| 0003b9f0:· | 0003b9f0:·683c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··h</td></tr><tr>< | ||
| 0003ba00:· | 0003ba00:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003ba10:· | 0003ba10:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | ||
| 0003ba20:· | 0003ba20:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003ba30:· | 0003ba30:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003ba40:· | 0003ba40:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003ba50:· | 0003ba50:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003ba60:· | 0003ba60:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 0003ba70:· | 0003ba70:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003ba80:· | 0003ba80:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003ba90:· | 0003ba90:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | ||
| 0003baa0:·706 | 0003baa0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | ||
| 0003bab0:· | 0003bab0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | ||
| 0003bac0:· | 0003bac0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | ||
| 0003bad0:· | 0003bad0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003bae0:· | 0003bae0:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003baf0:· | 0003baf0:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003bb00:· | 0003bb00:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003bb10:· | 0003bb10:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003bb20:· | 0003bb20:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003bb30:· | 0003bb30:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bb40:· | 0003bb40:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003bb50:· | 0003bb50:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003bb60:· | 0003bb60:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bb70:· | 0003bb70:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003bb80:· | 0003bb80:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003bb90:·2 | 0003bb90:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003bba0:·2 | 0003bba0:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003bbb0:· | 0003bbb0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003bbc0:· | 0003bbc0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003bbd0:· | 0003bbd0:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003bbe0:· | 0003bbe0:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003bbf0:· | 0003bbf0:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003bc00:· | 0003bc00:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003bc10:· | 0003bc10:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003bc20:· | 0003bc20:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003bc30:· | 0003bc30:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003bc40:· | 0003bc40:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| 0003bc50:· | 0003bc50:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | ||
| 0003bc60:· | 0003bc60:·2050·6163·6b61·6765·206d·616e·6167·6572···Package·manager | ||
| Max diff block lines reached; 11532718/11587670 bytes (99.53%) of diff not shown. | |||
| Offset 110, 14 lines modified | Offset 110, 33 lines modified | ||
| 110 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 110 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 111 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 111 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 118 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 119 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 120 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 121 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 122 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 123 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 124 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 125 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 126 | fi | ||
| 127 | else | ||
| 128 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 129 | fi | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 122 | -·name:·Gather·the·package·facts | 135 | -·name:·Gather·the·package·facts |
| 123 | ··package_facts: | 136 | ··package_facts: |
| Offset 284, 33 lines modified | Offset 303, 14 lines modified | ||
| 284 | ··-·PCI-DSSv4-11.5.2 | 303 | ··-·PCI-DSSv4-11.5.2 |
| 285 | ··-·high_complexity | 304 | ··-·high_complexity |
| 286 | ··-·high_severity | 305 | ··-·high_severity |
| 287 | ··-·medium_disruption | 306 | ··-·medium_disruption |
| 288 | ··-·no_reboot_needed | 307 | ··-·no_reboot_needed |
| 289 | ··-·restrict_strategy | 308 | ··-·restrict_strategy |
| 290 | ··-·rpm_verify_hashes | 309 | ··-·rpm_verify_hashes |
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 292 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 293 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 294 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 295 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 296 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 297 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 298 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 299 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 300 | fi | ||
| 301 | else | ||
| 302 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 303 | fi | ||
| 304 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 310 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 305 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 311 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 306 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 312 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 307 | run·the·following·command·to·determine·which·package·owns·it: | 313 | run·the·following·command·to·determine·which·package·owns·it: |
| 308 | $·rpm·-qf·FILENAME | 314 | $·rpm·-qf·FILENAME |
| 309 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 315 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 310 | $·sudo·rpm·--restore·PACKAGENAME | 316 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 329, 14 lines modified | Offset 329, 46 lines modified | ||
| 329 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 329 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 330 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 330 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 341 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 342 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 343 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 344 | declare·-A·SETPERMS_RPM_DICT | ||
| 345 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 346 | #·is·expected·by·the·RPM·database | ||
| 347 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 348 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 349 | do | ||
| 350 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 351 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 352 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 353 | done | ||
| 354 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 355 | #·correct·values | ||
| 356 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 357 | do | ||
| 358 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 359 | done | ||
| 360 | else | ||
| 361 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 362 | fi | ||
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 364 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 365 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 366 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 367 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 341 | -·name:·Gather·the·package·facts | 368 | -·name:·Gather·the·package·facts |
| 342 | ··package_facts: | 369 | ··package_facts: |
| Offset 444, 46 lines modified | Offset 476, 14 lines modified | ||
| 444 | ··-·PCI-DSSv4-11.5.2 | 476 | ··-·PCI-DSSv4-11.5.2 |
| 445 | ··-·high_complexity | 477 | ··-·high_complexity |
| 446 | ··-·high_severity | 478 | ··-·high_severity |
| 447 | ··-·medium_disruption | 479 | ··-·medium_disruption |
| 448 | ··-·no_reboot_needed | 480 | ··-·no_reboot_needed |
| 449 | ··-·restrict_strategy | 481 | ··-·restrict_strategy |
| 450 | ··-·rpm_verify_ownership | 482 | ··-·rpm_verify_ownership |
| 451 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 452 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 453 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 454 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 455 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1100842/1108553 bytes (99.30%) of diff not shown. | |||
| Offset 15073, 221 lines modified | Offset 15073, 221 lines modified | ||
| 0003ae00:·6172·6765·743d·2223·6964·6d35·3639·3622··arget="#idm5696" | 0003ae00:·6172·6765·743d·2223·6964·6d35·3639·3622··arget="#idm5696" | ||
| 0003ae10:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003ae10:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003ae20:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003ae20:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003ae30:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003ae30:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003ae40:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003ae40:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003ae50:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003ae50:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003ae60:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003ae60:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003ae70:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003ae80:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003ae90:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003aea0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003aeb0:·2220·6964·3d22·6964·6d35·3639·3622·3e3c··"·id="idm5696">< | |||
| 0003aec0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003aed0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003aee0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003aef0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003af00:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003af10:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003af20:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003af30:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003af40:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003af50:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003af60:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003af70:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003af80:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003af90:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003afa0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003afb0:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003afc0:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003afd0:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003afe0:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003aff0:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003b000:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b010:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003b020:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b030:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b040:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b050:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b060:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b070:·3536·3937·2220·7461·6269·6e64·6578·3d22··5697"·tabindex=" | |||
| 0003b080:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b090:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b0a0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b0b0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b0c0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b0d0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003b0e0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b0f0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b100:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b110:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b120:·3639·3722·3e3c·7461·626c·6520·636c·6173··697"><table·clas | |||
| 0003b130:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b140:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b150:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b160:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b170:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b180:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b190:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b1a0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b1b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b1c0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b1d0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b1e0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b1f0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b200:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b210:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b220:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003b230:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003b240:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003b250:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003b260:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b270:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b280:·4953·412d·5354·4947·2d4f·4c30·382d·3030··ISA-STIG-OL08-00 | |||
| 0003b290:·2d30·3130·3335·390a·2020·2d20·4e49·5354··-010359.··-·NIST | |||
| 0003b2a0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b2b0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b2c0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b2d0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b2e0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b2f0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b300:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b310:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b320:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b330:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b340:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b350:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003b360:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b370:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b380:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b390:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b3a0:·7265·7365·6e74·0a20·2077·6865·6e3a·2028··resent.··when:·( | |||
| 0003b3b0:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003b3c0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003b3d0:·6573·206f·7220·226b·6572·6e65·6c2d·7565··es·or·"kernel-ue | |||
| 0003b3e0:·6b22·2069·6e20·616e·7369·626c·655f·6661··k"·in·ansible_fa | |||
| 0003b3f0:·6374·732e·7061·636b·6167·6573·290a·2020··cts.packages).·· | |||
| 0003b400:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b410:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003b420:·2d53·5449·472d·4f4c·3038·2d30·302d·3031··-STIG-OL08-00-01 | |||
| 0003b430:·3033·3539·0a20·202d·204e·4953·542d·3830··0359.··-·NIST-80 | |||
| 0003b440:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b450:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b460:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b470:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b480:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b490:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b4a0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b4b0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b4c0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b4d0:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b4e0:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b4f0:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003b500:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b510:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b520:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b530:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b540:·6172·6765·743d·2223·6964·6d35·3639·3822··arget="#idm5698" | |||
| 0003b550:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b560:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b570:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b580:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b590:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b5a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003 | 0003ae70:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | ||
| 0003 | 0003ae80:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | ||
| 0003 | 0003ae90:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003 | 0003aea0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| Max diff block lines reached; 9702773/9731919 bytes (99.70%) of diff not shown. | |||
| Offset 101, 26 lines modified | Offset 101, 34 lines modified | ||
| 101 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 101 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 105 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 105 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | [[packages]] | ||
| 110 | name·=·"aide" | ||
| 111 | version·=·"*" | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 113 | incl | 117 | #·Remediation·is·applicable·only·in·certain·platforms |
| 118 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 114 | class·install_aide·{ | ||
| 115 | ··package·{·'aide': | ||
| 116 | ····ensure·=>·'installed', | ||
| 117 | ··} | ||
| 118 | 119 | if·!·rpm·-q·--quiet·"aide"·;·then | |
| 120 | ····yum·install·-y·"aide" | ||
| 121 | fi | ||
| 122 | else | ||
| 123 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 124 | fi | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 124 | -·name:·Gather·the·package·facts | 130 | -·name:·Gather·the·package·facts |
| 125 | ··package_facts: | 131 | ··package_facts: |
| Offset 151, 41 lines modified | Offset 159, 33 lines modified | ||
| 151 | ··-·PCI-DSSv4-11.5.2 | 159 | ··-·PCI-DSSv4-11.5.2 |
| 152 | ··-·enable_strategy | 160 | ··-·enable_strategy |
| 153 | ··-·low_complexity | 161 | ··-·low_complexity |
| 154 | ··-·low_disruption | 162 | ··-·low_disruption |
| 155 | ··-·medium_severity | 163 | ··-·medium_severity |
| 156 | ··-·no_reboot_needed | 164 | ··-·no_reboot_needed |
| 157 | ··-·package_aide_installed | 165 | ··-·package_aide_installed |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"aide" | ||
| 161 | version·=·"*" | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 167 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 168 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 169 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 170 | ····yum·install·-y·"aide" | ||
| 171 | fi | ||
| 171 | package·--add=aide | ||
| 172 | else | ||
| 173 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 174 | fi | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 177 | include·install_aide | ||
| 180 | 178 | class·install_aide·{ | |
| 179 | ··package·{·'aide': | ||
| 180 | ····ensure·=>·'installed', | ||
| 181 | ··} | ||
| 182 | } | ||
| 181 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 183 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 182 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 184 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 183 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. | 185 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. |
| 184 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 186 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 185 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 187 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 201, 14 lines modified | Offset 201, 27 lines modified | ||
| 201 | ············_\x8i_\x8s_\x8m······1446 | 201 | ············_\x8i_\x8s_\x8m······1446 |
| 202 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 202 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 203 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 203 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 204 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 204 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 205 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 205 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 206 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 206 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 207 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 207 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 209 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 210 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 211 | fips-mode-setup·--enable | ||
| 212 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 213 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 214 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 215 | fi | ||
| 216 | else | ||
| 217 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 218 | fi | ||
| 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 209 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 220 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 210 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 221 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 211 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 222 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 212 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 223 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 213 | -·name:·Gather·the·package·facts | 224 | -·name:·Gather·the·package·facts |
| 214 | ··package_facts: | 225 | ··package_facts: |
| Offset 298, 27 lines modified | Offset 311, 14 lines modified | ||
| 298 | ··-·NIST-800-53-SC-13 | 311 | ··-·NIST-800-53-SC-13 |
| 299 | ··-·enable_dracut_fips_module | 312 | ··-·enable_dracut_fips_module |
| 300 | ··-·high_severity | 313 | ··-·high_severity |
| 301 | ··-·medium_complexity | 314 | ··-·medium_complexity |
| 302 | ··-·medium_disruption | 315 | ··-·medium_disruption |
| 303 | ··-·reboot_required | 316 | ··-·reboot_required |
| 304 | ··-·restrict_strategy | 317 | ··-·restrict_strategy |
| 305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 306 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 307 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 308 | fips-mode-setup·--enable | ||
| Max diff block lines reached; 1164381/1170870 bytes (99.45%) of diff not shown. | |||
| Offset 15166, 408 lines modified | Offset 15166, 408 lines modified | ||
| 0003b3d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b3d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b3e0:·2369·646d·3533·3539·2220·7461·6269·6e64··#idm5359"·tabind | 0003b3e0:·2369·646d·3533·3539·2220·7461·6269·6e64··#idm5359"·tabind | ||
| 0003b3f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b3f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b400:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b400:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b410:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b410:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b420:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b420:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b430:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b430:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b440:·5265·6d65·6469·6174·696f·6e20· | 0003b440:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003b450:·6 | 0003b450:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | ||
| 0003b460:· | 0003b460:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b470:·7 | 0003b470:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b480:·6 | 0003b480:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b490:· | 0003b490:·3533·3539·223e·3c70·7265·3e3c·636f·6465··5359"><pre><code | ||
| 0003b4a0:· | 0003b4a0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | ||
| 0003b4b0:· | 0003b4b0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | ||
| 0003b4c0:· | 0003b4c0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | ||
| 0003b4d0:· | 0003b4d0:·7466·6f72·6d73·0a69·6620·2120·2820·7b20··tforms.if·!·(·{· | ||
| 0003b4e0:·7 | 0003b4e0:·7270·6d20·2d2d·7175·6965·7420·2d71·206b··rpm·--quiet·-q·k | ||
| 0003b4f0:· | 0003b4f0:·6572·6e65·6c20·3b7d·2026·616d·703b·2661··ernel·;}·&&a | ||
| 0003b500:· | 0003b500:·6d70·3b20·7b20·7270·6d20·2d2d·7175·6965··mp;·{·rpm·--quie | ||
| 0003b510:·727 | 0003b510:·7420·2d71·2072·706d·2d6f·7374·7265·6520··t·-q·rpm-ostree· | ||
| 0003b520:·3 | 0003b520:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003b530:· | 0003b530:·7270·6d20·2d2d·7175·6965·7420·2d71·2062··rpm·--quiet·-q·b | ||
| 0003b540:· | 0003b540:·6f6f·7463·203b·7d20·2661·6d70·3b26·616d··ootc·;}·&&am | ||
| 0003b550:·7 | 0003b550:·703b·207b·2021·2072·706d·202d·2d71·7569··p;·{·!·rpm·--qui | ||
| 0003b560:· | 0003b560:·6574·202d·7120·6f70·656e·7368·6966·742d··et·-q·openshift- | ||
| 0003b570:·6 | 0003b570:·6b75·6265·6c65·7420·3b7d·2029·3b20·7468··kubelet·;}·);·th | ||
| 0003b580:· | 0003b580:·656e·0a0a·2320·4669·6e64·2077·6869·6368··en..#·Find·which | ||
| 0003b590:· | 0003b590:·2066·696c·6573·2068·6176·6520·696e·636f···files·have·inco | ||
| 0003b5a0:· | 0003b5a0:·7272·6563·7420·6861·7368·2028·6e6f·7420··rrect·hash·(not· | ||
| 0003b5b0:·6 | 0003b5b0:·696e·202f·6574·632c·2062·6563·6175·7365··in·/etc,·because | ||
| 0003b5c0:· | 0003b5c0:·206f·6620·7468·6520·7379·7374·656d·2072···of·the·system·r | ||
| 0003b5d0:·6 | 0003b5d0:·656c·6174·6564·2063·6f6e·6669·6720·6669··elated·config·fi | ||
| 0003b5e0:· | 0003b5e0:·6c65·7329·2061·6e64·2074·6865·6e20·6765··les)·and·then·ge | ||
| 0003b5f0:· | 0003b5f0:·7420·6669·6c65·7320·6e61·6d65·730a·6669··t·files·names.fi | ||
| 0003b600:· | 0003b600:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003b610:· | 0003b610:·6374·5f68·6173·683d·2224·2872·706d·202d··ct_hash="$(rpm·- | ||
| 0003b620:· | 0003b620:·5661·202d·2d6e·6f63·6f6e·6669·6720·7c20··Va·--noconfig·|· | ||
| 0003b630:· | 0003b630:·6772·6570·202d·4520·275e·2e2e·3527·207c··grep·-E·'^..5'·| | ||
| 0003b640:· | 0003b640:·2061·776b·2027·7b70·7269·6e74·2024·4e46···awk·'{print·$NF | ||
| 0003b650:· | 0003b650:·7d27·2029·220a·0a69·6620·5b20·2d6e·2022··}'·)"..if·[·-n·" | ||
| 0003b660:· | 0003b660:·2466·696c·6573·5f77·6974·685f·696e·636f··$files_with_inco | ||
| 0003b670:· | 0003b670:·7272·6563·745f·6861·7368·2220·5d3b·2074··rrect_hash"·];·t | ||
| 0003b680:· | 0003b680:·6865·6e0a·2020·2020·2320·4672·6f6d·2066··hen.····#·From·f | ||
| 0003b690:· | 0003b690:·696c·6573·206e·616d·6573·2067·6574·2070··iles·names·get·p | ||
| 0003b6a0:· | 0003b6a0:·6163·6b61·6765·206e·616d·6573·2061·6e64··ackage·names·and | ||
| 0003b6b0:·20 | 0003b6b0:·2063·6861·6e67·6520·6e65·776c·696e·6520···change·newline· | ||
| 0003b6c0:· | 0003b6c0:·746f·2073·7061·6365·2c20·6265·6361·7573··to·space,·becaus | ||
| 0003b6d0:· | 0003b6d0:·6520·7270·6d20·7772·6974·6573·2065·6163··e·rpm·writes·eac | ||
| 0003b6e0:·6 | 0003b6e0:·6820·7061·636b·6167·6520·746f·206e·6577··h·package·to·new | ||
| 0003b6f0:·2 | 0003b6f0:·206c·696e·650a·2020·2020·7061·636b·6167···line.····packag | ||
| 0003b700:· | 0003b700:·6573·5f74·6f5f·7265·696e·7374·616c·6c3d··es_to_reinstall= | ||
| 0003b710:· | 0003b710:·2224·2872·706d·202d·7166·2024·6669·6c65··"$(rpm·-qf·$file | ||
| 0003b720:· | 0003b720:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003b730:· | 0003b730:·5f68·6173·6820·7c20·7472·2027·5c6e·2720··_hash·|·tr·'\n'· | ||
| 0003b740:· | 0003b740:·2720·2729·220a·0a20·2020·200a·2020·2020··'·')"..····.···· | ||
| 0003b750:· | 0003b750:·7975·6d20·7265·696e·7374·616c·6c20·2d79··yum·reinstall·-y | ||
| 0003b760:·2 | 0003b760:·2024·7061·636b·6167·6573·5f74·6f5f·7265···$packages_to_re | ||
| 0003b770:·6 | 0003b770:·696e·7374·616c·6c0a·2020·2020·0a66·690a··install.····.fi. | ||
| 0003b780:· | 0003b780:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | ||
| 0003b790:· | 0003b790:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | ||
| 0003b7a0:·6 | 0003b7a0:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | ||
| 0003b7b0:· | 0003b7b0:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | ||
| 0003b7c0:· | 0003b7c0:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | ||
| 0003b7d0:· | 0003b7d0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003b7e0:· | 0003b7e0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003b7f0:·62 | 0003b7f0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003b800:·6 | 0003b800:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003b810:· | 0003b810:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b820:· | 0003b820:·2223·6964·6d35·3336·3022·2074·6162·696e··"#idm5360"·tabin | ||
| 0003b830:· | 0003b830:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b840:· | 0003b840:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b850:·6 | 0003b850:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b860:· | 0003b860:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b870:·657 | 0003b870:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b880:· | 0003b880:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b890:· | 0003b890:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b8a0:· | 0003b8a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b8b0:· | 0003b8b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b8c0:· | 0003b8c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b8d0:·22 | 0003b8d0:·2269·646d·3533·3630·223e·3c74·6162·6c65··"idm5360"><table | ||
| 0003b8e0:·20 | 0003b8e0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b8f0:· | 0003b8f0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b900:· | 0003b900:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b910:· | 0003b910:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b920:·3 | 0003b920:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b930:·2 | 0003b930:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b940:· | 0003b940:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b950:· | 0003b950:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b960:· | 0003b960:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b970:· | 0003b970:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b980:· | 0003b980:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b990:· | 0003b990:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b9a0:· | 0003b9a0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b9b0:· | 0003b9b0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b9c0:· | 0003b9c0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b9d0:· | 0003b9d0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b9e0:· | 0003b9e0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | ||
| 0003b9f0:· | 0003b9f0:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | ||
| 0003ba00:·7 | 0003ba00:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | ||
| 0003ba10:·6 | 0003ba10:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | ||
| 0003ba20:·6 | 0003ba20:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003ba30:· | 0003ba30:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003ba40:· | 0003ba40:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003ba50:· | 0003ba50:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003ba60:· | 0003ba60:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003ba70:· | 0003ba70:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003ba80:· | 0003ba80:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003ba90:· | 0003ba90:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003baa0:· | 0003baa0:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003bab0:· | 0003bab0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003bac0:· | 0003bac0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bad0:· | 0003bad0:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003bae0:· | 0003bae0:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003baf0:· | 0003baf0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003bb00:· | 0003bb00:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003bb10:· | 0003bb10:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003bb20:· | 0003bb20:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003bb30:· | 0003bb30:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003bb40:· | 0003bb40:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003bb50:·7 | 0003bb50:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003bb60:·6 | 0003bb60:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003bb70:· | 0003bb70:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 0003bb80:· | 0003bb80:·790a·2020·2d20·7270·6d5f·7665·7269·6679··y.··-·rpm_verify | ||
| 0003bb90:· | 0003bb90:·5f68·6173·6865·730a·0a2d·206e·616d·653a··_hashes..-·name: | ||
| 0003bba0:· | 0003bba0:·2027·5365·7420·6661·6374·3a20·5061·636b···'Set·fact:·Pack | ||
| Max diff block lines reached; 17774302/17829254 bytes (99.69%) of diff not shown. | |||
| Offset 15091, 408 lines modified | Offset 15091, 408 lines modified | ||
| 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003af30:·2223·6964·6d35·3335·3922·2074·6162·696e··"#idm5359"·tabin | 0003af30:·2223·6964·6d35·3335·3922·2074·6162·696e··"#idm5359"·tabin | ||
| 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003af90:·3e52·656d·6564·6961·7469·6f6e·20 | 0003af90:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003afa0:·6 | 0003afa0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003afb0:·3 | 0003afb0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003afc0:· | 0003afc0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003afd0:· | 0003afd0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003afe0:· | 0003afe0:·6d35·3335·3922·3e3c·7072·653e·3c63·6f64··m5359"><pre><cod | ||
| 0003aff0:· | 0003aff0:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003b000:·6 | 0003b000:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003b010:·6 | 0003b010:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003b020:· | 0003b020:·6174·666f·726d·730a·6966·2021·2028·207b··atforms.if·!·(·{ | ||
| 0003b030:· | 0003b030:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b040:· | 0003b040:·6b65·726e·656c·203b·7d20·2661·6d70·3b26··kernel·;}·&& | ||
| 0003b050:· | 0003b050:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003b060:·7 | 0003b060:·6574·202d·7120·7270·6d2d·6f73·7472·6565··et·-q·rpm-ostree | ||
| 0003b070:· | 0003b070:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b080:· | 0003b080:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b090:· | 0003b090:·626f·6f74·6320·3b7d·2026·616d·703b·2661··bootc·;}·&&a | ||
| 0003b0a0:· | 0003b0a0:·6d70·3b20·7b20·2120·7270·6d20·2d2d·7175··mp;·{·!·rpm·--qu | ||
| 0003b0b0:· | 0003b0b0:·6965·7420·2d71·206f·7065·6e73·6869·6674··iet·-q·openshift | ||
| 0003b0c0:· | 0003b0c0:·2d6b·7562·656c·6574·203b·7d20·293b·2074··-kubelet·;}·);·t | ||
| 0003b0d0:· | 0003b0d0:·6865·6e0a·0a23·2046·696e·6420·7768·6963··hen..#·Find·whic | ||
| 0003b0e0:·6 | 0003b0e0:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | ||
| 0003b0f0:· | 0003b0f0:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | ||
| 0003b100:· | 0003b100:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | ||
| 0003b110:·6 | 0003b110:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | ||
| 0003b120:· | 0003b120:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | ||
| 0003b130:·6 | 0003b130:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | ||
| 0003b140:· | 0003b140:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | ||
| 0003b150:· | 0003b150:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003b160:· | 0003b160:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | ||
| 0003b170:· | 0003b170:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | ||
| 0003b180:·2 | 0003b180:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | ||
| 0003b190:· | 0003b190:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | ||
| 0003b1a0:· | 0003b1a0:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | ||
| 0003b1b0:·2 | 0003b1b0:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | ||
| 0003b1c0:· | 0003b1c0:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | ||
| 0003b1d0:· | 0003b1d0:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | ||
| 0003b1e0:· | 0003b1e0:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | ||
| 0003b1f0:· | 0003b1f0:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | ||
| 0003b200:· | 0003b200:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | ||
| 0003b210:·2 | 0003b210:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | ||
| 0003b220:· | 0003b220:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | ||
| 0003b230:·6 | 0003b230:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | ||
| 0003b240:· | 0003b240:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | ||
| 0003b250:· | 0003b250:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003b260:· | 0003b260:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | ||
| 0003b270:·6 | 0003b270:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003b280:·7 | 0003b280:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | ||
| 0003b290:· | 0003b290:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | ||
| 0003b2a0:· | 0003b2a0:·2079·756d·2072·6569·6e73·7461·6c6c·202d···yum·reinstall·- | ||
| 0003b2b0:· | 0003b2b0:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | ||
| 0003b2c0:·6 | 0003b2c0:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | ||
| 0003b2d0:· | 0003b2d0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | ||
| 0003b2e0:· | 0003b2e0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | ||
| 0003b2f0:·6 | 0003b2f0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | ||
| 0003b300:· | 0003b300:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | ||
| 0003b310:·6 | 0003b310:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | ||
| 0003b320:· | 0003b320:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003b330:· | 0003b330:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b340:· | 0003b340:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b350:· | 0003b350:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003b360:·7 | 0003b360:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b370:· | 0003b370:·3d22·2369·646d·3533·3630·2220·7461·6269··="#idm5360"·tabi | ||
| 0003b380:· | 0003b380:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b390:· | 0003b390:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b3a0:· | 0003b3a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b3b0:· | 0003b3b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b3c0:· | 0003b3c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b3d0:· | 0003b3d0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b3e0:· | 0003b3e0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003b3f0:· | 0003b3f0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003b400:· | 0003b400:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003b410:· | 0003b410:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b420:· | 0003b420:·3d22·6964·6d35·3336·3022·3e3c·7461·626c··="idm5360"><tabl | ||
| 0003b430:· | 0003b430:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003b440:· | 0003b440:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003b450:· | 0003b450:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003b460:· | 0003b460:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003b470:·3 | 0003b470:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003b480:· | 0003b480:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003b490:· | 0003b490:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b4a0:· | 0003b4a0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b4b0:· | 0003b4b0:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003b4c0:· | 0003b4c0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b4d0:· | 0003b4d0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b4e0:·3 | 0003b4e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b4f0:· | 0003b4f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003b500:· | 0003b500:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003b510:· | 0003b510:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b520:· | 0003b520:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003b530:·20 | 0003b530:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003b540:·6 | 0003b540:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003b550:·65 | 0003b550:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003b560:· | 0003b560:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003b570:·6 | 0003b570:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003b580:· | 0003b580:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003b590:· | 0003b590:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003b5a0:· | 0003b5a0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003b5b0:· | 0003b5b0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003b5c0:· | 0003b5c0:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003b5d0:·20 | 0003b5d0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003b5e0:· | 0003b5e0:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003b5f0:· | 0003b5f0:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003b600:· | 0003b600:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003b610:· | 0003b610:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003b620:· | 0003b620:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003b630:· | 0003b630:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003b640:· | 0003b640:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003b650:· | 0003b650:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003b660:· | 0003b660:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003b670:· | 0003b670:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003b680:· | 0003b680:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003b690:· | 0003b690:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003b6a0:· | 0003b6a0:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003b6b0:·6 | 0003b6b0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003b6c0:· | 0003b6c0:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003b6d0:· | 0003b6d0:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003b6e0:·7 | 0003b6e0:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| 0003b6f0:· | 0003b6f0:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| Max diff block lines reached; 10628886/10683838 bytes (99.49%) of diff not shown. | |||
| Offset 93, 14 lines modified | Offset 93, 33 lines modified | ||
| 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 101 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 102 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 103 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 104 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 105 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 106 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 107 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 108 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 109 | fi | ||
| 110 | else | ||
| 111 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 112 | fi | ||
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 101 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 102 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 103 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 104 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 105 | -·name:·Gather·the·package·facts | 118 | -·name:·Gather·the·package·facts |
| 106 | ··package_facts: | 119 | ··package_facts: |
| Offset 267, 33 lines modified | Offset 286, 14 lines modified | ||
| 267 | ··-·PCI-DSSv4-11.5.2 | 286 | ··-·PCI-DSSv4-11.5.2 |
| 268 | ··-·high_complexity | 287 | ··-·high_complexity |
| 269 | ··-·high_severity | 288 | ··-·high_severity |
| 270 | ··-·medium_disruption | 289 | ··-·medium_disruption |
| 271 | ··-·no_reboot_needed | 290 | ··-·no_reboot_needed |
| 272 | ··-·restrict_strategy | 291 | ··-·restrict_strategy |
| 273 | ··-·rpm_verify_hashes | 292 | ··-·rpm_verify_hashes |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 276 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 277 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 278 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 279 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 280 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 281 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 282 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 283 | fi | ||
| 284 | else | ||
| 285 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 286 | fi | ||
| 287 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 288 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 294 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 289 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 295 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 290 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 296 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 291 | $·rpm·-qf·FILENAME | 297 | $·rpm·-qf·FILENAME |
| 292 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 298 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 314, 14 lines modified | Offset 314, 50 lines modified | ||
| 314 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 314 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 315 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 315 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 316 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 316 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 317 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 317 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 318 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 318 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 320 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 320 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 327 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 328 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 329 | declare·-A·SETPERMS_RPM_DICT | ||
| 330 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 331 | #·is·expected·by·the·RPM·database | ||
| 332 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 333 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 334 | do | ||
| 335 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 336 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 337 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 338 | ········do | ||
| 339 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 340 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 341 | ········done | ||
| 342 | done | ||
| 343 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 344 | #·correct·values | ||
| 345 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 346 | do | ||
| 347 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 348 | done | ||
| 349 | else | ||
| 350 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 351 | fi | ||
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 353 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 354 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 355 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 356 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 326 | -·name:·Gather·the·package·facts | 357 | -·name:·Gather·the·package·facts |
| 327 | ··package_facts: | 358 | ··package_facts: |
| Offset 433, 50 lines modified | Offset 469, 14 lines modified | ||
| 433 | ··-·PCI-DSSv4-11.5.2 | 469 | ··-·PCI-DSSv4-11.5.2 |
| 434 | ··-·high_complexity | 470 | ··-·high_complexity |
| 435 | ··-·high_severity | 471 | ··-·high_severity |
| 436 | ··-·medium_disruption | 472 | ··-·medium_disruption |
| 437 | ··-·no_reboot_needed | 473 | ··-·no_reboot_needed |
| 438 | ··-·restrict_strategy | 474 | ··-·restrict_strategy |
| 439 | ··-·rpm_verify_permissions | 475 | ··-·rpm_verify_permissions |
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 852198/860280 bytes (99.06%) of diff not shown. | |||
| Offset 15083, 221 lines modified | Offset 15083, 221 lines modified | ||
| 0003aea0:·6765·743d·2223·6964·6d35·3639·3622·2074··get="#idm5696"·t | 0003aea0:·6765·743d·2223·6964·6d35·3639·3622·2074··get="#idm5696"·t | ||
| 0003aeb0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003aeb0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003aec0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003aec0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003aed0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003aed0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003aee0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003aee0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003aef0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003aef0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003af00:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003af00:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003af10:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003af20:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003af30:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003af40:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003af50:·6964·3d22·6964·6d35·3639·3622·3e3c·7461··id="idm5696"><ta | |||
| 0003af60:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003af70:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003af80:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003af90:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003afa0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003afb0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003afc0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003afd0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003afe0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003aff0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b000:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b010:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b020:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b030:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b040:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b050:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b060:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b070:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b080:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b090:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b0a0:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b0b0:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003b0c0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b0d0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b0e0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b0f0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b100:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | |||
| 0003b110:·3937·2220·7461·6269·6e64·6578·3d22·3022··97"·tabindex="0" | |||
| 0003b120:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b130:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b140:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b150:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b160:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b170:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b180:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b190:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b1a0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b1b0:·6170·7365·2220·6964·3d22·6964·6d35·3639··apse"·id="idm569 | |||
| 0003b1c0:·3722·3e3c·7461·626c·6520·636c·6173·733d··7"><table·class= | |||
| 0003b1d0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b1e0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b1f0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b200:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b210:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b220:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b230:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b240:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b250:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b260:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b270:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b280:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b290:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b2a0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b2b0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b2c0:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b2d0:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b2e0:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b2f0:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b300:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b310:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b320:·412d·5354·4947·2d4f·4c30·382d·3030·2d30··A-STIG-OL08-00-0 | |||
| 0003b330:·3130·3335·390a·2020·2d20·4e49·5354·2d38··10359.··-·NIST-8 | |||
| 0003b340:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b350:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b360:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b370:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b380:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b390:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b3a0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b3b0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b3c0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b3d0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b3e0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b3f0:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003b400:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b410:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b420:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b430:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b440:·7365·6e74·0a20·2077·6865·6e3a·2028·226b··sent.··when:·("k | |||
| 0003b450:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | |||
| 0003b460:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003b470:·206f·7220·226b·6572·6e65·6c2d·7565·6b22···or·"kernel-uek" | |||
| 0003b480:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003b490:·732e·7061·636b·6167·6573·290a·2020·7461··s.packages).··ta | |||
| 0003b4a0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b4b0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b4c0:·5449·472d·4f4c·3038·2d30·302d·3031·3033··TIG-OL08-00-0103 | |||
| 0003b4d0:·3539·0a20·202d·204e·4953·542d·3830·302d··59.··-·NIST-800- | |||
| 0003b4e0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b4f0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b500:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b510:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b520:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b530:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b540:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b550:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b560:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b570:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b580:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b590:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b5a0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b5b0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b5c0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b5d0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b5e0:·6765·743d·2223·6964·6d35·3639·3822·2074··get="#idm5698"·t | |||
| 0003b5f0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b600:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b610:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b620:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b630:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b640:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003 | 0003af10:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003 | 0003af20:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | ||
| 0003 | 0003af30:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003 | 0003af40:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| Max diff block lines reached; 29138707/29167853 bytes (99.90%) of diff not shown. | |||
| Offset 15101, 221 lines modified | Offset 15101, 221 lines modified | ||
| 0003afc0:·7461·7267·6574·3d22·2369·646d·3536·3936··target="#idm5696 | 0003afc0:·7461·7267·6574·3d22·2369·646d·3536·3936··target="#idm5696 | ||
| 0003afd0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003afd0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003afe0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003afe0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003aff0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003aff0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b000:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b000:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b010:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b010:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b020:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b020:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b030:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b040:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b050:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b060:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b070:·6522·2069·643d·2269·646d·3536·3936·223e··e"·id="idm5696"> | |||
| 0003b080:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b090:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b0a0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b0b0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b0c0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b0d0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b0e0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b0f0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b100:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b110:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b120:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b130:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b140:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b150:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b160:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b170:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b180:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b190:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b1a0:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b1b0:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b1c0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b1d0:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b1e0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b1f0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b200:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b210:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b220:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b230:·6d35·3639·3722·2074·6162·696e·6465·783d··m5697"·tabindex= | |||
| 0003b240:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b250:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b260:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b270:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b280:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b290:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b2a0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b2b0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b2c0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b2d0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b2e0:·3536·3937·223e·3c74·6162·6c65·2063·6c61··5697"><table·cla | |||
| 0003b2f0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b300:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b310:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b320:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b330:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b340:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b350:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b360:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b370:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b380:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b390:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b3a0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b3b0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b3c0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b3d0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b3e0:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003b3f0:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003b400:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003b410:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003b420:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | |||
| 0003b430:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b440:·4449·5341·2d53·5449·472d·4f4c·3038·2d30··DISA-STIG-OL08-0 | |||
| 0003b450:·302d·3031·3033·3539·0a20·202d·204e·4953··0-010359.··-·NIS | |||
| 0003b460:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b470:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b480:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b490:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b4a0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b4b0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b4c0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b4d0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b4e0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b4f0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b500:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b510:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003b520:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b530:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b540:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b550:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b560:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b570:·2822·6b65·726e·656c·2220·696e·2061·6e73··("kernel"·in·ans | |||
| 0003b580:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003b590:·6765·7320·6f72·2022·6b65·726e·656c·2d75··ges·or·"kernel-u | |||
| 0003b5a0:·656b·2220·696e·2061·6e73·6962·6c65·5f66··ek"·in·ansible_f | |||
| 0003b5b0:·6163·7473·2e70·6163·6b61·6765·7329·0a20··acts.packages).· | |||
| 0003b5c0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b5d0:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b5e0:·412d·5354·4947·2d4f·4c30·382d·3030·2d30··A-STIG-OL08-00-0 | |||
| 0003b5f0:·3130·3335·390a·2020·2d20·4e49·5354·2d38··10359.··-·NIST-8 | |||
| 0003b600:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b610:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b620:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b630:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b640:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b650:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b660:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b670:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b680:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b690:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b6a0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b6b0:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b6c0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b6d0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b6e0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b6f0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b700:·7461·7267·6574·3d22·2369·646d·3536·3938··target="#idm5698 | |||
| 0003b710:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b720:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b730:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b740:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b750:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b760:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b | 0003b030:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 0003b | 0003b040:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | ||
| 0003b | 0003b050:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003b | 0003b060:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| Max diff block lines reached; 29016940/29046086 bytes (99.90%) of diff not shown. | |||
| Offset 15037, 218 lines modified | Offset 15037, 218 lines modified | ||
| 0003abc0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003abc0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003abd0:·646d·3632·3739·2220·7461·6269·6e64·6578··dm6279"·tabindex | 0003abd0:·646d·3632·3739·2220·7461·6269·6e64·6578··dm6279"·tabindex | ||
| 0003abe0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003abe0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003abf0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003abf0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003ac00:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003ac00:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003ac10:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003ac10:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003ac20:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003ac20:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003ac30:·6d65·6469·6174·696f·6e20· | 0003ac30:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003ac40:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003ac50:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003ac60:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ac70:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ac80:·7365·2220·6964·3d22·6964·6d36·3237·3922··se"·id="idm6279" | |||
| 0003ac40:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003ac50:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ac60:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003ac70:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ac80:·3632·3739·223e·3c74·6162·6c65·2063·6c61··6279"><table·cla | |||
| 0003ac90:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003aca0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003acb0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003acc0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003acd0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003ace0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003acf0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003ad00:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003ad10:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ad20:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003ad30:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003ad40:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003ad50:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003ad60:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003a | 0003ac90:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 0003aca0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003acb0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003acc0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003acd0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003ace0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003ad80:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003ad90:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003ada0:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003adb0:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003adc0:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003add0:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003ade0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003adf0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ae00:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ae10:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003a | 0003acf0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0003ae30:·743d·2223·6964·6d36·3238·3022·2074·6162··t="#idm6280"·tab | |||
| 0003ae40:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003ae50:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003ae60:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003ae70:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003ae80:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003ae90:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003a | 0003ad00:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0003ad10:·7461·7267·6574·3d22·2369·646d·3632·3830··target="#idm6280 | |||
| 0003ad20:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003ad30:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003ad40:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003ad50:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003ad60:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003ad70:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003ad80:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003a | 0003ad90:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003a | 0003ada0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003a | 0003adb0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003a | 0003adc0:·2069·643d·2269·646d·3632·3830·223e·3c74···id="idm6280"><t | ||
| 0003a | 0003add0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003a | 0003ade0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003a | 0003adf0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003a | 0003ae00:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003a | 0003ae10:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003a | 0003ae20:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003a | 0003ae30:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003a | 0003ae40:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003a | 0003ae50:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003a | 0003ae60:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003a | 0003ae70:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003a | 0003ae80:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003a | 0003ae90:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003a | 0003aea0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | ||
| 0003a | 0003aeb0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003afe0:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003aff0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003b000:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003b010:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003b020:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003b030:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b040:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003b050:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b060:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b070:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b080:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b090:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b0a0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b0b0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b0c0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b0d0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b0e0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b0f0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b100:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003b110:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b120:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b130:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b140:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003 | 0003aec0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | ||
| 0003aed0:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003aee0:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003aef0:·6e20·706c·6174·666f·726d·730a·6966·2072··n·platforms.if·r | |||
| 0003af00:·706d·202d·2d71·7569·6574·202d·7120·6b65··pm·--quiet·-q·ke | |||
| 0003af10:·726e·656c·207c·7c20·7270·6d20·2d2d·7175··rnel·||·rpm·--qu | |||
| 0003af20:·6965·7420·2d71·206b·6572·6e65·6c2d·7565··iet·-q·kernel-ue | |||
| 0003af30:·6b3b·2074·6865·6e0a·0a69·6620·2120·7270··k;·then..if·!·rp | |||
| 0003af40:·6d20·2d71·202d·2d71·7569·6574·2022·6169··m·-q·--quiet·"ai | |||
| 0003af50:·6465·2220·3b20·7468·656e·0a20·2020·2079··de"·;·then.····y | |||
| 0003af60:·756d·2069·6e73·7461·6c6c·202d·7920·2261··um·install·-y·"a | |||
| 0003af70:·6964·6522·0a66·690a·0a65·6c73·650a·2020··ide".fi..else.·· | |||
| 0003af80:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | |||
| 0003af90:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | |||
| 0003afa0:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | |||
| 0003afb0:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | |||
| 0003afc0:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | |||
| 0003afd0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003afe0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003aff0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| Max diff block lines reached; 21502479/21531211 bytes (99.87%) of diff not shown. | |||
| Offset 15042, 218 lines modified | Offset 15042, 218 lines modified | ||
| 0003ac10:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003ac10:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003ac20:·2223·6964·6d36·3237·3922·2074·6162·696e··"#idm6279"·tabin | 0003ac20:·2223·6964·6d36·3237·3922·2074·6162·696e··"#idm6279"·tabin | ||
| 0003ac30:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003ac30:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ac40:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003ac40:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003ac50:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003ac50:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003ac60:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003ac60:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003ac70:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003ac70:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003ac80:·3e52·656d·6564·6961·7469·6f6e·20 | 0003ac80:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003ac90:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003aca0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003ac | 0003ac90:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003aca0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003acb0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003acc0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003acd0:·6c61·7073·6522·2069·643d·2269·646d·3632··lapse"·id="idm62 | |||
| 0003ace0:·3739·223e·3c70·7265·3e3c·636f·6465·3e0a··79"><pre><code>. | |||
| 0003acf0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003ad00:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003ad10:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003ad20:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ad30:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003ad40:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003a | 0003ad50:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003ad60:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | |||
| 0003ad70:·3238·3022·2074·6162·696e·6465·783d·2230··280"·tabindex="0 | |||
| 0003ad80:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003ad90:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003ada0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003adb0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003adc0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003add0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003acd0:·6964·6d36·3237·3922·3e3c·7461·626c·6520··idm6279"><table· | |||
| 0003ace0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003acf0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003ad00:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003ad10:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003ad20:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003ad30:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ad40:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003ad50:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003ad60:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ad70:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003ad80:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003ad90:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003ada0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003adb0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003adc0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003add0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003ade0:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003adf0:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003ae00:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003ae10:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003ae20:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003ae30:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003ae40:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003ae50:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003ae60:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003ae70:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003ae80:·7267·6574·3d22·2369·646d·3632·3830·2220··rget="#idm6280"· | |||
| 0003ae90:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003aea0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003aeb0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003aec0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003aed0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003aee0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003aef0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003a | 0003ade0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003a | 0003adf0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003a | 0003ae00:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003a | 0003ae10:·7365·2220·6964·3d22·6964·6d36·3238·3022··se"·id="idm6280" | ||
| 0003a | 0003ae20:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003a | 0003ae30:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003a | 0003ae40:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003a | 0003ae50:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003a | 0003ae60:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003a | 0003ae70:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003a | 0003ae80:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003a | 0003ae90:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003a | 0003aea0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003a | 0003aeb0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003a | 0003aec0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003a | 0003aed0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003 | 0003aee0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003 | 0003aef0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | ||
| 0003 | 0003af00:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003af10:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003af20:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003af30:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003af40:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003af50:·6620·7270·6d20·2d2d·7175·6965·7420·2d71··f·rpm·--quiet·-q | |||
| 0003af60:·206b·6572·6e65·6c20·7c7c·2072·706d·202d···kernel·||·rpm·- | |||
| 0003af70:·2d71·7569·6574·202d·7120·6b65·726e·656c··-quiet·-q·kernel | |||
| 0003af80:·2d75·656b·3b20·7468·656e·0a0a·6966·2021··-uek;·then..if·! | |||
| 0003af90:·2072·706d·202d·7120·2d2d·7175·6965·7420···rpm·-q·--quiet· | |||
| 0003afa0:·2261·6964·6522·203b·2074·6865·6e0a·2020··"aide"·;·then.·· | |||
| 0003afb0:·2020·7975·6d20·696e·7374·616c·6c20·2d79····yum·install·-y | |||
| 0003afc0:·2022·6169·6465·220a·6669·0a0a·656c·7365···"aide".fi..else | |||
| 0003afd0:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003afe0:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003aff0:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003b000:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003b010:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003b020:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b030:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b040:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b030:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | |||
| 0003b040:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | |||
| 0003b050:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | |||
| 0003b060:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | |||
| 0003b070:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | |||
| 0003b080:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b090:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | |||
| 0003b0a0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b0b0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b0c0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b0d0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b0e0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b0f0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b100:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b110:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b120:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b130:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b140:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b150:·6c6c·6564·0a0a·2d20·6e61·6d65·3a20·456e··lled..-·name:·En | |||
| 0003b160:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b170:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b180:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| Max diff block lines reached; 21807137/21835869 bytes (99.87%) of diff not shown. | |||
| Offset 15033, 218 lines modified | Offset 15033, 218 lines modified | ||
| 0003ab80:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | 0003ab80:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | ||
| 0003ab90:·3237·3922·2074·6162·696e·6465·783d·2230··279"·tabindex="0 | 0003ab90:·3237·3922·2074·6162·696e·6465·783d·2230··279"·tabindex="0 | ||
| 0003aba0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003aba0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003abb0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003abb0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003abc0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003abc0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003abd0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003abd0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003abe0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003abe0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003abf0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003ac00:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003ac10:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ac20:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003ac30:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003ac40:·2069·643d·2269·646d·3632·3739·223e·3c70···id="idm6279"><p | |||
| 0003ac50:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003ac60:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003ac70:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003ac80:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003ac90:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003aca0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003abf0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003ac00:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003ac10:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003ac20:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003ac30:·6170·7365·2220·6964·3d22·6964·6d36·3237··apse"·id="idm627 | |||
| 0003ac40:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003ac50:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003ac60:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003ac70:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003ac80:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003ac90:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003aca0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003acb0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003acc0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003acd0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003ace0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003acf0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003ad00:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003ad10:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003ad20:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003ad30:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003ad40:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003ad50:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003ad60:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003ad70:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003ad80:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003ad90:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003ada0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003adb0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003adc0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003add0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003a | 0003acb0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003adf0:·2369·646d·3632·3830·2220·7461·6269·6e64··#idm6280"·tabind | |||
| 0003ae00:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003ae10:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003ae20:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003ae30:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003ae40:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003ae50:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003a | 0003acc0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003acd0:·6765·743d·2223·6964·6d36·3238·3022·2074··get="#idm6280"·t | |||
| 0003ace0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003acf0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ad00:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ad10:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ad20:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003ad30:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003ad40:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003a | 0003ad50:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003a | 0003ad60:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003a | 0003ad70:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003a | 0003ad80:·3d22·6964·6d36·3238·3022·3e3c·7461·626c··="idm6280"><tabl | ||
| 0003a | 0003ad90:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003a | 0003ada0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003a | 0003adb0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003a | 0003adc0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003a | 0003add0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003a | 0003ade0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003a | 0003adf0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003a | 0003ae00:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003a | 0003ae10:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003a | 0003ae20:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003a | 0003ae30:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003a | 0003ae40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003a | 0003ae50:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003a | 0003ae60:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003a | 0003ae70:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003afa0:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 0003afb0:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 0003afc0:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 0003afd0:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 0003afe0:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 0003aff0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b000:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b010:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b020:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b030:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b040:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b050:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b060:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b070:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b080:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b090:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b0a0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b0b0:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003b0c0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b0d0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b0e0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b0f0:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b100:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003 | 0003ae80:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | ||
| 0003ae90:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 0003aea0:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003aeb0:·6c61·7466·6f72·6d73·0a69·6620·7270·6d20··latforms.if·rpm· | |||
| 0003aec0:·2d2d·7175·6965·7420·2d71·206b·6572·6e65··--quiet·-q·kerne | |||
| 0003aed0:·6c20·7c7c·2072·706d·202d·2d71·7569·6574··l·||·rpm·--quiet | |||
| 0003aee0:·202d·7120·6b65·726e·656c·2d75·656b·3b20···-q·kernel-uek;· | |||
| 0003aef0:·7468·656e·0a0a·6966·2021·2072·706d·202d··then..if·!·rpm·- | |||
| 0003af00:·7120·2d2d·7175·6965·7420·2261·6964·6522··q·--quiet·"aide" | |||
| 0003af10:·203b·2074·6865·6e0a·2020·2020·7975·6d20···;·then.····yum· | |||
| 0003af20:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003af30:·220a·6669·0a0a·656c·7365·0a20·2020·2026··".fi..else.····& | |||
| 0003af40:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | |||
| 0003af50:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | |||
| 0003af60:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | |||
| 0003af70:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | |||
| 0003af80:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0003af90:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| Max diff block lines reached; 9714006/9742738 bytes (99.71%) of diff not shown. | |||
| Offset 112, 26 lines modified | Offset 112, 34 lines modified | ||
| 112 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 112 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 120 | [[packages]] | ||
| 121 | name·=·"aide" | ||
| 122 | version·=·"*" | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 124 | incl | 128 | #·Remediation·is·applicable·only·in·certain·platforms |
| 129 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 125 | class·install_aide·{ | ||
| 126 | ··package·{·'aide': | ||
| 127 | ····ensure·=>·'installed', | ||
| 128 | ··} | ||
| 129 | 130 | if·!·rpm·-q·--quiet·"aide"·;·then | |
| 131 | ····yum·install·-y·"aide" | ||
| 132 | fi | ||
| 133 | else | ||
| 134 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 135 | fi | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | -·name:·Gather·the·package·facts | 141 | -·name:·Gather·the·package·facts |
| 136 | ··package_facts: | 142 | ··package_facts: |
| Offset 160, 41 lines modified | Offset 168, 33 lines modified | ||
| 160 | ··-·PCI-DSSv4-11.5.2 | 168 | ··-·PCI-DSSv4-11.5.2 |
| 161 | ··-·enable_strategy | 169 | ··-·enable_strategy |
| 162 | ··-·low_complexity | 170 | ··-·low_complexity |
| 163 | ··-·low_disruption | 171 | ··-·low_disruption |
| 164 | ··-·medium_severity | 172 | ··-·medium_severity |
| 165 | ··-·no_reboot_needed | 173 | ··-·no_reboot_needed |
| 166 | ··-·package_aide_installed | 174 | ··-·package_aide_installed |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | [[packages]] | ||
| 169 | name·=·"aide" | ||
| 170 | version·=·"*" | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 177 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 178 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 179 | ····yum·install·-y·"aide" | ||
| 180 | fi | ||
| 180 | package·--add=aide | ||
| 181 | else | ||
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 183 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 186 | include·install_aide | ||
| 189 | 187 | class·install_aide·{ | |
| 188 | ··package·{·'aide': | ||
| 189 | ····ensure·=>·'installed', | ||
| 190 | ··} | ||
| 191 | } | ||
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 191 | Run·the·following·command·to·generate·a·new·database: | 193 | Run·the·following·command·to·generate·a·new·database: |
| 192 | $·sudo·/usr/sbin/aide·--init | 194 | $·sudo·/usr/sbin/aide·--init |
| 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 194 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 196 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 195 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 197 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 196 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 198 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 218, 14 lines modified | Offset 218, 28 lines modified | ||
| 218 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 218 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 219 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 219 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 220 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 220 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 221 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 221 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 222 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 222 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 223 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 223 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 224 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 224 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 226 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 227 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 228 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 229 | ····yum·install·-y·"aide" | ||
| 230 | fi | ||
| 231 | /usr/sbin/aide·--init | ||
| 232 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 233 | else | ||
| 234 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 235 | fi | ||
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 230 | -·name:·Gather·the·package·facts | 241 | -·name:·Gather·the·package·facts |
| 231 | ··package_facts: | 242 | ··package_facts: |
| Offset 310, 28 lines modified | Offset 324, 14 lines modified | ||
| 310 | ··-·PCI-DSSv4-11.5.2 | 324 | ··-·PCI-DSSv4-11.5.2 |
| 311 | ··-·aide_build_database | 325 | ··-·aide_build_database |
| 312 | ··-·low_complexity | 326 | ··-·low_complexity |
| 313 | ··-·low_disruption | 327 | ··-·low_disruption |
| 314 | ··-·medium_severity | 328 | ··-·medium_severity |
| 315 | ··-·no_reboot_needed | 329 | ··-·no_reboot_needed |
| 316 | ··-·restrict_strategy | 330 | ··-·restrict_strategy |
| 317 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 318 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 319 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| Max diff block lines reached; 1054330/1059791 bytes (99.48%) of diff not shown. | |||
| Offset 14725, 227 lines modified | Offset 14725, 227 lines modified | ||
| 00039840:·6172·6765·743d·2223·6964·6d39·3536·3922··arget="#idm9569" | 00039840:·6172·6765·743d·2223·6964·6d39·3536·3922··arget="#idm9569" | ||
| 00039850:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 00039850:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 00039860:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 00039860:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 00039870:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 00039870:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 00039880:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 00039880:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 00039890:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 00039890:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 000398a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 000398a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 000398b0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 000398c0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 000398d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 000398e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 000398f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00039900:·2269·646d·3935·3639·223e·3c70·7265·3e3c··"idm9569"><pre>< | |||
| 00039910:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 00039920:·5d5d·0a6e·616d·6520·3d20·2264·6e66·2d61··]].name·=·"dnf-a | |||
| 00039930:·7574·6f6d·6174·6963·220a·7665·7273·696f··utomatic".versio | |||
| 00039940:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 00039950:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00039960:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00039970:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00039980:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00039990:·612d·7461·7267·6574·3d22·2369·646d·3935··a-target="#idm95 | |||
| 000399a0:·3730·2220·7461·6269·6e64·6578·3d22·3022··70"·tabindex="0" | |||
| 000399b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 000399c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 000399d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 000399e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 000399f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 00039a00:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 000398b0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 000398c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 000398d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 000398e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 000398f0:·2220·6964·3d22·6964·6d39·3536·3922·3e3c··"·id="idm9569">< | |||
| 00039900:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00039910:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00039920:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 00039930:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 00039940:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 00039950:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 00039960:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00039970:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00039980:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00039990:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 000399a0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 000399b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 000399c0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 000399d0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 000399e0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 000399f0:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 00039a00:·6e73·7461·6c6c·5f64·6e66·2d61·7574·6f6d··nstall_dnf-autom | |||
| 00039a10:·6174·6963·0a0a·636c·6173·7320·696e·7374··atic..class·inst | |||
| 00039a20:·616c·6c5f·646e·662d·6175·746f·6d61·7469··all_dnf-automati | |||
| 00039a30:·6320·7b0a·2020·7061·636b·6167·6520·7b20··c·{.··package·{· | |||
| 00039a40:·2764·6e66·2d61·7574·6f6d·6174·6963·273a··'dnf-automatic': | |||
| 00039a50:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 00039a60:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 00039a70:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 00039a80:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00039a90:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00039aa0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00039ab0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00039ac0:·6172·6765·743d·2223·6964·6d39·3537·3022··arget="#idm9570" | |||
| 00039ad0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00039ae0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00039af0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00039b00:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00039b10:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00039b20:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00039b30:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 00039 | 00039a10:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 00039 | 00039a20:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 00039 | 00039a30:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 00039 | 00039a40:·6522·2069·643d·2269·646d·3935·3730·223e··e"·id="idm9570"> | ||
| 00039 | 00039a50:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 00039 | 00039a60:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 00039 | 00039a70:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 00039 | 00039a80:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 00039 | 00039a90:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 00039 | 00039aa0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 00039 | 00039ab0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 00039 | 00039ac0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 00039 | 00039ad0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 00039 | 00039ae0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 00039 | 00039af0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 00039 | 00039b00:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 00039 | 00039b10:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 00039 | 00039b20:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 00039 | 00039b30:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 00039 | 00039b40:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | ||
| 00039c80:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 00039c90:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 00039ca0:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 00039cb0:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 00039cc0:·6773·3a0a·2020·2d20·656e·6162·6c65·5f73··gs:.··-·enable_s | |||
| 00039cd0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 00039ce0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 00039cf0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 00039d00:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 00039d10:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 00039 | 00039b50:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | ||
| 00039b60:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 00039b70:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 00039b80:·2021·2028·207b·2072·706d·202d·2d71·7569···!·(·{·rpm·--qui | |||
| 00039b90:·6574·202d·7120·6b65·726e·656c·203b·7d20··et·-q·kernel·;}· | |||
| 00039ba0:·2661·6d70·3b26·616d·703b·207b·2072·706d··&&·{·rpm | |||
| 00039bb0:·202d·2d71·7569·6574·202d·7120·7270·6d2d···--quiet·-q·rpm- | |||
| 00039bc0:·6f73·7472·6565·203b·7d20·2661·6d70·3b26··ostree·;}·&& | |||
| 00039bd0:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | |||
| 00039be0:·6574·202d·7120·626f·6f74·6320·3b7d·2026··et·-q·bootc·;}·& | |||
| 00039bf0:·616d·703b·2661·6d70·3b20·7b20·2120·7270··amp;&·{·!·rp | |||
| 00039c00:·6d20·2d2d·7175·6965·7420·2d71·206f·7065··m·--quiet·-q·ope | |||
| 00039c10:·6e73·6869·6674·2d6b·7562·656c·6574·203b··nshift-kubelet·; | |||
| 00039c20:·7d20·293b·2074·6865·6e0a·0a69·6620·2120··}·);·then..if·!· | |||
| 00039c30:·7270·6d20·2d71·202d·2d71·7569·6574·2022··rpm·-q·--quiet·" | |||
| 00039c40:·646e·662d·6175·746f·6d61·7469·6322·203b··dnf-automatic"·; | |||
| 00039c50:·2074·6865·6e0a·2020·2020·7975·6d20·696e···then.····yum·in | |||
| 00039c60:·7374·616c·6c20·2d79·2022·646e·662d·6175··stall·-y·"dnf-au | |||
| 00039c70:·746f·6d61·7469·6322·0a66·690a·0a65·6c73··tomatic".fi..els | |||
| 00039c80:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 00039c90:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 00039ca0:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 00039cb0:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 00039cc0:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 00039cd0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00039ce0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00039cf0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| Max diff block lines reached; 3603693/3633667 bytes (99.18%) of diff not shown. | |||
| Offset 81, 26 lines modified | Offset 81, 35 lines modified | ||
| 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 82 | ············suitable·for·automatic,·regular·execution. | 82 | ············suitable·for·automatic,·regular·execution. |
| 83 | Severity: ··medium | 83 | Severity: ··medium |
| 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 85 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 85 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 86 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 86 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 87 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 87 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 88 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 89 | [[packages]] | ||
| 90 | name·=·"dnf-automatic" | ||
| 91 | version·=·"*" | ||
| 88 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 92 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 89 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 93 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 90 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 94 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 91 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 95 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 92 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 96 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 93 | 97 | #·Remediation·is·applicable·only·in·certain·platforms | |
| 98 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 99 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 94 | class·install_dnf-automatic·{ | ||
| 95 | ··package·{·'dnf-automatic': | ||
| 96 | ····ensure·=>·'installed', | ||
| 97 | ··} | ||
| 98 | 100 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | |
| 101 | ····yum·install·-y·"dnf-automatic" | ||
| 102 | fi | ||
| 103 | else | ||
| 104 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 105 | fi | ||
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 104 | -·name:·Gather·the·package·facts | 111 | -·name:·Gather·the·package·facts |
| 105 | ··package_facts: | 112 | ··package_facts: |
| Offset 124, 42 lines modified | Offset 133, 33 lines modified | ||
| 124 | ··tags: | 133 | ··tags: |
| 125 | ··-·enable_strategy | 134 | ··-·enable_strategy |
| 126 | ··-·low_complexity | 135 | ··-·low_complexity |
| 127 | ··-·low_disruption | 136 | ··-·low_disruption |
| 128 | ··-·medium_severity | 137 | ··-·medium_severity |
| 129 | ··-·no_reboot_needed | 138 | ··-·no_reboot_needed |
| 130 | ··-·package_dnf-automatic_installed | 139 | ··-·package_dnf-automatic_installed |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | [[packages]] | ||
| 133 | name·=·"dnf-automatic" | ||
| 134 | version·=·"*" | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 141 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 142 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 145 | package·--add=dnf-automatic | ||
| 143 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 144 | ····yum·install·-y·"dnf-automatic" | ||
| 145 | fi | ||
| 146 | else | ||
| 147 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 148 | fi | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | include·install_dnf-automatic | ||
| 152 | class·install_dnf-automatic·{ | ||
| 154 | package· | 153 | ··package·{·'dnf-automatic': |
| 154 | ····ensure·=>·'installed', | ||
| 155 | ··} | ||
| 156 | } | ||
| 155 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 156 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 158 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 157 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 159 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 158 | automatic.conf. | 160 | automatic.conf. |
| 159 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 161 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 160 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 162 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 161 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 163 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 304, 14 lines modified | Offset 304, 42 lines modified | ||
| 304 | ···························(a),·CM-11(b) | 304 | ···························(a),·CM-11(b) |
| 305 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 305 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 306 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 306 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 307 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 | 307 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 |
| 308 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 | 308 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 |
| 309 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 | 309 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 |
| 310 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 | 310 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 |
| 311 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 312 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 313 | if·rpm·--quiet·-q·yum;·then | ||
| 314 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 315 | #·adding·any·search·characters·to·the·config·file. | ||
| 316 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^gpgcheck") | ||
| 317 | #·shellcheck·disable=SC2059 | ||
| 318 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| 319 | #·If·the·key·exists,·change·it.·Otherwise,·add·it·to·the·config_file. | ||
| 320 | #·We·search·for·the·key·string·followed·by·a·word·boundary·(matched·by·\>), | ||
| 321 | #·so·if·we·search·for·'setting',·'setting2'·won't·match. | ||
| 322 | if·LC_ALL=C·grep·-q·-m·1·-i·-e·"^gpgcheck\\>"·"/etc/yum.conf";·then | ||
| 323 | ····escaped_formatted_output=$(sed·-e·'s|/|\\/|g'·<<<·"$formatted_output") | ||
| 324 | ····LC_ALL=C·sed·-i·--follow-symlinks·"s/^gpgcheck\\>.*/$escaped_formatted_output/gi"·"/etc/ | ||
| 325 | yum.conf" | ||
| 326 | else | ||
| 327 | ····if·[[·-s·"/etc/yum.conf"·]]·&&·[[·-n·"$(tail·-c·1·--·"/etc/yum.conf"·||·true)"·]];·then | ||
| 328 | ········LC_ALL=C·sed·-i·--follow-symlinks·'$a'\\·"/etc/yum.conf" | ||
| 329 | ····fi | ||
| 330 | ····printf·'%s\n'·"$formatted_output"·>>·"/etc/yum.conf" | ||
| 331 | fi | ||
| 332 | else | ||
| 333 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 334 | fi | ||
| 311 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 335 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 312 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 336 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 313 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 337 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| Max diff block lines reached; 229337/235131 bytes (97.54%) of diff not shown. | |||
| Offset 15109, 176 lines modified | Offset 15109, 176 lines modified | ||
| 0003b040:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b040:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b050:·2223·6964·6d37·3034·3622·2074·6162·696e··"#idm7046"·tabin | 0003b050:·2223·6964·6d37·3034·3622·2074·6162·696e··"#idm7046"·tabin | ||
| 0003b060:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b060:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b070:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b070:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b080:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b080:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b090:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b090:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b0a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b0a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b0b0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b0b0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b0c0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b0d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b0e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b0f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b100:·6d37·3034·3622·3e3c·7072·653e·3c63·6f64··m7046"><pre><cod | |||
| 0003b110:·653e·0a76·6172·5f73·7973·7465·6d5f·6372··e>.var_system_cr | |||
| 0003b120:·7970·746f·5f70·6f6c·6963·793d·273c·6162··ypto_policy='<ab | |||
| 0003b130:·6272·2074·6974·6c65·3d22·6672·6f6d·2050··br·title="from·P | |||
| 0003b140:·726f·6669·6c65·2f72·6566·696e·652d·7661··rofile/refine-va | |||
| 0003b150:·6c75·653a·2078·6363·6466·5f6f·7267·2e73··lue:·xccdf_org.s | |||
| 0003b160:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | |||
| 0003b0c0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b0d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b0e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b0f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b100:·2269·646d·3730·3436·223e·3c74·6162·6c65··"idm7046"><table | |||
| 0003b110:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b120:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b130:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b140:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b150:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b160:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b170:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b180:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b190:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b1a0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b1b0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b1c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b1d0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003b1e0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003b1f0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b200:·6f64·653e·2d20·6e61·6d65·3a20·5843·4344··ode>-·name:·XCCD | |||
| 0003b | 0003b170:·745f·7661·6c75·655f·7661·725f·7379·7374··t_value_var_syst | ||
| 0003b | 0003b180:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| 0003b190:·223e·4445·4641·554c·543c·2f61·6262·723e··">DEFAULT</abbr> | |||
| 0003b1a0:·270a·0a0a·7374·6465·7272·5f6f·665f·6361··'...stderr_of_ca | |||
| 0003b1b0:·6c6c·3d24·2875·7064·6174·652d·6372·7970··ll=$(update-cryp | |||
| 0003b1c0:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 0003b1d0:·7420·247b·7661·725f·7379·7374·656d·5f63··t·${var_system_c | |||
| 0003b1e0:·7279·7074·6f5f·706f·6c69·6379·7d20·3226··rypto_policy}·2& | |||
| 0003b1f0:·6774·3b26·616d·703b·3120·2667·743b·202f··gt;&1·>·/ | |||
| 0003b200:·6465·762f·6e75·6c6c·290a·7263·3d24·3f0a··dev/null).rc=$?. | |||
| 0003b210:·0a69·6620·7465·7374·2022·2472·6322·203d··.if·test·"$rc"·= | |||
| 0003b220:·2031·3237·3b20·7468·656e·0a09·6563·686f···127;·then..echo | |||
| 0003b230:·2022·2473·7464·6572·725f·6f66·5f63·616c···"$stderr_of_cal | |||
| 0003b240:·6c22·2026·6774·3b26·616d·703b·320a·0965··l"·>&2..e | |||
| 0003b250:·6368·6f20·224d·616b·6520·7375·7265·2074··cho·"Make·sure·t | |||
| 0003b260:·6861·7420·7468·6520·7363·7269·7074·2069··hat·the·script·i | |||
| 0003b270:·7320·696e·7374·616c·6c65·6420·6f6e·2074··s·installed·on·t | |||
| 0003b280:·6865·2072·656d·6564·6961·7465·6420·7379··he·remediated·sy | |||
| 0003b290:·7374·656d·2e22·2026·6774·3b26·616d·703b··stem."·>& | |||
| 0003b2a0:·320a·0965·6368·6f20·2253·6565·206f·7574··2..echo·"See·out | |||
| 0003b2b0:·7075·7420·6f66·2074·6865·2027·646e·6620··put·of·the·'dnf· | |||
| 0003b2c0:·7072·6f76·6964·6573·2075·7064·6174·652d··provides·update- | |||
| 0003b2d0:·6372·7970·746f·2d70·6f6c·6963·6965·7327··crypto-policies' | |||
| 0003b2e0:·2063·6f6d·6d61·6e64·2220·2667·743b·2661···command"·>&a | |||
| 0003b2f0:·6d70·3b32·0a09·6563·686f·2022·746f·2073··mp;2..echo·"to·s | |||
| 0003b300:·6565·2077·6861·7420·7061·636b·6167·6520··ee·what·package· | |||
| 0003b310:·746f·2028·7265·2969·6e73·7461·6c6c·2220··to·(re)install"· | |||
| 0003b320:·2667·743b·2661·6d70·3b32·0a0a·0966·616c··>&2...fal | |||
| 0003b330:·7365·2020·2320·656e·6420·7769·7468·2061··se··#·end·with·a | |||
| 0003b340:·6e20·6572·726f·7220·636f·6465·0a65·6c69··n·error·code.eli | |||
| 0003b350:·6620·7465·7374·2022·2472·6322·2021·3d20··f·test·"$rc"·!=· | |||
| 0003b360:·303b·2074·6865·6e0a·0965·6368·6f20·2245··0;·then..echo·"E | |||
| 0003b370:·7272·6f72·2069·6e76·6f6b·696e·6720·7468··rror·invoking·th | |||
| 0003b380:·6520·7570·6461·7465·2d63·7279·7074·6f2d··e·update-crypto- | |||
| 0003b390:·706f·6c69·6369·6573·2073·6372·6970·743a··policies·script: | |||
| 0003b3a0:·2024·7374·6465·7272·5f6f·665f·6361·6c6c···$stderr_of_call | |||
| 0003b3b0:·2220·2667·743b·2661·6d70·3b32·0a09·6661··"·>&2..fa | |||
| 0003b3c0:·6c73·6520·2023·2065·6e64·2077·6974·6820··lse··#·end·with· | |||
| 0003b3d0:·616e·2065·7272·6f72·2063·6f64·650a·6669··an·error·code.fi | |||
| 0003b3e0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b3f0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b400:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b410:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b420:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b430:·743d·2223·6964·6d37·3034·3822·2074·6162··t="#idm7048"·tab | |||
| 0003b440:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b450:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b460:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b470:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b480:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b490:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b4a0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b4b0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b4c0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b4d0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b4e0:·643d·2269·646d·3730·3438·223e·3c74·6162··d="idm7048"><tab | |||
| 0003b4f0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b500:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b510:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b520:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b530:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b540:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b550:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b560:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b570:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b580:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b590:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b5a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b5b0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b5c0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003b5d0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b5e0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·5843··<code>-·name:·XC | |||
| 0003b5f0:·4344·4620·5661·6c75·6520·7661·725f·7379··CDF·Value·var_sy | |||
| 0003b600:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | |||
| 0003b | 0003b610:·6379·2023·2070·726f·6d6f·7465·2074·6f20··cy·#·promote·to· | ||
| 0003b | 0003b620:·7661·7269·6162·6c65·0a20·2073·6574·5f66··variable.··set_f | ||
| 0003b | 0003b630:·6163·743a·0a20·2020·2076·6172·5f73·7973··act:.····var_sys | ||
| 0003b260:·6d5f·6372·7970·746f·5f70·6f6c·6963·793a··m_crypto_policy: | |||
| 0003b270:·2021·2173·7472·203c·6162·6272·2074·6974···!!str·<abbr·tit | |||
| 0003b280:·6c65·3d22·6672·6f6d·2050·726f·6669·6c65··le="from·Profile | |||
| 0003b290:·2f72·6566·696e·652d·7661·6c75·653a·2078··/refine-value:·x | |||
| 0003b2a0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | |||
| 0003b2b0:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | |||
| 0003b2c0:·655f·7661·725f·7379·7374·656d·5f63·7279··e_var_system_cry | |||
| 0003b2d0:·7074·6f5f·706f·6c69·6379·223e·4445·4641··pto_policy">DEFA | |||
| 0003b2e0:·554c·543c·2f61·6262·723e·0a20·2074·6167··ULT</abbr>.··tag | |||
| 0003b2f0:·733a·0a20·2020·202d·2061·6c77·6179·730a··s:.····-·always. | |||
| Max diff block lines reached; 11823291/11846227 bytes (99.81%) of diff not shown. | |||
| Offset 128, 14 lines modified | Offset 128, 33 lines modified | ||
| 128 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 128 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 129 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 129 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 130 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 130 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 131 | ·····················FCS_TLSC_EXT.1 | 131 | ·····················FCS_TLSC_EXT.1 |
| 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 133 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL4 | 133 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL4 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | var_system_crypto_policy='DEFAULT' | ||
| 137 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 138 | rc=$? | ||
| 139 | if·test·"$rc"·=·127;·then | ||
| 140 | » echo·"$stderr_of_call"·>&2 | ||
| 141 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 142 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 143 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 144 | » false··#·end·with·an·error·code | ||
| 145 | elif·test·"$rc"·!=·0;·then | ||
| 146 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 147 | » false··#·end·with·an·error·code | ||
| 148 | fi | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 140 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 154 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 141 | ··set_fact: | 155 | ··set_fact: |
| Offset 180, 33 lines modified | Offset 199, 14 lines modified | ||
| 180 | ··-·PCI-DSSv4-2.2.7 | 199 | ··-·PCI-DSSv4-2.2.7 |
| 181 | ··-·configure_crypto_policy | 200 | ··-·configure_crypto_policy |
| 182 | ··-·high_severity | 201 | ··-·high_severity |
| 183 | ··-·low_complexity | 202 | ··-·low_complexity |
| 184 | ··-·low_disruption | 203 | ··-·low_disruption |
| 185 | ··-·no_reboot_needed | 204 | ··-·no_reboot_needed |
| 186 | ··-·restrict_strategy | 205 | ··-·restrict_strategy |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 188 | var_system_crypto_policy='DEFAULT' | ||
| 189 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 190 | rc=$? | ||
| 191 | if·test·"$rc"·=·127;·then | ||
| 192 | » echo·"$stderr_of_call"·>&2 | ||
| 193 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 194 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 195 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 196 | » false··#·end·with·an·error·code | ||
| 197 | elif·test·"$rc"·!=·0;·then | ||
| 198 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 199 | » false··#·end·with·an·error·code | ||
| 200 | fi | ||
| 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 202 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 207 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 203 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto | 208 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto |
| 204 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or | 209 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or |
| 205 | not·set·at·all·in·the·/etc/sysconfig/sshd. | 210 | not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 206 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations, | 211 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations, |
| 207 | ············and·makes·system·configuration·more·fragmented. | 212 | ············and·makes·system·configuration·more·fragmented. |
| Offset 217, 14 lines modified | Offset 217, 19 lines modified | ||
| 217 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 217 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 218 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 218 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 219 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 219 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 221 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 221 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 222 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL6 | 222 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL6 |
| 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 225 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 226 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 228 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 229 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 230 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 231 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 229 | -·name:·Configure·SSH·to·use·System·Crypto·Policy | 232 | -·name:·Configure·SSH·to·use·System·Crypto·Policy |
| 230 | ··lineinfile: | 233 | ··lineinfile: |
| Offset 242, 19 lines modified | Offset 247, 14 lines modified | ||
| 242 | ··-·PCI-DSSv4-2.2.7 | 247 | ··-·PCI-DSSv4-2.2.7 |
| 243 | ··-·configure_ssh_crypto_policy | 248 | ··-·configure_ssh_crypto_policy |
| 244 | ··-·disable_strategy | 249 | ··-·disable_strategy |
| 245 | ··-·low_complexity | 250 | ··-·low_complexity |
| 246 | ··-·medium_disruption | 251 | ··-·medium_disruption |
| 247 | ··-·medium_severity | 252 | ··-·medium_severity |
| 248 | ··-·reboot_required | 253 | ··-·reboot_required |
| 249 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 250 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 251 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 252 | Group ·Disk·Partitioning· Group·contains·1·rule | 254 | Group ·Disk·Partitioning· Group·contains·1·rule |
| 253 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which·should·be | 255 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which·should·be |
| 254 | placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default·partitioning·scheme | 256 | placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default·partitioning·scheme |
| 255 | creates·separate·logical·volumes·for·/,·/boot,·and·swap. | 257 | creates·separate·logical·volumes·for·/,·/boot,·and·swap. |
| 256 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify·partitioning.\" | 258 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify·partitioning.\" |
| 257 | ······This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the·volume·group·already | 259 | ······This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the·volume·group·already |
| 258 | ······created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create·space.·In·general,·using | 260 | ······created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create·space.·In·general,·using |
| Offset 339, 14 lines modified | Offset 339, 75 lines modified | ||
| 339 | ············the·system·to·quickly·enumerate·known·user·accounts·without·logging·in. | 339 | ············the·system·to·quickly·enumerate·known·user·accounts·without·logging·in. |
| 340 | Severity: ··medium | 340 | Severity: ··medium |
| 341 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_gnome_disable_user_list | 341 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_gnome_disable_user_list |
| 342 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 342 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 343 | References:·_\x8n_\x8i_\x8s_\x8t···CM-6(a),·AC-23 | 343 | References:·_\x8n_\x8i_\x8s_\x8t···CM-6(a),·AC-23 |
| 344 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00227 | 344 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00227 |
| 345 | ············_\x8c_\x8c_\x8n····A.11.SEC-OL9 | 345 | ············_\x8c_\x8c_\x8n····A.11.SEC-OL9 |
| 346 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 347 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 348 | if·rpm·--quiet·-q·gdm·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 349 | #·Check·for·setting·in·any·of·the·DConf·db·directories | ||
| 350 | #·If·files·contain·ibus·or·distro,·ignore·them. | ||
| 351 | #·The·assignment·assumes·that·individual·filenames·don't·contain·: | ||
| 352 | readarray·-t·SETTINGSFILES·<·<(grep·-r·"\\[org/gnome/login-screen\\]"·"/etc/dconf/db/"·\ | ||
| 353 | ································|·grep·-v·'distro\|ibus\|local.d'·|·cut·-d":"·-f1) | ||
| 354 | DCONFFILE="/etc/dconf/db/local.d/00-security-settings" | ||
| 355 | DBDIR="/etc/dconf/db/local.d" | ||
| Max diff block lines reached; 1064486/1072269 bytes (99.27%) of diff not shown. | |||
| Offset 15069, 176 lines modified | Offset 15069, 176 lines modified | ||
| 0003adc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003adc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003add0:·3d22·2369·646d·3730·3436·2220·7461·6269··="#idm7046"·tabi | 0003add0:·3d22·2369·646d·3730·3436·2220·7461·6269··="#idm7046"·tabi | ||
| 0003ade0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ade0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003adf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003adf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ae00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ae00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ae10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ae10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ae20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ae20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ae30:·223e·5265·6d65·6469·6174·696f·6e20· | 0003ae30:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | ||
| 0003ae40:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003ae50:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ae60:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ae70:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ae80:·646d·3730·3436·223e·3c70·7265·3e3c·636f··dm7046"><pre><co | |||
| 0003ae90:·6465·3e0a·7661·725f·7379·7374·656d·5f63··de>.var_system_c | |||
| 0003aea0:·7279·7074·6f5f·706f·6c69·6379·3d27·3c61··rypto_policy='<a | |||
| 0003aeb0:·6262·7220·7469·746c·653d·2266·726f·6d20··bbr·title="from· | |||
| 0003aec0:·5072·6f66·696c·652f·7265·6669·6e65·2d76··Profile/refine-v | |||
| 0003aed0:·616c·7565·3a20·7863·6364·665f·6f72·672e··alue:·xccdf_org. | |||
| 0003aee0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | |||
| 0003ae40:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ae50:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ae60:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ae70:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ae80:·3d22·6964·6d37·3034·3622·3e3c·7461·626c··="idm7046"><tabl | |||
| 0003ae90:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003aea0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003aeb0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003aec0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003aed0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003aee0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003aef0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003af00:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003af10:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003af20:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003af30:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003af40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003af50:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003af60:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 0003af70:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003af80:·636f·6465·3e2d·206e·616d·653a·2058·4343··code>-·name:·XCC | |||
| 0003a | 0003aef0:·6e74·5f76·616c·7565·5f76·6172·5f73·7973··nt_value_var_sys | ||
| 0003af | 0003af00:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 0003af10:·7922·3e44·4546·4155·4c54·3c2f·6162·6272··y">DEFAULT</abbr | |||
| 0003af20:·3e27·0a0a·0a73·7464·6572·725f·6f66·5f63··>'...stderr_of_c | |||
| 0003af30:·616c·6c3d·2428·7570·6461·7465·2d63·7279··all=$(update-cry | |||
| 0003af40:·7074·6f2d·706f·6c69·6369·6573·202d·2d73··pto-policies·--s | |||
| 0003af50:·6574·2024·7b76·6172·5f73·7973·7465·6d5f··et·${var_system_ | |||
| 0003af60:·6372·7970·746f·5f70·6f6c·6963·797d·2032··crypto_policy}·2 | |||
| 0003af70:·2667·743b·2661·6d70·3b31·2026·6774·3b20··>&1·>· | |||
| 0003af80:·2f64·6576·2f6e·756c·6c29·0a72·633d·243f··/dev/null).rc=$? | |||
| 0003af90:·0a0a·6966·2074·6573·7420·2224·7263·2220··..if·test·"$rc"· | |||
| 0003afa0:·3d20·3132·373b·2074·6865·6e0a·0965·6368··=·127;·then..ech | |||
| 0003afb0:·6f20·2224·7374·6465·7272·5f6f·665f·6361··o·"$stderr_of_ca | |||
| 0003afc0:·6c6c·2220·2667·743b·2661·6d70·3b32·0a09··ll"·>&2.. | |||
| 0003afd0:·6563·686f·2022·4d61·6b65·2073·7572·6520··echo·"Make·sure· | |||
| 0003afe0:·7468·6174·2074·6865·2073·6372·6970·7420··that·the·script· | |||
| 0003aff0:·6973·2069·6e73·7461·6c6c·6564·206f·6e20··is·installed·on· | |||
| 0003b000:·7468·6520·7265·6d65·6469·6174·6564·2073··the·remediated·s | |||
| 0003b010:·7973·7465·6d2e·2220·2667·743b·2661·6d70··ystem."·>& | |||
| 0003b020:·3b32·0a09·6563·686f·2022·5365·6520·6f75··;2..echo·"See·ou | |||
| 0003b030:·7470·7574·206f·6620·7468·6520·2764·6e66··tput·of·the·'dnf | |||
| 0003b040:·2070·726f·7669·6465·7320·7570·6461·7465···provides·update | |||
| 0003b050:·2d63·7279·7074·6f2d·706f·6c69·6369·6573··-crypto-policies | |||
| 0003b060:·2720·636f·6d6d·616e·6422·2026·6774·3b26··'·command"·>& | |||
| 0003b070:·616d·703b·320a·0965·6368·6f20·2274·6f20··amp;2..echo·"to· | |||
| 0003b080:·7365·6520·7768·6174·2070·6163·6b61·6765··see·what·package | |||
| 0003b090:·2074·6f20·2872·6529·696e·7374·616c·6c22···to·(re)install" | |||
| 0003b0a0:·2026·6774·3b26·616d·703b·320a·0a09·6661···>&2...fa | |||
| 0003b0b0:·6c73·6520·2023·2065·6e64·2077·6974·6820··lse··#·end·with· | |||
| 0003b0c0:·616e·2065·7272·6f72·2063·6f64·650a·656c··an·error·code.el | |||
| 0003b0d0:·6966·2074·6573·7420·2224·7263·2220·213d··if·test·"$rc"·!= | |||
| 0003b0e0:·2030·3b20·7468·656e·0a09·6563·686f·2022···0;·then..echo·" | |||
| 0003b0f0:·4572·726f·7220·696e·766f·6b69·6e67·2074··Error·invoking·t | |||
| 0003b100:·6865·2075·7064·6174·652d·6372·7970·746f··he·update-crypto | |||
| 0003b110:·2d70·6f6c·6963·6965·7320·7363·7269·7074··-policies·script | |||
| 0003b120:·3a20·2473·7464·6572·725f·6f66·5f63·616c··:·$stderr_of_cal | |||
| 0003b130:·6c22·2026·6774·3b26·616d·703b·320a·0966··l"·>&2..f | |||
| 0003b140:·616c·7365·2020·2320·656e·6420·7769·7468··alse··#·end·with | |||
| 0003b150:·2061·6e20·6572·726f·7220·636f·6465·0a66···an·error·code.f | |||
| 0003b160:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003b170:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b180:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b190:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b1a0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b1b0:·6574·3d22·2369·646d·3730·3438·2220·7461··et="#idm7048"·ta | |||
| 0003b1c0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b1d0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b1e0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b1f0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b200:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b210:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b220:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b230:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b240:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b250:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b260:·6964·3d22·6964·6d37·3034·3822·3e3c·7461··id="idm7048"><ta | |||
| 0003b270:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b280:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b290:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b2a0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b2b0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b2c0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b2d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b2e0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b2f0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b300:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b310:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b320:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b330:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b340:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | |||
| 0003b350:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b360:·3e3c·636f·6465·3e2d·206e·616d·653a·2058··><code>-·name:·X | |||
| 0003b370:·4343·4446·2056·616c·7565·2076·6172·5f73··CCDF·Value·var_s | |||
| 0003b380:·7973·7465·6d5f·6372·7970·746f·5f70·6f6c··ystem_crypto_pol | |||
| 0003 | 0003b390:·6963·7920·2320·7072·6f6d·6f74·6520·746f··icy·#·promote·to | ||
| 0003a | 0003b3a0:·2076·6172·6961·626c·650a·2020·7365·745f···variable.··set_ | ||
| 0003 | 0003b3b0:·6661·6374·3a0a·2020·2020·7661·725f·7379··fact:.····var_sy | ||
| 0003afe0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | |||
| 0003aff0:·3a20·2121·7374·7220·3c61·6262·7220·7469··:·!!str·<abbr·ti | |||
| 0003b000:·746c·653d·2266·726f·6d20·5072·6f66·696c··tle="from·Profil | |||
| 0003b010:·652f·7265·6669·6e65·2d76·616c·7565·3a20··e/refine-value:· | |||
| 0003b020:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | |||
| 0003b030:·6a65·6374·2e63·6f6e·7465·6e74·5f76·616c··ject.content_val | |||
| 0003b040:·7565·5f76·6172·5f73·7973·7465·6d5f·6372··ue_var_system_cr | |||
| 0003b050:·7970·746f·5f70·6f6c·6963·7922·3e44·4546··ypto_policy">DEF | |||
| 0003b060:·4155·4c54·3c2f·6162·6272·3e0a·2020·7461··AULT</abbr>.··ta | |||
| 0003b070:·6773·3a0a·2020·2020·2d20·616c·7761·7973··gs:.····-·always | |||
| Max diff block lines reached; 7787927/7810863 bytes (99.71%) of diff not shown. | |||
| Offset 125, 14 lines modified | Offset 125, 33 lines modified | ||
| 125 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 125 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 126 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 126 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 127 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 127 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 128 | ·····················FCS_TLSC_EXT.1 | 128 | ·····················FCS_TLSC_EXT.1 |
| 129 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 129 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 130 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL4 | 130 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL4 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 133 | var_system_crypto_policy='DEFAULT' | ||
| 134 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 135 | rc=$? | ||
| 136 | if·test·"$rc"·=·127;·then | ||
| 137 | » echo·"$stderr_of_call"·>&2 | ||
| 138 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 139 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 140 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 141 | » false··#·end·with·an·error·code | ||
| 142 | elif·test·"$rc"·!=·0;·then | ||
| 143 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 144 | » false··#·end·with·an·error·code | ||
| 145 | fi | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 137 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 151 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 138 | ··set_fact: | 152 | ··set_fact: |
| Offset 177, 33 lines modified | Offset 196, 14 lines modified | ||
| 177 | ··-·PCI-DSSv4-2.2.7 | 196 | ··-·PCI-DSSv4-2.2.7 |
| 178 | ··-·configure_crypto_policy | 197 | ··-·configure_crypto_policy |
| 179 | ··-·high_severity | 198 | ··-·high_severity |
| 180 | ··-·low_complexity | 199 | ··-·low_complexity |
| 181 | ··-·low_disruption | 200 | ··-·low_disruption |
| 182 | ··-·no_reboot_needed | 201 | ··-·no_reboot_needed |
| 183 | ··-·restrict_strategy | 202 | ··-·restrict_strategy |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | var_system_crypto_policy='DEFAULT' | ||
| 186 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 187 | rc=$? | ||
| 188 | if·test·"$rc"·=·127;·then | ||
| 189 | » echo·"$stderr_of_call"·>&2 | ||
| 190 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 191 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 192 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 193 | » false··#·end·with·an·error·code | ||
| 194 | elif·test·"$rc"·!=·0;·then | ||
| 195 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 196 | » false··#·end·with·an·error·code | ||
| 197 | fi | ||
| 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 199 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 204 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 200 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that | 205 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that |
| 201 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either | 206 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either |
| 202 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 207 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 203 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate | 208 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate |
| 204 | ············expectations,·and·makes·system·configuration·more·fragmented. | 209 | ············expectations,·and·makes·system·configuration·more·fragmented. |
| Offset 214, 14 lines modified | Offset 214, 19 lines modified | ||
| 214 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 214 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 215 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 215 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 216 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 216 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 217 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 217 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 218 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 218 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 219 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL6 | 219 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL6 |
| 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 221 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 222 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 223 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 221 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 222 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 223 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 224 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 225 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 226 | -·name:·Configure·SSH·to·use·System·Crypto·Policy | 229 | -·name:·Configure·SSH·to·use·System·Crypto·Policy |
| 227 | ··lineinfile: | 230 | ··lineinfile: |
| Offset 239, 19 lines modified | Offset 244, 14 lines modified | ||
| 239 | ··-·PCI-DSSv4-2.2.7 | 244 | ··-·PCI-DSSv4-2.2.7 |
| 240 | ··-·configure_ssh_crypto_policy | 245 | ··-·configure_ssh_crypto_policy |
| 241 | ··-·disable_strategy | 246 | ··-·disable_strategy |
| 242 | ··-·low_complexity | 247 | ··-·low_complexity |
| 243 | ··-·medium_disruption | 248 | ··-·medium_disruption |
| 244 | ··-·medium_severity | 249 | ··-·medium_severity |
| 245 | ··-·reboot_required | 250 | ··-·reboot_required |
| 246 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 247 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 248 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 249 | Group ·GNOME·Desktop·Environment· Group·contains·1·rule | 251 | Group ·GNOME·Desktop·Environment· Group·contains·1·rule |
| 250 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow | 252 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow |
| 251 | users·to·easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME | 253 | users·to·easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME |
| 252 | Graphical·Display·Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as | 254 | Graphical·Display·Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as |
| 253 | display·server·management. | 255 | display·server·management. |
| 254 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Oracle·Linux·Graphical | 256 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Oracle·Linux·Graphical |
| Offset 274, 14 lines modified | Offset 274, 23 lines modified | ||
| 274 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_db_up_to_date | 274 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_db_up_to_date |
| 275 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 275 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 276 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(5)(ii)(A) | 276 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(5)(ii)(A) |
| 277 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-6.2 | 277 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-6.2 |
| 278 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 | 278 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 |
| 279 | ············_\x8c_\x8c_\x8n·····reload_dconf_db | 279 | ············_\x8c_\x8c_\x8n·····reload_dconf_db |
| 280 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·8.2.8,·8.2 | 280 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·8.2.8,·8.2 |
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 282 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 283 | if·rpm·--quiet·-q·gdm·&&·{·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·};·then | ||
| 284 | dconf·update | ||
| 285 | else | ||
| 286 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 287 | fi | ||
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 288 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 289 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 290 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| Max diff block lines reached; 802306/808036 bytes (99.29%) of diff not shown. | |||
| Offset 15110, 176 lines modified | Offset 15110, 176 lines modified | ||
| 0003b050:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b050:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b060:·2223·6964·6d37·3034·3622·2074·6162·696e··"#idm7046"·tabin | 0003b060:·2223·6964·6d37·3034·3622·2074·6162·696e··"#idm7046"·tabin | ||
| 0003b070:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b070:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b080:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b080:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b090:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b090:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b0a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b0a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b0b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b0b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b0c0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b0c0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b0d0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b0e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b0f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b100:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b110:·6d37·3034·3622·3e3c·7072·653e·3c63·6f64··m7046"><pre><cod | |||
| 0003b120:·653e·0a76·6172·5f73·7973·7465·6d5f·6372··e>.var_system_cr | |||
| 0003b130:·7970·746f·5f70·6f6c·6963·793d·273c·6162··ypto_policy='<ab | |||
| 0003b140:·6272·2074·6974·6c65·3d22·6672·6f6d·2050··br·title="from·P | |||
| 0003b150:·726f·6669·6c65·2f72·6566·696e·652d·7661··rofile/refine-va | |||
| 0003b160:·6c75·653a·2078·6363·6466·5f6f·7267·2e73··lue:·xccdf_org.s | |||
| 0003b170:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | |||
| 0003b0d0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b0e0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b0f0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b100:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b110:·2269·646d·3730·3436·223e·3c74·6162·6c65··"idm7046"><table | |||
| 0003b120:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b130:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b140:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b150:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b160:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b170:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b180:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b190:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b1a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b1b0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b1c0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b1d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b1e0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003b1f0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003b200:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b210:·6f64·653e·2d20·6e61·6d65·3a20·5843·4344··ode>-·name:·XCCD | |||
| 0003b | 0003b180:·745f·7661·6c75·655f·7661·725f·7379·7374··t_value_var_syst | ||
| 0003b | 0003b190:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| 0003b1a0:·223e·4445·4641·554c·543c·2f61·6262·723e··">DEFAULT</abbr> | |||
| 0003b1b0:·270a·0a0a·7374·6465·7272·5f6f·665f·6361··'...stderr_of_ca | |||
| 0003b1c0:·6c6c·3d24·2875·7064·6174·652d·6372·7970··ll=$(update-cryp | |||
| 0003b1d0:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 0003b1e0:·7420·247b·7661·725f·7379·7374·656d·5f63··t·${var_system_c | |||
| 0003b1f0:·7279·7074·6f5f·706f·6c69·6379·7d20·3226··rypto_policy}·2& | |||
| 0003b200:·6774·3b26·616d·703b·3120·2667·743b·202f··gt;&1·>·/ | |||
| 0003b210:·6465·762f·6e75·6c6c·290a·7263·3d24·3f0a··dev/null).rc=$?. | |||
| 0003b220:·0a69·6620·7465·7374·2022·2472·6322·203d··.if·test·"$rc"·= | |||
| 0003b230:·2031·3237·3b20·7468·656e·0a09·6563·686f···127;·then..echo | |||
| 0003b240:·2022·2473·7464·6572·725f·6f66·5f63·616c···"$stderr_of_cal | |||
| 0003b250:·6c22·2026·6774·3b26·616d·703b·320a·0965··l"·>&2..e | |||
| 0003b260:·6368·6f20·224d·616b·6520·7375·7265·2074··cho·"Make·sure·t | |||
| 0003b270:·6861·7420·7468·6520·7363·7269·7074·2069··hat·the·script·i | |||
| 0003b280:·7320·696e·7374·616c·6c65·6420·6f6e·2074··s·installed·on·t | |||
| 0003b290:·6865·2072·656d·6564·6961·7465·6420·7379··he·remediated·sy | |||
| 0003b2a0:·7374·656d·2e22·2026·6774·3b26·616d·703b··stem."·>& | |||
| 0003b2b0:·320a·0965·6368·6f20·2253·6565·206f·7574··2..echo·"See·out | |||
| 0003b2c0:·7075·7420·6f66·2074·6865·2027·646e·6620··put·of·the·'dnf· | |||
| 0003b2d0:·7072·6f76·6964·6573·2075·7064·6174·652d··provides·update- | |||
| 0003b2e0:·6372·7970·746f·2d70·6f6c·6963·6965·7327··crypto-policies' | |||
| 0003b2f0:·2063·6f6d·6d61·6e64·2220·2667·743b·2661···command"·>&a | |||
| 0003b300:·6d70·3b32·0a09·6563·686f·2022·746f·2073··mp;2..echo·"to·s | |||
| 0003b310:·6565·2077·6861·7420·7061·636b·6167·6520··ee·what·package· | |||
| 0003b320:·746f·2028·7265·2969·6e73·7461·6c6c·2220··to·(re)install"· | |||
| 0003b330:·2667·743b·2661·6d70·3b32·0a0a·0966·616c··>&2...fal | |||
| 0003b340:·7365·2020·2320·656e·6420·7769·7468·2061··se··#·end·with·a | |||
| 0003b350:·6e20·6572·726f·7220·636f·6465·0a65·6c69··n·error·code.eli | |||
| 0003b360:·6620·7465·7374·2022·2472·6322·2021·3d20··f·test·"$rc"·!=· | |||
| 0003b370:·303b·2074·6865·6e0a·0965·6368·6f20·2245··0;·then..echo·"E | |||
| 0003b380:·7272·6f72·2069·6e76·6f6b·696e·6720·7468··rror·invoking·th | |||
| 0003b390:·6520·7570·6461·7465·2d63·7279·7074·6f2d··e·update-crypto- | |||
| 0003b3a0:·706f·6c69·6369·6573·2073·6372·6970·743a··policies·script: | |||
| 0003b3b0:·2024·7374·6465·7272·5f6f·665f·6361·6c6c···$stderr_of_call | |||
| 0003b3c0:·2220·2667·743b·2661·6d70·3b32·0a09·6661··"·>&2..fa | |||
| 0003b3d0:·6c73·6520·2023·2065·6e64·2077·6974·6820··lse··#·end·with· | |||
| 0003b3e0:·616e·2065·7272·6f72·2063·6f64·650a·6669··an·error·code.fi | |||
| 0003b3f0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b400:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b410:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b420:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b430:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b440:·743d·2223·6964·6d37·3034·3822·2074·6162··t="#idm7048"·tab | |||
| 0003b450:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b460:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b470:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b480:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b490:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b4a0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b4b0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b4c0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b4d0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b4e0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b4f0:·643d·2269·646d·3730·3438·223e·3c74·6162··d="idm7048"><tab | |||
| 0003b500:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b510:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b520:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b530:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b540:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b550:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b560:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b570:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b580:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b590:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b5a0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b5b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b5c0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b5d0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003b5e0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b5f0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·5843··<code>-·name:·XC | |||
| 0003b600:·4344·4620·5661·6c75·6520·7661·725f·7379··CDF·Value·var_sy | |||
| 0003b610:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | |||
| 0003b | 0003b620:·6379·2023·2070·726f·6d6f·7465·2074·6f20··cy·#·promote·to· | ||
| 0003b | 0003b630:·7661·7269·6162·6c65·0a20·2073·6574·5f66··variable.··set_f | ||
| 0003b | 0003b640:·6163·743a·0a20·2020·2076·6172·5f73·7973··act:.····var_sys | ||
| 0003b270:·6d5f·6372·7970·746f·5f70·6f6c·6963·793a··m_crypto_policy: | |||
| 0003b280:·2021·2173·7472·203c·6162·6272·2074·6974···!!str·<abbr·tit | |||
| 0003b290:·6c65·3d22·6672·6f6d·2050·726f·6669·6c65··le="from·Profile | |||
| 0003b2a0:·2f72·6566·696e·652d·7661·6c75·653a·2078··/refine-value:·x | |||
| 0003b2b0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | |||
| 0003b2c0:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | |||
| 0003b2d0:·655f·7661·725f·7379·7374·656d·5f63·7279··e_var_system_cry | |||
| 0003b2e0:·7074·6f5f·706f·6c69·6379·223e·4445·4641··pto_policy">DEFA | |||
| 0003b2f0:·554c·543c·2f61·6262·723e·0a20·2074·6167··ULT</abbr>.··tag | |||
| 0003b300:·733a·0a20·2020·202d·2061·6c77·6179·730a··s:.····-·always. | |||
| Max diff block lines reached; 8979709/9002645 bytes (99.75%) of diff not shown. | |||
| Offset 128, 14 lines modified | Offset 128, 33 lines modified | ||
| 128 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 128 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 129 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 129 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 130 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 130 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 131 | ·····················FCS_TLSC_EXT.1 | 131 | ·····················FCS_TLSC_EXT.1 |
| 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 133 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL4 | 133 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL4 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | var_system_crypto_policy='DEFAULT' | ||
| 137 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 138 | rc=$? | ||
| 139 | if·test·"$rc"·=·127;·then | ||
| 140 | » echo·"$stderr_of_call"·>&2 | ||
| 141 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 142 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 143 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 144 | » false··#·end·with·an·error·code | ||
| 145 | elif·test·"$rc"·!=·0;·then | ||
| 146 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 147 | » false··#·end·with·an·error·code | ||
| 148 | fi | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 140 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 154 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 141 | ··set_fact: | 155 | ··set_fact: |
| Offset 180, 33 lines modified | Offset 199, 14 lines modified | ||
| 180 | ··-·PCI-DSSv4-2.2.7 | 199 | ··-·PCI-DSSv4-2.2.7 |
| 181 | ··-·configure_crypto_policy | 200 | ··-·configure_crypto_policy |
| 182 | ··-·high_severity | 201 | ··-·high_severity |
| 183 | ··-·low_complexity | 202 | ··-·low_complexity |
| 184 | ··-·low_disruption | 203 | ··-·low_disruption |
| 185 | ··-·no_reboot_needed | 204 | ··-·no_reboot_needed |
| 186 | ··-·restrict_strategy | 205 | ··-·restrict_strategy |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 188 | var_system_crypto_policy='DEFAULT' | ||
| 189 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 190 | rc=$? | ||
| 191 | if·test·"$rc"·=·127;·then | ||
| 192 | » echo·"$stderr_of_call"·>&2 | ||
| 193 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 194 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 195 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 196 | » false··#·end·with·an·error·code | ||
| 197 | elif·test·"$rc"·!=·0;·then | ||
| 198 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 199 | » false··#·end·with·an·error·code | ||
| 200 | fi | ||
| 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 202 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 207 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 203 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto | 208 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto |
| 204 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or | 209 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or |
| 205 | not·set·at·all·in·the·/etc/sysconfig/sshd. | 210 | not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 206 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations, | 211 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations, |
| 207 | ············and·makes·system·configuration·more·fragmented. | 212 | ············and·makes·system·configuration·more·fragmented. |
| Offset 217, 14 lines modified | Offset 217, 19 lines modified | ||
| 217 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 217 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 218 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 218 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 219 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 219 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 221 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 221 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 222 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL6 | 222 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL6 |
| 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 225 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 226 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 228 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 229 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 230 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 231 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 229 | -·name:·Configure·SSH·to·use·System·Crypto·Policy | 232 | -·name:·Configure·SSH·to·use·System·Crypto·Policy |
| 230 | ··lineinfile: | 233 | ··lineinfile: |
| Offset 242, 19 lines modified | Offset 247, 14 lines modified | ||
| 242 | ··-·PCI-DSSv4-2.2.7 | 247 | ··-·PCI-DSSv4-2.2.7 |
| 243 | ··-·configure_ssh_crypto_policy | 248 | ··-·configure_ssh_crypto_policy |
| 244 | ··-·disable_strategy | 249 | ··-·disable_strategy |
| 245 | ··-·low_complexity | 250 | ··-·low_complexity |
| 246 | ··-·medium_disruption | 251 | ··-·medium_disruption |
| 247 | ··-·medium_severity | 252 | ··-·medium_severity |
| 248 | ··-·reboot_required | 253 | ··-·reboot_required |
| 249 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 250 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 251 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 252 | Group ·GNOME·Desktop·Environment· Group·contains·3·groups·and·7·rules | 254 | Group ·GNOME·Desktop·Environment· Group·contains·3·groups·and·7·rules |
| 253 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow·users·to | 255 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow·users·to |
| 254 | easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME·Graphical·Display | 256 | easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME·Graphical·Display |
| 255 | Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as·display·server·management. | 257 | Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as·display·server·management. |
| 256 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Oracle·Linux·Graphical·environment. | 258 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Oracle·Linux·Graphical·environment. |
| Offset 282, 14 lines modified | Offset 282, 75 lines modified | ||
| 282 | ············the·system·to·quickly·enumerate·known·user·accounts·without·logging·in. | 282 | ············the·system·to·quickly·enumerate·known·user·accounts·without·logging·in. |
| 283 | Severity: ··medium | 283 | Severity: ··medium |
| 284 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_gnome_disable_user_list | 284 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_gnome_disable_user_list |
| 285 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 285 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 286 | References:·_\x8n_\x8i_\x8s_\x8t···CM-6(a),·AC-23 | 286 | References:·_\x8n_\x8i_\x8s_\x8t···CM-6(a),·AC-23 |
| 287 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00227 | 287 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00227 |
| 288 | ············_\x8c_\x8c_\x8n····A.11.SEC-OL9 | 288 | ············_\x8c_\x8c_\x8n····A.11.SEC-OL9 |
| 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 290 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 291 | if·rpm·--quiet·-q·gdm·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 292 | #·Check·for·setting·in·any·of·the·DConf·db·directories | ||
| 293 | #·If·files·contain·ibus·or·distro,·ignore·them. | ||
| 294 | #·The·assignment·assumes·that·individual·filenames·don't·contain·: | ||
| 295 | readarray·-t·SETTINGSFILES·<·<(grep·-r·"\\[org/gnome/login-screen\\]"·"/etc/dconf/db/"·\ | ||
| 296 | ································|·grep·-v·'distro\|ibus\|local.d'·|·cut·-d":"·-f1) | ||
| 297 | DCONFFILE="/etc/dconf/db/local.d/00-security-settings" | ||
| 298 | DBDIR="/etc/dconf/db/local.d" | ||
| Max diff block lines reached; 937666/945316 bytes (99.19%) of diff not shown. | |||
| Offset 15040, 259 lines modified | Offset 15040, 259 lines modified | ||
| 0003abf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003abf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003ac00:·3637·3731·2220·7461·6269·6e64·6578·3d22··6771"·tabindex=" | 0003ac00:·3637·3731·2220·7461·6269·6e64·6578·3d22··6771"·tabindex=" | ||
| 0003ac10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003ac10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003ac20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003ac20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003ac30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003ac30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003ac40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003ac40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003ac50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003ac50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003ac60:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003ac70:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ac80:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ac90:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003aca0:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003acb0:·3737·3122·3e3c·7461·626c·6520·636c·6173··771"><table·clas | |||
| 0003acc0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003acd0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003ace0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003acf0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003a | 0003ac60:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | ||
| 0003ac70:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003ac80:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ac90:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003aca0:·7073·6522·2069·643d·2269·646d·3637·3731··pse"·id="idm6771 | |||
| 0003acb0:·223e·3c70·7265·3e3c·636f·6465·3e23·2052··"><pre><code>#·R | |||
| 0003acc0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003acd0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003ace0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003acf0:·6d73·0a69·6620·2820·2120·2820·5b20·2224··ms.if·(·!·(·[·"$ | |||
| 0003ad00:·7b63·6f6e·7461·696e·6572·3a2d·7d22·203d··{container:-}"·= | |||
| 0003ad10:·3d20·2262·7772·6170·2d6f·7362·7569·6c64··=·"bwrap-osbuild | |||
| 0003ad20:·2220·5d20·2920·2661·6d70·3b26·616d·703b··"·]·)·&& | |||
| 0003ad30:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | |||
| 0003ad40:·6b65·726e·656c·207c·7c20·7270·6d20·2d2d··kernel·||·rpm·-- | |||
| 0003ad50:·7175·6965·7420·2d71·206b·6572·6e65·6c2d··quiet·-q·kernel- | |||
| 0003ad60:·7565·6b20·2920·2661·6d70·3b26·616d·703b··uek·)·&& | |||
| 0003ad70:·207b·2021·2028·207b·2072·706d·202d·2d71···{·!·(·{·rpm·--q | |||
| 0003ad80:·7569·6574·202d·7120·6b65·726e·656c·203b··uiet·-q·kernel·; | |||
| 0003ad90:·7d20·2661·6d70·3b26·616d·703b·207b·2072··}·&&·{·r | |||
| 0003ada0:·706d·202d·2d71·7569·6574·202d·7120·7270··pm·--quiet·-q·rp | |||
| 0003adb0:·6d2d·6f73·7472·6565·203b·7d20·2661·6d70··m-ostree·;}·& | |||
| 0003adc0:·3b26·616d·703b·207b·2072·706d·202d·2d71··;&·{·rpm·--q | |||
| 0003add0:·7569·6574·202d·7120·626f·6f74·6320·3b7d··uiet·-q·bootc·;} | |||
| 0003ade0:·2026·616d·703b·2661·6d70·3b20·7b20·2120···&&·{·!· | |||
| 0003adf0:·7270·6d20·2d2d·7175·6965·7420·2d71·206f··rpm·--quiet·-q·o | |||
| 0003ae00:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | |||
| 0003ae10:·203b·7d20·293b·207d·3b20·7468·656e·0a0a···;}·);·};·then.. | |||
| 0003ae20:·6669·7073·2d6d·6f64·652d·7365·7475·7020··fips-mode-setup· | |||
| 0003ae30:·2d2d·656e·6162·6c65·0a46·4950·535f·434f··--enable.FIPS_CO | |||
| 0003ae40:·4e46·3d22·2f65·7463·2f64·7261·6375·742e··NF="/etc/dracut. | |||
| 0003ae50:·636f·6e66·2e64·2f34·302d·6669·7073·2e63··conf.d/40-fips.c | |||
| 0003ae60:·6f6e·6622·0a69·6620·2120·6772·6570·2022··onf".if·!·grep·" | |||
| 0003ae70:·5e61·6464·5f64·7261·6375·746d·6f64·756c··^add_dracutmodul | |||
| 0003ae80:·6573·2b3d·5c22·2066·6970·7320·5c22·2220··es+=\"·fips·\""· | |||
| 0003ae90:·2446·4950·535f·434f·4e46·3b20·7468·656e··$FIPS_CONF;·then | |||
| 0003aea0:·0a20·2020·2065·6368·6f20·2261·6464·5f64··.····echo·"add_d | |||
| 0003aeb0:·7261·6375·746d·6f64·756c·6573·2b3d·5c22··racutmodules+=\" | |||
| 0003aec0:·2066·6970·7320·5c22·2220·2667·743b·2667···fips·\""·>&g | |||
| 0003aed0:·743b·2024·4649·5053·5f43·4f4e·460a·6669··t;·$FIPS_CONF.fi | |||
| 0003aee0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003aef0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003af00:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003af10:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003af20:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003af30:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003af40:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003af50:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003af60:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003af70:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003af80:·3d22·2369·646d·3637·3732·2220·7461·6269··="#idm6772"·tabi | |||
| 0003af90:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003afa0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003afb0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003afc0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003afd0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003afe0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003aff0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b000:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b010:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b020:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b030:·3d22·6964·6d36·3737·3222·3e3c·7461·626c··="idm6772"><tabl | |||
| 0003b040:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b050:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b060:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b070:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b080:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b090:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 0003b0a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b0b0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003 | 0003b0c0:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | ||
| 0003ad20:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003ad30:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0003ad40:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | |||
| 0003ad50:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ad60:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | |||
| 0003 | 0003b0d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003 | 0003b0e0:·6f6f·743a·3c2f·7468·3e3c·7464·3e74·7275··oot:</th><td>tru | ||
| 0003b0f0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b100:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b110:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 0003b120:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b130:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b140:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003b150:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003b160:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003b170:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003b180:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 0003b190:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003ad90:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003ada0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003adb0:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003adc0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003add0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003ade0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003adf0:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003ae00:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003ae10:·434d·2d36·2861·290a·2020·2d20·4e49·5354··CM-6(a).··-·NIST | |||
| 0003ae20:·2d38·3030·2d35·332d·4941·2d37·0a20·202d··-800-53-IA-7.··- | |||
| 0003ae30:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 0003ae40:·3132·0a20·202d·204e·4953·542d·3830·302d··12.··-·NIST-800- | |||
| 0003ae50:·3533·2d53·432d·3132·2832·290a·2020·2d20··53-SC-12(2).··-· | |||
| 0003ae60:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003ae70:·3228·3329·0a20·202d·204e·4953·542d·3830··2(3).··-·NIST-80 | |||
| 0003ae80:·302d·3533·2d53·432d·3133·0a20·202d·2065··0-53-SC-13.··-·e | |||
| 0003ae90:·6e61·626c·655f·6472·6163·7574·5f66·6970··nable_dracut_fip | |||
| 0003aea0:·735f·6d6f·6475·6c65·0a20·202d·2068·6967··s_module.··-·hig | |||
| 0003aeb0:·685f·7365·7665·7269·7479·0a20·202d·206d··h_severity.··-·m | |||
| 0003aec0:·6564·6975·6d5f·636f·6d70·6c65·7869·7479··edium_complexity | |||
| 0003aed0:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | |||
| Max diff block lines reached; 4973098/5007488 bytes (99.31%) of diff not shown. | |||
| Offset 97, 14 lines modified | Offset 97, 27 lines modified | ||
| 97 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module | 97 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module |
| 98 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002450,·CCI-000068,·CCI-002418,·CCI-000877 | 98 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002450,·CCI-000068,·CCI-002418,·CCI-000877 |
| 99 | ············_\x8i_\x8s_\x8m······1446 | 99 | ············_\x8i_\x8s_\x8m······1446 |
| 100 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 100 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 101 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 101 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 102 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 102 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 105 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 106 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 107 | fips-mode-setup·--enable | ||
| 108 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 109 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 110 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 111 | fi | ||
| 112 | else | ||
| 113 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 114 | fi | ||
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 109 | -·name:·Gather·the·package·facts | 120 | -·name:·Gather·the·package·facts |
| 110 | ··package_facts: | 121 | ··package_facts: |
| Offset 190, 27 lines modified | Offset 203, 14 lines modified | ||
| 190 | ··-·NIST-800-53-SC-13 | 203 | ··-·NIST-800-53-SC-13 |
| 191 | ··-·enable_dracut_fips_module | 204 | ··-·enable_dracut_fips_module |
| 192 | ··-·high_severity | 205 | ··-·high_severity |
| 193 | ··-·medium_complexity | 206 | ··-·medium_complexity |
| 194 | ··-·medium_disruption | 207 | ··-·medium_disruption |
| 195 | ··-·reboot_required | 208 | ··-·reboot_required |
| 196 | ··-·restrict_strategy | 209 | ··-·restrict_strategy |
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 198 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 199 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 200 | fips-mode-setup·--enable | ||
| 201 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 202 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 203 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 204 | fi | ||
| 205 | else | ||
| 206 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 207 | fi | ||
| 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 210 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 209 | To·enable·FIPS·mode,·run·the·following·command: | 211 | To·enable·FIPS·mode,·run·the·following·command: |
| 210 | fips-mode-setup·--enable | 212 | fips-mode-setup·--enable |
| 211 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: | 213 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: |
| 212 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 | 214 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 |
| 213 | ····*·Creating·/etc/system-fips | 215 | ····*·Creating·/etc/system-fips |
| Offset 259, 26 lines modified | Offset 259, 28 lines modified | ||
| 259 | $·sudo·yum·install·crypto-policies | 259 | $·sudo·yum·install·crypto-policies |
| 260 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 260 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 261 | Severity: ··medium | 261 | Severity: ··medium |
| 262 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 262 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 263 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 263 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| 264 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 264 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 265 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 265 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 266 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 267 | [[packages]] | ||
| 268 | name·=·"crypto-policies" | ||
| 269 | version·=·"*" | ||
| 266 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 270 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 267 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 271 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 268 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 272 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 269 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 273 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 270 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 274 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 271 | include·install_crypto-policies | ||
| 275 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | ||
| 276 | ····yum·install·-y·"crypto-policies" | ||
| 277 | fi | ||
| 272 | class·install_crypto-policies·{ | ||
| 273 | ··package·{·'crypto-policies': | ||
| 274 | ····ensure·=>·'installed', | ||
| 275 | ··} | ||
| 276 | } | ||
| 277 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 278 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 278 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 279 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 279 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 280 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 280 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 281 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 281 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 282 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 282 | -·name:·Ensure·crypto-policies·is·installed | 283 | -·name:·Ensure·crypto-policies·is·installed |
| 283 | ··package: | 284 | ··package: |
| Offset 287, 35 lines modified | Offset 289, 33 lines modified | ||
| 287 | ··tags: | 289 | ··tags: |
| 288 | ··-·enable_strategy | 290 | ··-·enable_strategy |
| 289 | ··-·low_complexity | 291 | ··-·low_complexity |
| 290 | ··-·low_disruption | 292 | ··-·low_disruption |
| 291 | ··-·medium_severity | 293 | ··-·medium_severity |
| 292 | ··-·no_reboot_needed | 294 | ··-·no_reboot_needed |
| 293 | ··-·package_crypto-policies_installed | 295 | ··-·package_crypto-policies_installed |
| 294 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 295 | [[packages]] | ||
| 296 | name·=·"crypto-policies" | ||
| 297 | version·=·"*" | ||
| 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 299 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 297 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 300 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 298 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 301 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 299 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 302 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 300 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 301 | package·--add=crypto-policies | ||
| 303 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | ||
| 304 | ····yum·install·-y·"crypto-policies" | ||
| 305 | fi | ||
| 306 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 307 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 303 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 308 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 304 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 309 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 305 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 310 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 306 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 307 | include·install_crypto-policies | ||
| 308 | class·install_crypto-policies·{ | ||
| 311 | package· | 309 | ··package·{·'crypto-policies': |
| 310 | ····ensure·=>·'installed', | ||
| 311 | ··} | ||
| 312 | } | ||
| 312 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 313 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 313 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 314 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| Max diff block lines reached; 579520/585568 bytes (98.97%) of diff not shown. | |||
| Offset 15136, 408 lines modified | Offset 15136, 408 lines modified | ||
| 0003b1f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b1f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b200:·6d35·3934·3422·2074·6162·696e·6465·783d··m5944"·tabindex= | 0003b200:·6d35·3934·3422·2074·6162·696e·6465·783d··m5944"·tabindex= | ||
| 0003b210:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b210:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b220:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b220:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b230:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b230:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b240:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b240:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b250:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b250:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b260:·6564·6961·7469·6f6e·20 | 0003b260:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 0003b270:· | 0003b270:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 0003b280:·3 | 0003b280:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b290:· | 0003b290:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b2a0:·6 | 0003b2a0:·6170·7365·2220·6964·3d22·6964·6d35·3934··apse"·id="idm594 | ||
| 0003b2b0:·3 | 0003b2b0:·3422·3e3c·7072·653e·3c63·6f64·653e·2320··4"><pre><code>#· | ||
| 0003b2c0:· | 0003b2c0:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 0003b2d0:·7 | 0003b2d0:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 0003b2e0:· | 0003b2e0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 0003b2f0:· | 0003b2f0:·726d·730a·6966·2021·2028·207b·2072·706d··rms.if·!·(·{·rpm | ||
| 0003b300:· | 0003b300:·202d·2d71·7569·6574·202d·7120·6b65·726e···--quiet·-q·kern | ||
| 0003b310:· | 0003b310:·656c·203b·7d20·2661·6d70·3b26·616d·703b··el·;}·&& | ||
| 0003b320:· | 0003b320:·207b·2072·706d·202d·2d71·7569·6574·202d···{·rpm·--quiet·- | ||
| 0003b330:·7 | 0003b330:·7120·7270·6d2d·6f73·7472·6565·203b·7d20··q·rpm-ostree·;}· | ||
| 0003b340:· | 0003b340:·2661·6d70·3b26·616d·703b·207b·2072·706d··&&·{·rpm | ||
| 0003b350:· | 0003b350:·202d·2d71·7569·6574·202d·7120·626f·6f74···--quiet·-q·boot | ||
| 0003b360:·6 | 0003b360:·6320·3b7d·2026·616d·703b·2661·6d70·3b20··c·;}·&&· | ||
| 0003b370:· | 0003b370:·7b20·2120·7270·6d20·2d2d·7175·6965·7420··{·!·rpm·--quiet· | ||
| 0003b380:· | 0003b380:·2d71·206f·7065·6e73·6869·6674·2d6b·7562··-q·openshift-kub | ||
| 0003b390:·65 | 0003b390:·656c·6574·203b·7d20·293b·2074·6865·6e0a··elet·;}·);·then. | ||
| 0003b3a0:· | 0003b3a0:·0a23·2046·696e·6420·7768·6963·6820·6669··.#·Find·which·fi | ||
| 0003b3b0:·6 | 0003b3b0:·6c65·7320·6861·7665·2069·6e63·6f72·7265··les·have·incorre | ||
| 0003b3c0:·6 | 0003b3c0:·6374·2068·6173·6820·286e·6f74·2069·6e20··ct·hash·(not·in· | ||
| 0003b3d0:· | 0003b3d0:·2f65·7463·2c20·6265·6361·7573·6520·6f66··/etc,·because·of | ||
| 0003b3e0:·6 | 0003b3e0:·2074·6865·2073·7973·7465·6d20·7265·6c61···the·system·rela | ||
| 0003b3f0:·7 | 0003b3f0:·7465·6420·636f·6e66·6967·2066·696c·6573··ted·config·files | ||
| 0003b400:·2 | 0003b400:·2920·616e·6420·7468·656e·2067·6574·2066··)·and·then·get·f | ||
| 0003b410:· | 0003b410:·696c·6573·206e·616d·6573·0a66·696c·6573··iles·names.files | ||
| 0003b420:· | 0003b420:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | ||
| 0003b430:· | 0003b430:·6861·7368·3d22·2428·7270·6d20·2d56·6120··hash="$(rpm·-Va· | ||
| 0003b440:·2 | 0003b440:·2d2d·6e6f·636f·6e66·6967·207c·2067·7265··--noconfig·|·gre | ||
| 0003b450:· | 0003b450:·7020·2d45·2027·5e2e·2e35·2720·7c20·6177··p·-E·'^..5'·|·aw | ||
| 0003b460:· | 0003b460:·6b20·277b·7072·696e·7420·244e·467d·2720··k·'{print·$NF}'· | ||
| 0003b470:·2 | 0003b470:·2922·0a0a·6966·205b·202d·6e20·2224·6669··)"..if·[·-n·"$fi | ||
| 0003b480:· | 0003b480:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003b490:· | 0003b490:·6374·5f68·6173·6822·205d·3b20·7468·656e··ct_hash"·];·then | ||
| 0003b4a0:· | 0003b4a0:·0a20·2020·2023·2046·726f·6d20·6669·6c65··.····#·From·file | ||
| 0003b4b0:· | 0003b4b0:·7320·6e61·6d65·7320·6765·7420·7061·636b··s·names·get·pack | ||
| 0003b4c0:· | 0003b4c0:·6167·6520·6e61·6d65·7320·616e·6420·6368··age·names·and·ch | ||
| 0003b4d0:· | 0003b4d0:·616e·6765·206e·6577·6c69·6e65·2074·6f20··ange·newline·to· | ||
| 0003b4e0:·3 | 0003b4e0:·7370·6163·652c·2062·6563·6175·7365·2072··space,·because·r | ||
| 0003b4f0:· | 0003b4f0:·706d·2077·7269·7465·7320·6561·6368·2070··pm·writes·each·p | ||
| 0003b500:·6 | 0003b500:·6163·6b61·6765·2074·6f20·6e65·7720·6c69··ackage·to·new·li | ||
| 0003b510:·6 | 0003b510:·6e65·0a20·2020·2070·6163·6b61·6765·735f··ne.····packages_ | ||
| 0003b520:· | 0003b520:·746f·5f72·6569·6e73·7461·6c6c·3d22·2428··to_reinstall="$( | ||
| 0003b530:· | 0003b530:·7270·6d20·2d71·6620·2466·696c·6573·5f77··rpm·-qf·$files_w | ||
| 0003b540:· | 0003b540:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b550:·7 | 0003b550:·7368·207c·2074·7220·275c·6e27·2027·2027··sh·|·tr·'\n'·'·' | ||
| 0003b560:·2 | 0003b560:·2922·0a0a·2020·2020·0a20·2020·2079·756d··)"..····.····yum | ||
| 0003b570:· | 0003b570:·2072·6569·6e73·7461·6c6c·202d·7920·2470···reinstall·-y·$p | ||
| 0003b580:· | 0003b580:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | ||
| 0003b590:· | 0003b590:·7461·6c6c·0a20·2020·200a·6669·0a0a·656c··tall.····.fi..el | ||
| 0003b5a0:· | 0003b5a0:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | ||
| 0003b5b0:· | 0003b5b0:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | ||
| 0003b5c0:·6 | 0003b5c0:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | ||
| 0003b5d0:· | 0003b5d0:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | ||
| 0003b5e0:·6 | 0003b5e0:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | ||
| 0003b5f0:·6 | 0003b5f0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0003b600:· | 0003b600:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0003b610:· | 0003b610:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0003b620:·6 | 0003b620:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0003b630:·206 | 0003b630:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b640:· | 0003b640:·646d·3539·3435·2220·7461·6269·6e64·6578··dm5945"·tabindex | ||
| 0003b650:· | 0003b650:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b660:· | 0003b660:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b670:· | 0003b670:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b680:· | 0003b680:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b690:· | 0003b690:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b6a0:· | 0003b6a0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b6b0:· | 0003b6b0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003b6c0:· | 0003b6c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b6d0:· | 0003b6d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b6e0:· | 0003b6e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b6f0:·6 | 0003b6f0:·6d35·3934·3522·3e3c·7461·626c·6520·636c··m5945"><table·cl | ||
| 0003b700:·61 | 0003b700:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b710:· | 0003b710:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b720:· | 0003b720:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b730:· | 0003b730:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b740:· | 0003b740:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b750:·3 | 0003b750:·3e3c·7464·3e68·6967·683c·2f74·643e·3c2f··><td>high</td></ | ||
| 0003b760:· | 0003b760:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b770:· | 0003b770:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | ||
| 0003b780:· | 0003b780:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003b790:· | 0003b790:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b7a0:· | 0003b7a0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b7b0:·3 | 0003b7b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b7c0:· | 0003b7c0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b7d0:· | 0003b7d0:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 0003b7e0:·7 | 0003b7e0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b7f0:· | 0003b7f0:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | ||
| 0003b800:·686 | 0003b800:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | ||
| 0003b810:· | 0003b810:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | ||
| 0003b820:· | 0003b820:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | ||
| 0003b830:· | 0003b830:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | ||
| 0003b840:· | 0003b840:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | ||
| 0003b850:·2 | 0003b850:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003b860:· | 0003b860:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003b870:· | 0003b870:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003b880:· | 0003b880:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b890:· | 0003b890:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | ||
| 0003b8a0:· | 0003b8a0:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | ||
| 0003b8b0:· | 0003b8b0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b8c0:· | 0003b8c0:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003b8d0:·5 | 0003b8d0:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003b8e0:· | 0003b8e0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b8f0:· | 0003b8f0:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003b900:· | 0003b900:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003b910:· | 0003b910:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003b920:· | 0003b920:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003b930:·2 | 0003b930:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003b940:· | 0003b940:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003b950:·6 | 0003b950:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| 0003b960:·2 | 0003b960:·2d20·6d65·6469·756d·5f64·6973·7275·7074··-·medium_disrupt | ||
| 0003b970:·6 | 0003b970:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | ||
| 0003b980:·7 | 0003b980:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | ||
| 0003b990:· | 0003b990:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | ||
| 0003b9a0:·20 | 0003b9a0:·202d·2072·706d·5f76·6572·6966·795f·6861···-·rpm_verify_ha | ||
| 0003b9b0:· | 0003b9b0:·7368·6573·0a0a·2d20·6e61·6d65·3a20·2753··shes..-·name:·'S | ||
| 0003b9c0:· | 0003b9c0:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | ||
| Max diff block lines reached; 6290611/6345563 bytes (99.13%) of diff not shown. | |||
| Offset 101, 14 lines modified | Offset 101, 33 lines modified | ||
| 101 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 101 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 102 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 102 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 103 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 103 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 109 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 110 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 111 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 112 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 113 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 114 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 115 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 116 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 117 | fi | ||
| 118 | else | ||
| 119 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 120 | fi | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 113 | -·name:·Gather·the·package·facts | 126 | -·name:·Gather·the·package·facts |
| 114 | ··package_facts: | 127 | ··package_facts: |
| Offset 275, 33 lines modified | Offset 294, 14 lines modified | ||
| 275 | ··-·PCI-DSSv4-11.5.2 | 294 | ··-·PCI-DSSv4-11.5.2 |
| 276 | ··-·high_complexity | 295 | ··-·high_complexity |
| 277 | ··-·high_severity | 296 | ··-·high_severity |
| 278 | ··-·medium_disruption | 297 | ··-·medium_disruption |
| 279 | ··-·no_reboot_needed | 298 | ··-·no_reboot_needed |
| 280 | ··-·restrict_strategy | 299 | ··-·restrict_strategy |
| 281 | ··-·rpm_verify_hashes | 300 | ··-·rpm_verify_hashes |
| 282 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 283 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 284 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 285 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 286 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 287 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 288 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 289 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 290 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 291 | fi | ||
| 292 | else | ||
| 293 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 294 | fi | ||
| 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 301 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 296 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 302 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 297 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 303 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 298 | run·the·following·command·to·determine·which·package·owns·it: | 304 | run·the·following·command·to·determine·which·package·owns·it: |
| 299 | $·rpm·-qf·FILENAME | 305 | $·rpm·-qf·FILENAME |
| 300 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 306 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 301 | $·sudo·rpm·--restore·PACKAGENAME | 307 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 320, 14 lines modified | Offset 320, 46 lines modified | ||
| 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 321 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 321 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 322 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 322 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 328 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 329 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 330 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 331 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 332 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 333 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 334 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 335 | declare·-A·SETPERMS_RPM_DICT | ||
| 336 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 337 | #·is·expected·by·the·RPM·database | ||
| 338 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 339 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 340 | do | ||
| 341 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 342 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 343 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 344 | done | ||
| 345 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 346 | #·correct·values | ||
| 347 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 348 | do | ||
| 349 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 350 | done | ||
| 351 | else | ||
| 352 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 353 | fi | ||
| 327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 328 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 355 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 329 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 356 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 330 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 357 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 331 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 358 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 332 | -·name:·Gather·the·package·facts | 359 | -·name:·Gather·the·package·facts |
| 333 | ··package_facts: | 360 | ··package_facts: |
| Offset 435, 46 lines modified | Offset 467, 14 lines modified | ||
| 435 | ··-·PCI-DSSv4-11.5.2 | 467 | ··-·PCI-DSSv4-11.5.2 |
| 436 | ··-·high_complexity | 468 | ··-·high_complexity |
| 437 | ··-·high_severity | 469 | ··-·high_severity |
| 438 | ··-·medium_disruption | 470 | ··-·medium_disruption |
| 439 | ··-·no_reboot_needed | 471 | ··-·no_reboot_needed |
| 440 | ··-·restrict_strategy | 472 | ··-·restrict_strategy |
| 441 | ··-·rpm_verify_ownership | 473 | ··-·rpm_verify_ownership |
| 442 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 443 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 444 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 445 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 446 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 659312/667023 bytes (98.84%) of diff not shown. | |||
| Offset 15162, 408 lines modified | Offset 15162, 408 lines modified | ||
| 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b3a0:·3539·3434·2220·7461·6269·6e64·6578·3d22··5944"·tabindex=" | 0003b3a0:·3539·3434·2220·7461·6269·6e64·6578·3d22··5944"·tabindex=" | ||
| 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b400:·6469·6174·696f·6e20· | 0003b400:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | ||
| 0003b410:·7 | 0003b410:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0003b420:· | 0003b420:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b430:·6 | 0003b430:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b440:· | 0003b440:·7073·6522·2069·643d·2269·646d·3539·3434··pse"·id="idm5944 | ||
| 0003b450:· | 0003b450:·223e·3c70·7265·3e3c·636f·6465·3e23·2052··"><pre><code>#·R | ||
| 0003b460:· | 0003b460:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 0003b470:·7 | 0003b470:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | ||
| 0003b480:· | 0003b480:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | ||
| 0003b490:·6 | 0003b490:·6d73·0a69·6620·2120·2820·7b20·7270·6d20··ms.if·!·(·{·rpm· | ||
| 0003b4a0:· | 0003b4a0:·2d2d·7175·6965·7420·2d71·206b·6572·6e65··--quiet·-q·kerne | ||
| 0003b4b0:· | 0003b4b0:·6c20·3b7d·2026·616d·703b·2661·6d70·3b20··l·;}·&&· | ||
| 0003b4c0:· | 0003b4c0:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | ||
| 0003b4d0:· | 0003b4d0:·2072·706d·2d6f·7374·7265·6520·3b7d·2026···rpm-ostree·;}·& | ||
| 0003b4e0:·6 | 0003b4e0:·616d·703b·2661·6d70·3b20·7b20·7270·6d20··amp;&·{·rpm· | ||
| 0003b4f0:· | 0003b4f0:·2d2d·7175·6965·7420·2d71·2062·6f6f·7463··--quiet·-q·bootc | ||
| 0003b500:· | 0003b500:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b510:·2 | 0003b510:·2021·2072·706d·202d·2d71·7569·6574·202d···!·rpm·--quiet·- | ||
| 0003b520:·7 | 0003b520:·7120·6f70·656e·7368·6966·742d·6b75·6265··q·openshift-kube | ||
| 0003b530:· | 0003b530:·6c65·7420·3b7d·2029·3b20·7468·656e·0a0a··let·;}·);·then.. | ||
| 0003b540:· | 0003b540:·2320·4669·6e64·2077·6869·6368·2066·696c··#·Find·which·fil | ||
| 0003b550:·6 | 0003b550:·6573·2068·6176·6520·696e·636f·7272·6563··es·have·incorrec | ||
| 0003b560:·7 | 0003b560:·7420·6861·7368·2028·6e6f·7420·696e·202f··t·hash·(not·in·/ | ||
| 0003b570:·6 | 0003b570:·6574·632c·2062·6563·6175·7365·206f·6620··etc,·because·of· | ||
| 0003b580:· | 0003b580:·7468·6520·7379·7374·656d·2072·656c·6174··the·system·relat | ||
| 0003b590:· | 0003b590:·6564·2063·6f6e·6669·6720·6669·6c65·7329··ed·config·files) | ||
| 0003b5a0:·20 | 0003b5a0:·2061·6e64·2074·6865·6e20·6765·7420·6669···and·then·get·fi | ||
| 0003b5b0:· | 0003b5b0:·6c65·7320·6e61·6d65·730a·6669·6c65·735f··les·names.files_ | ||
| 0003b5c0:· | 0003b5c0:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003b5d0:· | 0003b5d0:·6173·683d·2224·2872·706d·202d·5661·202d··ash="$(rpm·-Va·- | ||
| 0003b5e0:·2 | 0003b5e0:·2d6e·6f63·6f6e·6669·6720·7c20·6772·6570··-noconfig·|·grep | ||
| 0003b5f0:· | 0003b5f0:·202d·4520·275e·2e2e·3527·207c·2061·776b···-E·'^..5'·|·awk | ||
| 0003b600:· | 0003b600:·2027·7b70·7269·6e74·2024·4e46·7d27·2029···'{print·$NF}'·) | ||
| 0003b610:·2 | 0003b610:·220a·0a69·6620·5b20·2d6e·2022·2466·696c··"..if·[·-n·"$fil | ||
| 0003b620:· | 0003b620:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003b630:· | 0003b630:·745f·6861·7368·2220·5d3b·2074·6865·6e0a··t_hash"·];·then. | ||
| 0003b640:· | 0003b640:·2020·2020·2320·4672·6f6d·2066·696c·6573······#·From·files | ||
| 0003b650:·2 | 0003b650:·206e·616d·6573·2067·6574·2070·6163·6b61···names·get·packa | ||
| 0003b660:· | 0003b660:·6765·206e·616d·6573·2061·6e64·2063·6861··ge·names·and·cha | ||
| 0003b670:· | 0003b670:·6e67·6520·6e65·776c·696e·6520·746f·2073··nge·newline·to·s | ||
| 0003b680:· | 0003b680:·7061·6365·2c20·6265·6361·7573·6520·7270··pace,·because·rp | ||
| 0003b690:· | 0003b690:·6d20·7772·6974·6573·2065·6163·6820·7061··m·writes·each·pa | ||
| 0003b6a0:·6 | 0003b6a0:·636b·6167·6520·746f·206e·6577·206c·696e··ckage·to·new·lin | ||
| 0003b6b0:·6 | 0003b6b0:·650a·2020·2020·7061·636b·6167·6573·5f74··e.····packages_t | ||
| 0003b6c0:·6 | 0003b6c0:·6f5f·7265·696e·7374·616c·6c3d·2224·2872··o_reinstall="$(r | ||
| 0003b6d0:· | 0003b6d0:·706d·202d·7166·2024·6669·6c65·735f·7769··pm·-qf·$files_wi | ||
| 0003b6e0:· | 0003b6e0:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | ||
| 0003b6f0:·6 | 0003b6f0:·6820·7c20·7472·2027·5c6e·2720·2720·2729··h·|·tr·'\n'·'·') | ||
| 0003b700:·20 | 0003b700:·220a·0a20·2020·200a·2020·2020·7975·6d20··"..····.····yum· | ||
| 0003b710:· | 0003b710:·7265·696e·7374·616c·6c20·2d79·2024·7061··reinstall·-y·$pa | ||
| 0003b720:· | 0003b720:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | ||
| 0003b730:·616 | 0003b730:·616c·6c0a·2020·2020·0a66·690a·0a65·6c73··all.····.fi..els | ||
| 0003b740:· | 0003b740:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | ||
| 0003b750:· | 0003b750:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | ||
| 0003b760:·6 | 0003b760:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | ||
| 0003b770:·616 | 0003b770:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | ||
| 0003b780:· | 0003b780:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | ||
| 0003b790:· | 0003b790:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0003b7a0:· | 0003b7a0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0003b7b0:· | 0003b7b0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0003b7c0:·6 | 0003b7c0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0003b7d0:·6 | 0003b7d0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b7e0:· | 0003b7e0:·6d35·3934·3522·2074·6162·696e·6465·783d··m5945"·tabindex= | ||
| 0003b7f0:· | 0003b7f0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b800:· | 0003b800:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b810:· | 0003b810:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b820:·6 | 0003b820:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b830:·6 | 0003b830:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b840:· | 0003b840:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b850:·20 | 0003b850:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b860:· | 0003b860:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b870:· | 0003b870:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b880:· | 0003b880:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b890:· | 0003b890:·3539·3435·223e·3c74·6162·6c65·2063·6c61··5945"><table·cla | ||
| 0003b8a0:· | 0003b8a0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b8b0:· | 0003b8b0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b8c0:· | 0003b8c0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b8d0:· | 0003b8d0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b8e0:· | 0003b8e0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b8f0:· | 0003b8f0:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | ||
| 0003b900:· | 0003b900:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b910:· | 0003b910:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003b920:· | 0003b920:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003b930:· | 0003b930:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b940:· | 0003b940:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b950:· | 0003b950:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b960:· | 0003b960:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b970:· | 0003b970:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003b980:· | 0003b980:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b990:· | 0003b990:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | ||
| 0003b9a0:·6 | 0003b9a0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | ||
| 0003b9b0:· | 0003b9b0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | ||
| 0003b9c0:· | 0003b9c0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | ||
| 0003b9d0:·7 | 0003b9d0:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | ||
| 0003b9e0:· | 0003b9e0:·2020·2d20·434a·4953·2d35·2e31·302e·342e····-·CJIS-5.10.4. | ||
| 0003b9f0:· | 0003b9f0:·310a·2020·2d20·4e49·5354·2d38·3030·2d31··1.··-·NIST-800-1 | ||
| 0003ba00:· | 0003ba00:·3731·2d33·2e33·2e38·0a20·202d·204e·4953··71-3.3.8.··-·NIS | ||
| 0003ba10:·5 | 0003ba10:·542d·3830·302d·3137·312d·332e·342e·310a··T-800-171-3.4.1. | ||
| 0003ba20:·202 | 0003ba20:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003ba30:· | 0003ba30:·4155·2d39·2833·290a·2020·2d20·4e49·5354··AU-9(3).··-·NIST | ||
| 0003ba40:· | 0003ba40:·2d38·3030·2d35·332d·434d·2d36·2863·290a··-800-53-CM-6(c). | ||
| 0003ba50:· | 0003ba50:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003ba60:· | 0003ba60:·434d·2d36·2864·290a·2020·2d20·4e49·5354··CM-6(d).··-·NIST | ||
| 0003ba70:· | 0003ba70:·2d38·3030·2d35·332d·5349·2d37·0a20·202d··-800-53-SI-7.··- | ||
| 0003ba80:· | 0003ba80:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003ba90:· | 0003ba90:·3728·3129·0a20·202d·204e·4953·542d·3830··7(1).··-·NIST-80 | ||
| 0003baa0:· | 0003baa0:·302d·3533·2d53·492d·3728·3629·0a20·202d··0-53-SI-7(6).··- | ||
| 0003bab0:·2 | 0003bab0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | ||
| 0003bac0:· | 0003bac0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | ||
| 0003bad0:· | 0003bad0:·3131·2e35·2e32·0a20·202d·2068·6967·685f··11.5.2.··-·high_ | ||
| 0003bae0:·6 | 0003bae0:·636f·6d70·6c65·7869·7479·0a20·202d·2068··complexity.··-·h | ||
| 0003baf0:·6 | 0003baf0:·6967·685f·7365·7665·7269·7479·0a20·202d··igh_severity.··- | ||
| 0003bb00:· | 0003bb00:·206d·6564·6975·6d5f·6469·7372·7570·7469···medium_disrupti | ||
| 0003bb10:·6 | 0003bb10:·6f6e·0a20·202d·206e·6f5f·7265·626f·6f74··on.··-·no_reboot | ||
| 0003bb20:· | 0003bb20:·5f6e·6565·6465·640a·2020·2d20·7265·7374··_needed.··-·rest | ||
| 0003bb30:·69 | 0003bb30:·7269·6374·5f73·7472·6174·6567·790a·2020··rict_strategy.·· | ||
| 0003bb40:· | 0003bb40:·2d20·7270·6d5f·7665·7269·6679·5f68·6173··-·rpm_verify_has | ||
| 0003bb50:·6 | 0003bb50:·6865·730a·0a2d·206e·616d·653a·2027·5365··hes..-·name:·'Se | ||
| 0003bb60:· | 0003bb60:·7420·6661·6374·3a20·5061·636b·6167·6520··t·fact:·Package· | ||
| Max diff block lines reached; 15896768/15951720 bytes (99.66%) of diff not shown. | |||
| Offset 108, 14 lines modified | Offset 108, 33 lines modified | ||
| 108 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 108 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 109 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 109 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 110 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 110 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 111 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 111 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 116 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 117 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 118 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 119 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 120 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 121 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 122 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 123 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 124 | fi | ||
| 125 | else | ||
| 126 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 127 | fi | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 120 | -·name:·Gather·the·package·facts | 133 | -·name:·Gather·the·package·facts |
| 121 | ··package_facts: | 134 | ··package_facts: |
| Offset 282, 33 lines modified | Offset 301, 14 lines modified | ||
| 282 | ··-·PCI-DSSv4-11.5.2 | 301 | ··-·PCI-DSSv4-11.5.2 |
| 283 | ··-·high_complexity | 302 | ··-·high_complexity |
| 284 | ··-·high_severity | 303 | ··-·high_severity |
| 285 | ··-·medium_disruption | 304 | ··-·medium_disruption |
| 286 | ··-·no_reboot_needed | 305 | ··-·no_reboot_needed |
| 287 | ··-·restrict_strategy | 306 | ··-·restrict_strategy |
| 288 | ··-·rpm_verify_hashes | 307 | ··-·rpm_verify_hashes |
| 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 290 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 291 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 292 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 293 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 294 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 295 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 296 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 297 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 298 | fi | ||
| 299 | else | ||
| 300 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 301 | fi | ||
| 302 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 308 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 303 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 309 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 304 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 310 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 305 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 311 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 306 | $·rpm·-qf·FILENAME | 312 | $·rpm·-qf·FILENAME |
| 307 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 313 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 329, 14 lines modified | Offset 329, 50 lines modified | ||
| 329 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 329 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 330 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 330 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 341 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 342 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 343 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 344 | declare·-A·SETPERMS_RPM_DICT | ||
| 345 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 346 | #·is·expected·by·the·RPM·database | ||
| 347 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 348 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 349 | do | ||
| 350 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 351 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 352 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 353 | ········do | ||
| 354 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 355 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 356 | ········done | ||
| 357 | done | ||
| 358 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 359 | #·correct·values | ||
| 360 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 361 | do | ||
| 362 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 363 | done | ||
| 364 | else | ||
| 365 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 366 | fi | ||
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 368 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 369 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 370 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 371 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 341 | -·name:·Gather·the·package·facts | 372 | -·name:·Gather·the·package·facts |
| 342 | ··package_facts: | 373 | ··package_facts: |
| Offset 448, 50 lines modified | Offset 484, 14 lines modified | ||
| 448 | ··-·PCI-DSSv4-11.5.2 | 484 | ··-·PCI-DSSv4-11.5.2 |
| 449 | ··-·high_complexity | 485 | ··-·high_complexity |
| 450 | ··-·high_severity | 486 | ··-·high_severity |
| 451 | ··-·medium_disruption | 487 | ··-·medium_disruption |
| 452 | ··-·no_reboot_needed | 488 | ··-·no_reboot_needed |
| 453 | ··-·restrict_strategy | 489 | ··-·restrict_strategy |
| 454 | ··-·rpm_verify_permissions | 490 | ··-·rpm_verify_permissions |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1231359/1239443 bytes (99.35%) of diff not shown. | |||
| Offset 15173, 408 lines modified | Offset 15173, 408 lines modified | ||
| 0003b440:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | 0003b440:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | ||
| 0003b450:·3934·3422·2074·6162·696e·6465·783d·2230··944"·tabindex="0 | 0003b450:·3934·3422·2074·6162·696e·6465·783d·2230··944"·tabindex="0 | ||
| 0003b460:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b460:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b470:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b470:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b480:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b480:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b490:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b490:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b4a0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b4a0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b4b0:·6961·7469·6f6e·20 | 0003b4b0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 0003b4c0:·6 | 0003b4c0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003b4d0:· | 0003b4d0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b4e0:· | 0003b4e0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b4f0:· | 0003b4f0:·7365·2220·6964·3d22·6964·6d35·3934·3422··se"·id="idm5944" | ||
| 0003b500:·3 | 0003b500:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | ||
| 0003b510:· | 0003b510:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | ||
| 0003b520:· | 0003b520:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | ||
| 0003b530:·6 | 0003b530:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | ||
| 0003b540:· | 0003b540:·730a·6966·2021·2028·207b·2072·706d·202d··s.if·!·(·{·rpm·- | ||
| 0003b550:· | 0003b550:·2d71·7569·6574·202d·7120·6b65·726e·656c··-quiet·-q·kernel | ||
| 0003b560:· | 0003b560:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b570:· | 0003b570:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b580:· | 0003b580:·7270·6d2d·6f73·7472·6565·203b·7d20·2661··rpm-ostree·;}·&a | ||
| 0003b590:· | 0003b590:·6d70·3b26·616d·703b·207b·2072·706d·202d··mp;&·{·rpm·- | ||
| 0003b5a0:· | 0003b5a0:·2d71·7569·6574·202d·7120·626f·6f74·6320··-quiet·-q·bootc· | ||
| 0003b5b0:·3 | 0003b5b0:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003b5c0:· | 0003b5c0:·2120·7270·6d20·2d2d·7175·6965·7420·2d71··!·rpm·--quiet·-q | ||
| 0003b5d0:· | 0003b5d0:·206f·7065·6e73·6869·6674·2d6b·7562·656c···openshift-kubel | ||
| 0003b5e0:·74 | 0003b5e0:·6574·203b·7d20·293b·2074·6865·6e0a·0a23··et·;}·);·then..# | ||
| 0003b5f0:·2 | 0003b5f0:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | ||
| 0003b600:· | 0003b600:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | ||
| 0003b610:·20 | 0003b610:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | ||
| 0003b620:·74 | 0003b620:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | ||
| 0003b630:· | 0003b630:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | ||
| 0003b640:·206 | 0003b640:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | ||
| 0003b650:· | 0003b650:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | ||
| 0003b660:· | 0003b660:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | ||
| 0003b670:· | 0003b670:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b680:· | 0003b680:·7368·3d22·2428·7270·6d20·2d56·6120·2d2d··sh="$(rpm·-Va·-- | ||
| 0003b690:· | 0003b690:·6e6f·636f·6e66·6967·207c·2067·7265·7020··noconfig·|·grep· | ||
| 0003b6a0:·2d | 0003b6a0:·2d45·2027·5e2e·2e35·2720·7c20·6177·6b20··-E·'^..5'·|·awk· | ||
| 0003b6b0:· | 0003b6b0:·277b·7072·696e·7420·244e·467d·2720·2922··'{print·$NF}'·)" | ||
| 0003b6c0:· | 0003b6c0:·0a0a·6966·205b·202d·6e20·2224·6669·6c65··..if·[·-n·"$file | ||
| 0003b6d0:· | 0003b6d0:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003b6e0:· | 0003b6e0:·5f68·6173·6822·205d·3b20·7468·656e·0a20··_hash"·];·then.· | ||
| 0003b6f0:· | 0003b6f0:·2020·2023·2046·726f·6d20·6669·6c65·7320·····#·From·files· | ||
| 0003b700:· | 0003b700:·6e61·6d65·7320·6765·7420·7061·636b·6167··names·get·packag | ||
| 0003b710:· | 0003b710:·6520·6e61·6d65·7320·616e·6420·6368·616e··e·names·and·chan | ||
| 0003b720:· | 0003b720:·6765·206e·6577·6c69·6e65·2074·6f20·7370··ge·newline·to·sp | ||
| 0003b730:· | 0003b730:·6163·652c·2062·6563·6175·7365·2072·706d··ace,·because·rpm | ||
| 0003b740:·2 | 0003b740:·2077·7269·7465·7320·6561·6368·2070·6163···writes·each·pac | ||
| 0003b750:·6 | 0003b750:·6b61·6765·2074·6f20·6e65·7720·6c69·6e65··kage·to·new·line | ||
| 0003b760:· | 0003b760:·0a20·2020·2070·6163·6b61·6765·735f·746f··.····packages_to | ||
| 0003b770:· | 0003b770:·5f72·6569·6e73·7461·6c6c·3d22·2428·7270··_reinstall="$(rp | ||
| 0003b780:· | 0003b780:·6d20·2d71·6620·2466·696c·6573·5f77·6974··m·-qf·$files_wit | ||
| 0003b790:·6 | 0003b790:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b7a0:· | 0003b7a0:·207c·2074·7220·275c·6e27·2027·2027·2922···|·tr·'\n'·'·')" | ||
| 0003b7b0:· | 0003b7b0:·0a0a·2020·2020·0a20·2020·2079·756d·2072··..····.····yum·r | ||
| 0003b7c0:· | 0003b7c0:·6569·6e73·7461·6c6c·202d·7920·2470·6163··einstall·-y·$pac | ||
| 0003b7d0:·6 | 0003b7d0:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | ||
| 0003b7e0:·6 | 0003b7e0:·6c6c·0a20·2020·200a·6669·0a0a·656c·7365··ll.····.fi..else | ||
| 0003b7f0:· | 0003b7f0:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | ||
| 0003b800:·6 | 0003b800:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | ||
| 0003b810:· | 0003b810:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | ||
| 0003b820:·6 | 0003b820:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | ||
| 0003b830:· | 0003b830:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | ||
| 0003b840:· | 0003b840:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003b850:·6 | 0003b850:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003b860:· | 0003b860:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003b870:·6 | 0003b870:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003b880:·6 | 0003b880:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b890:· | 0003b890:·3539·3435·2220·7461·6269·6e64·6578·3d22··5945"·tabindex=" | ||
| 0003b8a0:· | 0003b8a0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b8b0:· | 0003b8b0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b8c0:·6 | 0003b8c0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b8d0:·7 | 0003b8d0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b8e0:· | 0003b8e0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b8f0:· | 0003b8f0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b900:· | 0003b900:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003b910:·6 | 0003b910:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b920:·6 | 0003b920:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b930:· | 0003b930:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | ||
| 0003b940:· | 0003b940:·3934·3522·3e3c·7461·626c·6520·636c·6173··945"><table·clas | ||
| 0003b950:·733 | 0003b950:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b960:· | 0003b960:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b970:· | 0003b970:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b980:· | 0003b980:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b990:· | 0003b990:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b9a0:· | 0003b9a0:·7464·3e68·6967·683c·2f74·643e·3c2f·7472··td>high</td></tr | ||
| 0003b9b0:· | 0003b9b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b9c0:·6 | 0003b9c0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 0003b9d0:· | 0003b9d0:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0003b9e0:· | 0003b9e0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b9f0:· | 0003b9f0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003ba00:· | 0003ba00:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003ba10:· | 0003ba10:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 0003ba20:· | 0003ba20:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 0003ba30:·3 | 0003ba30:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003ba40:· | 0003ba40:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | ||
| 0003ba50:· | 0003ba50:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | ||
| 0003ba60:· | 0003ba60:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | ||
| 0003ba70:· | 0003ba70:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | ||
| 0003ba80:· | 0003ba80:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | ||
| 0003ba90:· | 0003ba90:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003baa0:· | 0003baa0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003bab0:· | 0003bab0:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | ||
| 0003bac0:· | 0003bac0:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | ||
| 0003bad0:·2 | 0003bad0:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 0003bae0:· | 0003bae0:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | ||
| 0003baf0:· | 0003baf0:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | ||
| 0003bb00:· | 0003bb00:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003bb10:· | 0003bb10:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | ||
| 0003bb20:· | 0003bb20:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | ||
| 0003bb30:· | 0003bb30:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003bb40:·2 | 0003bb40:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | ||
| 0003bb50:·2d | 0003bb50:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | ||
| 0003bb60:· | 0003bb60:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | ||
| 0003bb70:· | 0003bb70:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 0003bb80:· | 0003bb80:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | ||
| 0003bb90:·6 | 0003bb90:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | ||
| 0003bba0:·6 | 0003bba0:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | ||
| 0003bbb0:·6 | 0003bbb0:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | ||
| 0003bbc0:· | 0003bbc0:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | ||
| 0003bbd0:·6 | 0003bbd0:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | ||
| 0003bbe0:·6674· | 0003bbe0:·6963·745f·7374·7261·7465·6779·0a20·202d··ict_strategy.··- | ||
| 0003bbf0:· | 0003bbf0:·2072·706d·5f76·6572·6966·795f·6861·7368···rpm_verify_hash | ||
| 0003bc00:·6 | 0003bc00:·6573·0a0a·2d20·6e61·6d65·3a20·2753·6574··es..-·name:·'Set | ||
| 0003bc10:· | 0003bc10:·2066·6163·743a·2050·6163·6b61·6765·206d···fact:·Package·m | ||
| Max diff block lines reached; 11232333/11287285 bytes (99.51%) of diff not shown. | |||
| Offset 109, 14 lines modified | Offset 109, 33 lines modified | ||
| 109 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 109 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 110 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 110 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 117 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 118 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 119 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 120 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 121 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 122 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 123 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 124 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 125 | fi | ||
| 126 | else | ||
| 127 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 128 | fi | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 121 | -·name:·Gather·the·package·facts | 134 | -·name:·Gather·the·package·facts |
| 122 | ··package_facts: | 135 | ··package_facts: |
| Offset 283, 33 lines modified | Offset 302, 14 lines modified | ||
| 283 | ··-·PCI-DSSv4-11.5.2 | 302 | ··-·PCI-DSSv4-11.5.2 |
| 284 | ··-·high_complexity | 303 | ··-·high_complexity |
| 285 | ··-·high_severity | 304 | ··-·high_severity |
| 286 | ··-·medium_disruption | 305 | ··-·medium_disruption |
| 287 | ··-·no_reboot_needed | 306 | ··-·no_reboot_needed |
| 288 | ··-·restrict_strategy | 307 | ··-·restrict_strategy |
| 289 | ··-·rpm_verify_hashes | 308 | ··-·rpm_verify_hashes |
| 290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 291 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 292 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 293 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 294 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 295 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 296 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 297 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 298 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 299 | fi | ||
| 300 | else | ||
| 301 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 302 | fi | ||
| 303 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 309 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 304 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 310 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 305 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 311 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 306 | run·the·following·command·to·determine·which·package·owns·it: | 312 | run·the·following·command·to·determine·which·package·owns·it: |
| 307 | $·rpm·-qf·FILENAME | 313 | $·rpm·-qf·FILENAME |
| 308 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 314 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 309 | $·sudo·rpm·--restore·PACKAGENAME | 315 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 328, 14 lines modified | Offset 328, 46 lines modified | ||
| 328 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 328 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 329 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 329 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 330 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 330 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 331 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 331 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 332 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 332 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 333 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 333 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 335 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 336 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 337 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 338 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 339 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 340 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 341 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 342 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 343 | declare·-A·SETPERMS_RPM_DICT | ||
| 344 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 345 | #·is·expected·by·the·RPM·database | ||
| 346 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 347 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 348 | do | ||
| 349 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 350 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 351 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 352 | done | ||
| 353 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 354 | #·correct·values | ||
| 355 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 356 | do | ||
| 357 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 358 | done | ||
| 359 | else | ||
| 360 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 361 | fi | ||
| 335 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 362 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 336 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 363 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 337 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 364 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 338 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 365 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 339 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 366 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 340 | -·name:·Gather·the·package·facts | 367 | -·name:·Gather·the·package·facts |
| 341 | ··package_facts: | 368 | ··package_facts: |
| Offset 443, 46 lines modified | Offset 475, 14 lines modified | ||
| 443 | ··-·PCI-DSSv4-11.5.2 | 475 | ··-·PCI-DSSv4-11.5.2 |
| 444 | ··-·high_complexity | 476 | ··-·high_complexity |
| 445 | ··-·high_severity | 477 | ··-·high_severity |
| 446 | ··-·medium_disruption | 478 | ··-·medium_disruption |
| 447 | ··-·no_reboot_needed | 479 | ··-·no_reboot_needed |
| 448 | ··-·restrict_strategy | 480 | ··-·restrict_strategy |
| 449 | ··-·rpm_verify_ownership | 481 | ··-·rpm_verify_ownership |
| 450 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 451 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 452 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 453 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 454 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1071712/1079423 bytes (99.29%) of diff not shown. | |||
| Offset 15009, 258 lines modified | Offset 15009, 258 lines modified | ||
| 0003aa00:·6765·743d·2223·6964·6d36·3737·3122·2074··get="#idm6771"·t | 0003aa00:·6765·743d·2223·6964·6d36·3737·3122·2074··get="#idm6771"·t | ||
| 0003aa10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003aa10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003aa20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003aa20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003aa30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003aa30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003aa40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003aa40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003aa50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003aa50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003aa60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003aa60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003aa70:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003aa80:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003aa90:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003aaa0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003aab0:·2069·643d·2269·646d·3637·3731·223e·3c74···id="idm6771"><t | |||
| 0003aac0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003aad0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003aae0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003aaf0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003a | 0003aa70:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | ||
| 0003aa80:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003aa90:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003aaa0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003aab0:·3d22·6964·6d36·3737·3122·3e3c·7072·653e··="idm6771"><pre> | |||
| 0003aac0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003aad0:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003aae0:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003aaf0:·6e20·706c·6174·666f·726d·730a·6966·2028··n·platforms.if·( | |||
| 0003ab00:·2021·2028·205b·2022·247b·636f·6e74·6169···!·(·[·"${contai | |||
| 0003ab10:·6e65·723a·2d7d·2220·3d3d·2022·6277·7261··ner:-}"·==·"bwra | |||
| 0003ab20:·702d·6f73·6275·696c·6422·205d·2029·2026··p-osbuild"·]·)·& | |||
| 0003ab30:·616d·703b·2661·6d70·3b20·7270·6d20·2d2d··amp;&·rpm·-- | |||
| 0003ab40:·7175·6965·7420·2d71·206b·6572·6e65·6c20··quiet·-q·kernel· | |||
| 0003ab50:·7c7c·2072·706d·202d·2d71·7569·6574·202d··||·rpm·--quiet·- | |||
| 0003ab60:·7120·6b65·726e·656c·2d75·656b·2029·2026··q·kernel-uek·)·& | |||
| 0003ab70:·616d·703b·2661·6d70·3b20·7b20·2120·2820··amp;&·{·!·(· | |||
| 0003ab80:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | |||
| 0003ab90:·206b·6572·6e65·6c20·3b7d·2026·616d·703b···kernel·;}·& | |||
| 0003aba0:·2661·6d70·3b20·7b20·7270·6d20·2d2d·7175··&·{·rpm·--qu | |||
| 0003abb0:·6965·7420·2d71·2072·706d·2d6f·7374·7265··iet·-q·rpm-ostre | |||
| 0003abc0:·6520·3b7d·2026·616d·703b·2661·6d70·3b20··e·;}·&&· | |||
| 0003abd0:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | |||
| 0003abe0:·2062·6f6f·7463·203b·7d20·2661·6d70·3b26···bootc·;}·&& | |||
| 0003abf0:·616d·703b·207b·2021·2072·706d·202d·2d71··amp;·{·!·rpm·--q | |||
| 0003ac00:·7569·6574·202d·7120·6f70·656e·7368·6966··uiet·-q·openshif | |||
| 0003ac10:·742d·6b75·6265·6c65·7420·3b7d·2029·3b20··t-kubelet·;}·);· | |||
| 0003ac20:·7d3b·2074·6865·6e0a·0a66·6970·732d·6d6f··};·then..fips-mo | |||
| 0003ac30:·6465·2d73·6574·7570·202d·2d65·6e61·626c··de-setup·--enabl | |||
| 0003ac40:·650a·4649·5053·5f43·4f4e·463d·222f·6574··e.FIPS_CONF="/et | |||
| 0003ac50:·632f·6472·6163·7574·2e63·6f6e·662e·642f··c/dracut.conf.d/ | |||
| 0003ac60:·3430·2d66·6970·732e·636f·6e66·220a·6966··40-fips.conf".if | |||
| 0003ac70:·2021·2067·7265·7020·225e·6164·645f·6472···!·grep·"^add_dr | |||
| 0003ac80:·6163·7574·6d6f·6475·6c65·732b·3d5c·2220··acutmodules+=\"· | |||
| 0003ac90:·6669·7073·205c·2222·2024·4649·5053·5f43··fips·\""·$FIPS_C | |||
| 0003aca0:·4f4e·463b·2074·6865·6e0a·2020·2020·6563··ONF;·then.····ec | |||
| 0003acb0:·686f·2022·6164·645f·6472·6163·7574·6d6f··ho·"add_dracutmo | |||
| 0003acc0:·6475·6c65·732b·3d5c·2220·6669·7073·205c··dules+=\"·fips·\ | |||
| 0003acd0:·2222·2026·6774·3b26·6774·3b20·2446·4950··""·>>·$FIP | |||
| 0003ace0:·535f·434f·4e46·0a66·690a·0a65·6c73·650a··S_CONF.fi..else. | |||
| 0003acf0:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | |||
| 0003ad00:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | |||
| 0003ad10:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | |||
| 0003ad20:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | |||
| 0003ad30:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | |||
| 0003ad40:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ad50:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003ad60:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003ad70:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003ad80:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | |||
| 0003ad90:·3737·3222·2074·6162·696e·6465·783d·2230··772"·tabindex="0 | |||
| 0003ada0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003adb0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003adc0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003add0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003ade0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003adf0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003ae00:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ae10:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ae20:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ae30:·6c61·7073·6522·2069·643d·2269·646d·3637··lapse"·id="idm67 | |||
| 0003ae40:·3732·223e·3c74·6162·6c65·2063·6c61·7373··72"><table·class | |||
| 0003ae50:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003ae60:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ae70:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ae80:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ae90:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003aea0:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 0003aeb0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003a | 0003aec0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003a | 0003aed0:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003ab30:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003a | 0003aee0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003aef0:·683e·3c74·643e·7472·7565·3c2f·7464·3e3c··h><td>true</td>< | |||
| 0003a | 0003af00:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003a | 0003af10:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 0003a | 0003af20:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 0003af30:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003af40:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003af50:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003af60:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003af70:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003af80:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003ab80:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003ab90:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003aba0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003abb0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003abc0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003abd0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003abe0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003abf0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003ac00:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | |||
| 0003ac10:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003a | 0003af90:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003a | 0003afa0:·4d2d·3628·6129·0a20·202d·204e·4953·542d··M-6(a).··-·NIST- | ||
| 0003a | 0003afb0:·3830·302d·3533·2d49·412d·370a·2020·2d20··800-53-IA-7.··-· | ||
| 0003a | 0003afc0:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | ||
| 0003ac60:·3228·3229·0a20·202d·204e·4953·542d·3830··2(2).··-·NIST-80 | |||
| 0003ac70:·302d·3533·2d53·432d·3132·2833·290a·2020··0-53-SC-12(3).·· | |||
| 0003ac80:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 0003ac90:·2d31·330a·2020·2d20·656e·6162·6c65·5f64··-13.··-·enable_d | |||
| 0003aca0:·7261·6375·745f·6669·7073·5f6d·6f64·756c··racut_fips_modul | |||
| 0003acb0:·650a·2020·2d20·6869·6768·5f73·6576·6572··e.··-·high_sever | |||
| 0003acc0:·6974·790a·2020·2d20·6d65·6469·756d·5f63··ity.··-·medium_c | |||
| 0003acd0:·6f6d·706c·6578·6974·790a·2020·2d20·6d65··omplexity.··-·me | |||
| 0003ace0:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | |||
| 0003acf0:·2020·2d20·7265·626f·6f74·5f72·6571·7569····-·reboot_requi | |||
| 0003ad00:·7265·640a·2020·2d20·7265·7374·7269·6374··red.··-·restrict | |||
| 0003ad10:·5f73·7472·6174·6567·790a·0a2d·206e·616d··_strategy..-·nam | |||
| 0003ad20:·653a·2043·6865·636b·2074·6f20·7365·6520··e:·Check·to·see· | |||
| 0003ad30:·7468·6520·6375·7272·656e·7420·7374·6174··the·current·stat | |||
| Max diff block lines reached; 4971856/5006108 bytes (99.32%) of diff not shown. | |||
| Offset 89, 14 lines modified | Offset 89, 27 lines modified | ||
| 89 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module | 89 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module |
| 90 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002450,·CCI-000068,·CCI-002418,·CCI-000877 | 90 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002450,·CCI-000068,·CCI-002418,·CCI-000877 |
| 91 | ············_\x8i_\x8s_\x8m······1446 | 91 | ············_\x8i_\x8s_\x8m······1446 |
| 92 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 92 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 93 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 93 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 94 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 94 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 96 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 97 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 98 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 99 | fips-mode-setup·--enable | ||
| 100 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 101 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 102 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 103 | fi | ||
| 104 | else | ||
| 105 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 106 | fi | ||
| 96 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 97 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 98 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 99 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 100 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 101 | -·name:·Gather·the·package·facts | 112 | -·name:·Gather·the·package·facts |
| 102 | ··package_facts: | 113 | ··package_facts: |
| Offset 182, 27 lines modified | Offset 195, 14 lines modified | ||
| 182 | ··-·NIST-800-53-SC-13 | 195 | ··-·NIST-800-53-SC-13 |
| 183 | ··-·enable_dracut_fips_module | 196 | ··-·enable_dracut_fips_module |
| 184 | ··-·high_severity | 197 | ··-·high_severity |
| 185 | ··-·medium_complexity | 198 | ··-·medium_complexity |
| 186 | ··-·medium_disruption | 199 | ··-·medium_disruption |
| 187 | ··-·reboot_required | 200 | ··-·reboot_required |
| 188 | ··-·restrict_strategy | 201 | ··-·restrict_strategy |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 190 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 191 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 192 | fips-mode-setup·--enable | ||
| 193 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 194 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 195 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 196 | fi | ||
| 197 | else | ||
| 198 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 199 | fi | ||
| 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 202 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 201 | To·enable·FIPS·mode,·run·the·following·command: | 203 | To·enable·FIPS·mode,·run·the·following·command: |
| 202 | fips-mode-setup·--enable | 204 | fips-mode-setup·--enable |
| 203 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: | 205 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: |
| 204 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 | 206 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 |
| 205 | ····*·Creating·/etc/system-fips | 207 | ····*·Creating·/etc/system-fips |
| Offset 251, 26 lines modified | Offset 251, 28 lines modified | ||
| 251 | $·sudo·yum·install·crypto-policies | 251 | $·sudo·yum·install·crypto-policies |
| 252 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 252 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 253 | Severity: ··medium | 253 | Severity: ··medium |
| 254 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 254 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 255 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 255 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| 256 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 256 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 257 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 257 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 258 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 259 | [[packages]] | ||
| 260 | name·=·"crypto-policies" | ||
| 261 | version·=·"*" | ||
| 258 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 262 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 259 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 263 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 260 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 264 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 261 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 265 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 262 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 266 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 263 | include·install_crypto-policies | ||
| 267 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | ||
| 268 | ····yum·install·-y·"crypto-policies" | ||
| 269 | fi | ||
| 264 | class·install_crypto-policies·{ | ||
| 265 | ··package·{·'crypto-policies': | ||
| 266 | ····ensure·=>·'installed', | ||
| 267 | ··} | ||
| 268 | } | ||
| 269 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 270 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 270 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 271 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 271 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 272 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 272 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 273 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 273 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 274 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 274 | -·name:·Ensure·crypto-policies·is·installed | 275 | -·name:·Ensure·crypto-policies·is·installed |
| 275 | ··package: | 276 | ··package: |
| Offset 279, 35 lines modified | Offset 281, 33 lines modified | ||
| 279 | ··tags: | 281 | ··tags: |
| 280 | ··-·enable_strategy | 282 | ··-·enable_strategy |
| 281 | ··-·low_complexity | 283 | ··-·low_complexity |
| 282 | ··-·low_disruption | 284 | ··-·low_disruption |
| 283 | ··-·medium_severity | 285 | ··-·medium_severity |
| 284 | ··-·no_reboot_needed | 286 | ··-·no_reboot_needed |
| 285 | ··-·package_crypto-policies_installed | 287 | ··-·package_crypto-policies_installed |
| 286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 287 | [[packages]] | ||
| 288 | name·=·"crypto-policies" | ||
| 289 | version·=·"*" | ||
| 290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 288 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 291 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 289 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 292 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 290 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 293 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 291 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 294 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 292 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 293 | package·--add=crypto-policies | ||
| 295 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | ||
| 296 | ····yum·install·-y·"crypto-policies" | ||
| 297 | fi | ||
| 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 294 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 299 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 295 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 300 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 296 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 301 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 297 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 302 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 298 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 299 | include·install_crypto-policies | ||
| 300 | class·install_crypto-policies·{ | ||
| 303 | package· | 301 | ··package·{·'crypto-policies': |
| 302 | ····ensure·=>·'installed', | ||
| 303 | ··} | ||
| 304 | } | ||
| 304 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 305 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 305 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 306 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| Max diff block lines reached; 579520/585568 bytes (98.97%) of diff not shown. | |||
| Offset 15161, 408 lines modified | Offset 15161, 408 lines modified | ||
| 0003b380:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b380:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b390:·646d·3539·3434·2220·7461·6269·6e64·6578··dm5944"·tabindex | 0003b390:·646d·3539·3434·2220·7461·6269·6e64·6578··dm5944"·tabindex | ||
| 0003b3a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b3a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b3b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b3b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b3c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b3c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b3d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b3d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b3e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b3e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b3f0:·6d65·6469·6174·696f·6e20· | 0003b3f0:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | ||
| 0003b400:· | 0003b400:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 0003b410:· | 0003b410:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b420:· | 0003b420:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b430:·6 | 0003b430:·6c61·7073·6522·2069·643d·2269·646d·3539··lapse"·id="idm59 | ||
| 0003b440:· | 0003b440:·3434·223e·3c70·7265·3e3c·636f·6465·3e23··44"><pre><code># | ||
| 0003b450:· | 0003b450:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | ||
| 0003b460:· | 0003b460:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | ||
| 0003b470:·6 | 0003b470:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | ||
| 0003b480:·6 | 0003b480:·6f72·6d73·0a69·6620·2120·2820·7b20·7270··orms.if·!·(·{·rp | ||
| 0003b490:· | 0003b490:·6d20·2d2d·7175·6965·7420·2d71·206b·6572··m·--quiet·-q·ker | ||
| 0003b4a0:· | 0003b4a0:·6e65·6c20·3b7d·2026·616d·703b·2661·6d70··nel·;}·&& | ||
| 0003b4b0:· | 0003b4b0:·3b20·7b20·7270·6d20·2d2d·7175·6965·7420··;·{·rpm·--quiet· | ||
| 0003b4c0:· | 0003b4c0:·2d71·2072·706d·2d6f·7374·7265·6520·3b7d··-q·rpm-ostree·;} | ||
| 0003b4d0:· | 0003b4d0:·2026·616d·703b·2661·6d70·3b20·7b20·7270···&&·{·rp | ||
| 0003b4e0:· | 0003b4e0:·6d20·2d2d·7175·6965·7420·2d71·2062·6f6f··m·--quiet·-q·boo | ||
| 0003b4f0:·746 | 0003b4f0:·7463·203b·7d20·2661·6d70·3b26·616d·703b··tc·;}·&& | ||
| 0003b500:· | 0003b500:·207b·2021·2072·706d·202d·2d71·7569·6574···{·!·rpm·--quiet | ||
| 0003b510:· | 0003b510:·202d·7120·6f70·656e·7368·6966·742d·6b75···-q·openshift-ku | ||
| 0003b520:· | 0003b520:·6265·6c65·7420·3b7d·2029·3b20·7468·656e··belet·;}·);·then | ||
| 0003b530:· | 0003b530:·0a0a·2320·4669·6e64·2077·6869·6368·2066··..#·Find·which·f | ||
| 0003b540:·6 | 0003b540:·696c·6573·2068·6176·6520·696e·636f·7272··iles·have·incorr | ||
| 0003b550:·6 | 0003b550:·6563·7420·6861·7368·2028·6e6f·7420·696e··ect·hash·(not·in | ||
| 0003b560:· | 0003b560:·202f·6574·632c·2062·6563·6175·7365·206f···/etc,·because·o | ||
| 0003b570:·66 | 0003b570:·6620·7468·6520·7379·7374·656d·2072·656c··f·the·system·rel | ||
| 0003b580:·6 | 0003b580:·6174·6564·2063·6f6e·6669·6720·6669·6c65··ated·config·file | ||
| 0003b590:· | 0003b590:·7329·2061·6e64·2074·6865·6e20·6765·7420··s)·and·then·get· | ||
| 0003b5a0:· | 0003b5a0:·6669·6c65·7320·6e61·6d65·730a·6669·6c65··files·names.file | ||
| 0003b5b0:· | 0003b5b0:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003b5c0:·5 | 0003b5c0:·5f68·6173·683d·2224·2872·706d·202d·5661··_hash="$(rpm·-Va | ||
| 0003b5d0:· | 0003b5d0:·202d·2d6e·6f63·6f6e·6669·6720·7c20·6772···--noconfig·|·gr | ||
| 0003b5e0:· | 0003b5e0:·6570·202d·4520·275e·2e2e·3527·207c·2061··ep·-E·'^..5'·|·a | ||
| 0003b5f0:· | 0003b5f0:·776b·2027·7b70·7269·6e74·2024·4e46·7d27··wk·'{print·$NF}' | ||
| 0003b600:· | 0003b600:·2029·220a·0a69·6620·5b20·2d6e·2022·2466···)"..if·[·-n·"$f | ||
| 0003b610:· | 0003b610:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003b620:· | 0003b620:·6563·745f·6861·7368·2220·5d3b·2074·6865··ect_hash"·];·the | ||
| 0003b630:· | 0003b630:·6e0a·2020·2020·2320·4672·6f6d·2066·696c··n.····#·From·fil | ||
| 0003b640:· | 0003b640:·6573·206e·616d·6573·2067·6574·2070·6163··es·names·get·pac | ||
| 0003b650:· | 0003b650:·6b61·6765·206e·616d·6573·2061·6e64·2063··kage·names·and·c | ||
| 0003b660:· | 0003b660:·6861·6e67·6520·6e65·776c·696e·6520·746f··hange·newline·to | ||
| 0003b670:·2 | 0003b670:·2073·7061·6365·2c20·6265·6361·7573·6520···space,·because· | ||
| 0003b680:· | 0003b680:·7270·6d20·7772·6974·6573·2065·6163·6820··rpm·writes·each· | ||
| 0003b690:· | 0003b690:·7061·636b·6167·6520·746f·206e·6577·206c··package·to·new·l | ||
| 0003b6a0:·6 | 0003b6a0:·696e·650a·2020·2020·7061·636b·6167·6573··ine.····packages | ||
| 0003b6b0:· | 0003b6b0:·5f74·6f5f·7265·696e·7374·616c·6c3d·2224··_to_reinstall="$ | ||
| 0003b6c0:· | 0003b6c0:·2872·706d·202d·7166·2024·6669·6c65·735f··(rpm·-qf·$files_ | ||
| 0003b6d0:·7 | 0003b6d0:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003b6e0:· | 0003b6e0:·6173·6820·7c20·7472·2027·5c6e·2720·2720··ash·|·tr·'\n'·'· | ||
| 0003b6f0:·2 | 0003b6f0:·2729·220a·0a20·2020·200a·2020·2020·7975··')"..····.····yu | ||
| 0003b700:· | 0003b700:·6d20·7265·696e·7374·616c·6c20·2d79·2024··m·reinstall·-y·$ | ||
| 0003b710:· | 0003b710:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | ||
| 0003b720:· | 0003b720:·7374·616c·6c0a·2020·2020·0a66·690a·0a65··stall.····.fi..e | ||
| 0003b730:·6c | 0003b730:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | ||
| 0003b740:· | 0003b740:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | ||
| 0003b750:· | 0003b750:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | ||
| 0003b760:· | 0003b760:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | ||
| 0003b770:· | 0003b770:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | ||
| 0003b780:·6 | 0003b780:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0003b790:· | 0003b790:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003b7a0:·6 | 0003b7a0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003b7b0:· | 0003b7b0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0003b7c0:·2220·6 | 0003b7c0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b7d0:· | 0003b7d0:·6964·6d35·3934·3522·2074·6162·696e·6465··idm5945"·tabinde | ||
| 0003b7e0:· | 0003b7e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b7f0:·6 | 0003b7f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b800:·6 | 0003b800:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b810:· | 0003b810:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b820:· | 0003b820:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b830:· | 0003b830:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003b840:· | 0003b840:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003b850:· | 0003b850:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b860:· | 0003b860:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b870:· | 0003b870:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b880:· | 0003b880:·646d·3539·3435·223e·3c74·6162·6c65·2063··dm5945"><table·c | ||
| 0003b890:· | 0003b890:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b8a0:· | 0003b8a0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b8b0:· | 0003b8b0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b8c0:· | 0003b8c0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003b8d0:· | 0003b8d0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003b8e0:· | 0003b8e0:·683e·3c74·643e·6869·6768·3c2f·7464·3e3c··h><td>high</td>< | ||
| 0003b8f0:·2 | 0003b8f0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b900:· | 0003b900:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b910:· | 0003b910:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | ||
| 0003b920:· | 0003b920:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b930:·2 | 0003b930:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b940:· | 0003b940:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b950:· | 0003b950:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b960:·3 | 0003b960:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003b970:· | 0003b970:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003b980:· | 0003b980:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | ||
| 0003b990:· | 0003b990:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | ||
| 0003b9a0:· | 0003b9a0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | ||
| 0003b9b0:· | 0003b9b0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | ||
| 0003b9c0:· | 0003b9c0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | ||
| 0003b9d0:· | 0003b9d0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | ||
| 0003b9e0:· | 0003b9e0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003b9f0:· | 0003b9f0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | ||
| 0003ba00:· | 0003ba00:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | ||
| 0003ba10:· | 0003ba10:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | ||
| 0003ba20:· | 0003ba20:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | ||
| 0003ba30:· | 0003ba30:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | ||
| 0003ba40:·2 | 0003ba40:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003ba50:· | 0003ba50:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | ||
| 0003ba60:· | 0003ba60:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | ||
| 0003ba70:· | 0003ba70:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003ba80:· | 0003ba80:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | ||
| 0003ba90:· | 0003ba90:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | ||
| 0003baa0:· | 0003baa0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | ||
| 0003bab0:· | 0003bab0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | ||
| 0003bac0:· | 0003bac0:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | ||
| 0003bad0:·6 | 0003bad0:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | ||
| 0003bae0:· | 0003bae0:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | ||
| 0003baf0:·202 | 0003baf0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | ||
| 0003bb00:· | 0003bb00:·7469·6f6e·0a20·202d·206e·6f5f·7265·626f··tion.··-·no_rebo | ||
| 0003bb10:·6 | 0003bb10:·6f74·5f6e·6565·6465·640a·2020·2d20·7265··ot_needed.··-·re | ||
| 0003bb20:·73 | 0003bb20:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | ||
| 0003bb30:· | 0003bb30:·2020·2d20·7270·6d5f·7665·7269·6679·5f68····-·rpm_verify_h | ||
| 0003bb40:· | 0003bb40:·6173·6865·730a·0a2d·206e·616d·653a·2027··ashes..-·name:·' | ||
| 0003bb50:· | 0003bb50:·5365·7420·6661·6374·3a20·5061·636b·6167··Set·fact:·Packag | ||
| Max diff block lines reached; 16251045/16305997 bytes (99.66%) of diff not shown. | |||
| Offset 15091, 408 lines modified | Offset 15091, 408 lines modified | ||
| 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003af30:·2223·6964·6d35·3934·3422·2074·6162·696e··"#idm5944"·tabin | 0003af30:·2223·6964·6d35·3934·3422·2074·6162·696e··"#idm5944"·tabin | ||
| 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003af90:·3e52·656d·6564·6961·7469·6f6e·20 | 0003af90:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003afa0:·6 | 0003afa0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003afb0:·3 | 0003afb0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003afc0:· | 0003afc0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003afd0:· | 0003afd0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003afe0:· | 0003afe0:·6d35·3934·3422·3e3c·7072·653e·3c63·6f64··m5944"><pre><cod | ||
| 0003aff0:· | 0003aff0:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003b000:·6 | 0003b000:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003b010:·6 | 0003b010:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003b020:· | 0003b020:·6174·666f·726d·730a·6966·2021·2028·207b··atforms.if·!·(·{ | ||
| 0003b030:· | 0003b030:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b040:· | 0003b040:·6b65·726e·656c·203b·7d20·2661·6d70·3b26··kernel·;}·&& | ||
| 0003b050:· | 0003b050:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003b060:·7 | 0003b060:·6574·202d·7120·7270·6d2d·6f73·7472·6565··et·-q·rpm-ostree | ||
| 0003b070:· | 0003b070:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b080:· | 0003b080:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b090:· | 0003b090:·626f·6f74·6320·3b7d·2026·616d·703b·2661··bootc·;}·&&a | ||
| 0003b0a0:· | 0003b0a0:·6d70·3b20·7b20·2120·7270·6d20·2d2d·7175··mp;·{·!·rpm·--qu | ||
| 0003b0b0:· | 0003b0b0:·6965·7420·2d71·206f·7065·6e73·6869·6674··iet·-q·openshift | ||
| 0003b0c0:· | 0003b0c0:·2d6b·7562·656c·6574·203b·7d20·293b·2074··-kubelet·;}·);·t | ||
| 0003b0d0:· | 0003b0d0:·6865·6e0a·0a23·2046·696e·6420·7768·6963··hen..#·Find·whic | ||
| 0003b0e0:·6 | 0003b0e0:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | ||
| 0003b0f0:· | 0003b0f0:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | ||
| 0003b100:· | 0003b100:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | ||
| 0003b110:·6 | 0003b110:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | ||
| 0003b120:· | 0003b120:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | ||
| 0003b130:·6 | 0003b130:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | ||
| 0003b140:· | 0003b140:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | ||
| 0003b150:· | 0003b150:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003b160:· | 0003b160:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | ||
| 0003b170:· | 0003b170:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | ||
| 0003b180:·2 | 0003b180:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | ||
| 0003b190:· | 0003b190:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | ||
| 0003b1a0:· | 0003b1a0:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | ||
| 0003b1b0:·2 | 0003b1b0:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | ||
| 0003b1c0:· | 0003b1c0:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | ||
| 0003b1d0:· | 0003b1d0:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | ||
| 0003b1e0:· | 0003b1e0:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | ||
| 0003b1f0:· | 0003b1f0:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | ||
| 0003b200:· | 0003b200:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | ||
| 0003b210:·2 | 0003b210:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | ||
| 0003b220:· | 0003b220:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | ||
| 0003b230:·6 | 0003b230:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | ||
| 0003b240:· | 0003b240:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | ||
| 0003b250:· | 0003b250:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003b260:· | 0003b260:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | ||
| 0003b270:·6 | 0003b270:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003b280:·7 | 0003b280:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | ||
| 0003b290:· | 0003b290:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | ||
| 0003b2a0:· | 0003b2a0:·2079·756d·2072·6569·6e73·7461·6c6c·202d···yum·reinstall·- | ||
| 0003b2b0:· | 0003b2b0:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | ||
| 0003b2c0:·6 | 0003b2c0:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | ||
| 0003b2d0:· | 0003b2d0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | ||
| 0003b2e0:· | 0003b2e0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | ||
| 0003b2f0:·6 | 0003b2f0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | ||
| 0003b300:· | 0003b300:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | ||
| 0003b310:·6 | 0003b310:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | ||
| 0003b320:· | 0003b320:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003b330:· | 0003b330:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b340:· | 0003b340:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b350:· | 0003b350:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003b360:·7 | 0003b360:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b370:· | 0003b370:·3d22·2369·646d·3539·3435·2220·7461·6269··="#idm5945"·tabi | ||
| 0003b380:· | 0003b380:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b390:· | 0003b390:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b3a0:· | 0003b3a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b3b0:· | 0003b3b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b3c0:· | 0003b3c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b3d0:· | 0003b3d0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b3e0:· | 0003b3e0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003b3f0:· | 0003b3f0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003b400:· | 0003b400:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003b410:· | 0003b410:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b420:· | 0003b420:·3d22·6964·6d35·3934·3522·3e3c·7461·626c··="idm5945"><tabl | ||
| 0003b430:· | 0003b430:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003b440:· | 0003b440:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003b450:· | 0003b450:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003b460:· | 0003b460:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003b470:·3 | 0003b470:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003b480:· | 0003b480:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003b490:· | 0003b490:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b4a0:· | 0003b4a0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b4b0:· | 0003b4b0:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003b4c0:· | 0003b4c0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b4d0:· | 0003b4d0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b4e0:·3 | 0003b4e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b4f0:· | 0003b4f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003b500:· | 0003b500:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003b510:· | 0003b510:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b520:· | 0003b520:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003b530:·20 | 0003b530:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003b540:·6 | 0003b540:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003b550:·65 | 0003b550:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003b560:· | 0003b560:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003b570:·6 | 0003b570:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003b580:· | 0003b580:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003b590:· | 0003b590:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003b5a0:· | 0003b5a0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003b5b0:· | 0003b5b0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003b5c0:· | 0003b5c0:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003b5d0:·20 | 0003b5d0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003b5e0:· | 0003b5e0:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003b5f0:· | 0003b5f0:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003b600:· | 0003b600:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003b610:· | 0003b610:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003b620:· | 0003b620:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003b630:· | 0003b630:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003b640:· | 0003b640:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003b650:· | 0003b650:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003b660:· | 0003b660:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003b670:· | 0003b670:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003b680:· | 0003b680:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003b690:· | 0003b690:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003b6a0:· | 0003b6a0:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003b6b0:·6 | 0003b6b0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003b6c0:· | 0003b6c0:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003b6d0:· | 0003b6d0:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003b6e0:·7 | 0003b6e0:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| 0003b6f0:· | 0003b6f0:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| Max diff block lines reached; 9446850/9501802 bytes (99.42%) of diff not shown. | |||
| Offset 93, 14 lines modified | Offset 93, 33 lines modified | ||
| 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 101 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 102 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 103 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 104 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 105 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 106 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 107 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 108 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 109 | fi | ||
| 110 | else | ||
| 111 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 112 | fi | ||
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 101 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 102 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 103 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 104 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 105 | -·name:·Gather·the·package·facts | 118 | -·name:·Gather·the·package·facts |
| 106 | ··package_facts: | 119 | ··package_facts: |
| Offset 267, 33 lines modified | Offset 286, 14 lines modified | ||
| 267 | ··-·PCI-DSSv4-11.5.2 | 286 | ··-·PCI-DSSv4-11.5.2 |
| 268 | ··-·high_complexity | 287 | ··-·high_complexity |
| 269 | ··-·high_severity | 288 | ··-·high_severity |
| 270 | ··-·medium_disruption | 289 | ··-·medium_disruption |
| 271 | ··-·no_reboot_needed | 290 | ··-·no_reboot_needed |
| 272 | ··-·restrict_strategy | 291 | ··-·restrict_strategy |
| 273 | ··-·rpm_verify_hashes | 292 | ··-·rpm_verify_hashes |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 276 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 277 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 278 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 279 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 280 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 281 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 282 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 283 | fi | ||
| 284 | else | ||
| 285 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 286 | fi | ||
| 287 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 288 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 294 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 289 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 295 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 290 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 296 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 291 | $·rpm·-qf·FILENAME | 297 | $·rpm·-qf·FILENAME |
| 292 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 298 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 314, 14 lines modified | Offset 314, 50 lines modified | ||
| 314 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 314 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 315 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 315 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 316 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 316 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 317 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 317 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 318 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 318 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 320 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 320 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 327 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 328 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 329 | declare·-A·SETPERMS_RPM_DICT | ||
| 330 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 331 | #·is·expected·by·the·RPM·database | ||
| 332 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 333 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 334 | do | ||
| 335 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 336 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 337 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 338 | ········do | ||
| 339 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 340 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 341 | ········done | ||
| 342 | done | ||
| 343 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 344 | #·correct·values | ||
| 345 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 346 | do | ||
| 347 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 348 | done | ||
| 349 | else | ||
| 350 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 351 | fi | ||
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 353 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 354 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 355 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 356 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 326 | -·name:·Gather·the·package·facts | 357 | -·name:·Gather·the·package·facts |
| 327 | ··package_facts: | 358 | ··package_facts: |
| Offset 433, 50 lines modified | Offset 469, 14 lines modified | ||
| 433 | ··-·PCI-DSSv4-11.5.2 | 469 | ··-·PCI-DSSv4-11.5.2 |
| 434 | ··-·high_complexity | 470 | ··-·high_complexity |
| 435 | ··-·high_severity | 471 | ··-·high_severity |
| 436 | ··-·medium_disruption | 472 | ··-·medium_disruption |
| 437 | ··-·no_reboot_needed | 473 | ··-·no_reboot_needed |
| 438 | ··-·restrict_strategy | 474 | ··-·restrict_strategy |
| 439 | ··-·rpm_verify_permissions | 475 | ··-·rpm_verify_permissions |
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 766775/774857 bytes (98.96%) of diff not shown. | |||
| Offset 15067, 218 lines modified | Offset 15067, 218 lines modified | ||
| 0003ada0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003ada0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003adb0:·6d36·3237·3922·2074·6162·696e·6465·783d··m6279"·tabindex= | 0003adb0:·6d36·3237·3922·2074·6162·696e·6465·783d··m6279"·tabindex= | ||
| 0003adc0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003adc0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003add0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003add0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003ade0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003ade0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003adf0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003adf0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003ae00:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003ae00:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003ae10:·6564·6961·7469·6f6e·20 | 0003ae10:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003ae20:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003ae30:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ae40:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ae50:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ae60:·6522·2069·643d·2269·646d·3632·3739·223e··e"·id="idm6279"> | |||
| 0003ae70:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003ae80:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003ae90:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003aea0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003aeb0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003aec0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003aed0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003aee0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003aef0:·6172·6765·743d·2223·6964·6d36·3238·3022··arget="#idm6280" | |||
| 0003af00:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003af10:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003af20:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003af30:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003af40:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003af50:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003af60:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003ae20:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ae30:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ae40:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ae50:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003ae60:·3237·3922·3e3c·7461·626c·6520·636c·6173··279"><table·clas | |||
| 0003ae70:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003ae80:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003ae90:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003aea0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003aeb0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003aec0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003aed0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003aee0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003aef0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003af00:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003af10:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003af20:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003af30:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003af40:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003af50:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003af60:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003af70:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003af80:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003af90:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003afa0:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003afb0:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003afc0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003afd0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003afe0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003aff0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b000:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b010:·3d22·2369·646d·3632·3830·2220·7461·6269··="#idm6280"·tabi | |||
| 0003b020:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b030:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b040:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b050:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b060:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b070:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b080:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003 | 0003af70:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003 | 0003af80:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003 | 0003af90:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003 | 0003afa0:·6964·3d22·6964·6d36·3238·3022·3e3c·7461··id="idm6280"><ta | ||
| 0003b0 | 0003afb0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003 | 0003afc0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003 | 0003afd0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003 | 0003afe0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003 | 0003aff0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b | 0003b000:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003b | 0003b010:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b020:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003b | 0003b030:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b | 0003b040:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003b | 0003b050:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003b | 0003b060:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b070:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b | 0003b080:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | ||
| 0003b | 0003b090:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b1c0:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003b1d0:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003b1e0:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003b1f0:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003b200:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003b210:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b220:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b230:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b240:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b250:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b260:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b270:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b280:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b290:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b2a0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b2b0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b2c0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b2d0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b2e0:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003b2f0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b300:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b310:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b320:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b | 0003b0a0:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 0003b0b0:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 0003b0c0:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 0003b0d0:·2070·6c61·7466·6f72·6d73·0a69·6620·7270···platforms.if·rp | |||
| 0003b0e0:·6d20·2d2d·7175·6965·7420·2d71·206b·6572··m·--quiet·-q·ker | |||
| 0003b0f0:·6e65·6c20·7c7c·2072·706d·202d·2d71·7569··nel·||·rpm·--qui | |||
| 0003b100:·6574·202d·7120·6b65·726e·656c·2d75·656b··et·-q·kernel-uek | |||
| 0003b110:·3b20·7468·656e·0a0a·6966·2021·2072·706d··;·then..if·!·rpm | |||
| 0003b120:·202d·7120·2d2d·7175·6965·7420·2261·6964···-q·--quiet·"aid | |||
| 0003b130:·6522·203b·2074·6865·6e0a·2020·2020·7975··e"·;·then.····yu | |||
| 0003b140:·6d20·696e·7374·616c·6c20·2d79·2022·6169··m·install·-y·"ai | |||
| 0003b150:·6465·220a·6669·0a0a·656c·7365·0a20·2020··de".fi..else.··· | |||
| 0003b160:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 0003b170:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | |||
| 0003b180:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 0003b190:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 0003b1a0:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | |||
| Max diff block lines reached; 31588845/31617577 bytes (99.91%) of diff not shown. | |||
| Offset 15085, 217 lines modified | Offset 15085, 217 lines modified | ||
| 0003aec0:·2d74·6172·6765·743d·2223·6964·6d36·3237··-target="#idm627 | 0003aec0:·2d74·6172·6765·743d·2223·6964·6d36·3237··-target="#idm627 | ||
| 0003aed0:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | 0003aed0:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | ||
| 0003aee0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003aee0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003aef0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003aef0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003af00:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003af00:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003af10:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003af10:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003af20:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003af20:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003af30:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003af40:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003af50:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003af60:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003af70:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003af80:·643d·2269·646d·3632·3739·223e·3c70·7265··d="idm6279"><pre | |||
| 0003af90:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003afa0:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003afb0:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003afc0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003afd0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003afe0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003aff0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b000:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b010:·743d·2223·6964·6d36·3238·3022·2074·6162··t="#idm6280"·tab | |||
| 0003b020:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b030:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b040:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b050:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b060:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b070:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003b080:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003af30:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003af40:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003af50:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003af60:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003af70:·7365·2220·6964·3d22·6964·6d36·3237·3922··se"·id="idm6279" | |||
| 0003af80:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003af90:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003afa0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003afb0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003afc0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003afd0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003afe0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003aff0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b000:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b010:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b020:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b030:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b040:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b050:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b060:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b070:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b080:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b090:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003b0a0:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b0b0:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b0c0:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b0d0:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003b0e0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b0f0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b100:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b110:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b120:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b130:·646d·3632·3830·2220·7461·6269·6e64·6578··dm6280"·tabindex | |||
| 0003b140:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b150:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b160:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b170:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b180:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b190:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003b1a0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b | 0003b090:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003b | 0003b0a0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003b | 0003b0b0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003b | 0003b0c0:·6964·6d36·3238·3022·3e3c·7461·626c·6520··idm6280"><table· | ||
| 0003b | 0003b0d0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003b | 0003b0e0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003b | 0003b0f0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003b | 0003b100:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003b | 0003b110:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003b24 | 0003b120:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b130:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b | 0003b140:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003b150:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b | 0003b160:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b | 0003b170:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b | 0003b180:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b | 0003b190:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003b | 0003b1a0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003b | 0003b1b0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003b2e0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003b2f0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003b300:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003b310:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003b320:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003b330:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b340:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b350:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b360:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b370:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b380:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b390:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b3a0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b3b0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b3c0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b | 0003b1c0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | ||
| 0003b1d0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003b1e0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003b1f0:·7466·6f72·6d73·0a69·6620·7270·6d20·2d2d··tforms.if·rpm·-- | |||
| 0003b200:·7175·6965·7420·2d71·206b·6572·6e65·6c20··quiet·-q·kernel· | |||
| 0003b210:·7c7c·2072·706d·202d·2d71·7569·6574·202d··||·rpm·--quiet·- | |||
| 0003b220:·7120·6b65·726e·656c·2d75·656b·3b20·7468··q·kernel-uek;·th | |||
| 0003b230:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 0003b240:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 0003b250:·2074·6865·6e0a·2020·2020·7975·6d20·696e···then.····yum·in | |||
| 0003b260:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b270:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | |||
| 0003b280:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 0003b290:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 0003b2a0:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 0003b2b0:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 0003b2c0:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003b2d0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b2e0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b2f0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b300:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b310:·6574·3d22·2369·646d·3632·3831·2220·7461··et="#idm6281"·ta | |||
| 0003b320:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b330:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| Max diff block lines reached; 31532246/31560840 bytes (99.91%) of diff not shown. | |||
| Offset 15092, 133 lines modified | Offset 15092, 133 lines modified | ||
| 0003af30:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | 0003af30:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | ||
| 0003af40:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | 0003af40:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | ||
| 0003af50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003af50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003af60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003af60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003af70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003af70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003af80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003af80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003af90:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003af90:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003afa0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003afb0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003afc0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003afd0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003afe0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003aff0:·6964·3d22·6964·6d31·3038·3922·3e3c·7072··id="idm1089"><pr | |||
| 0003b000:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b010:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b020:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003afa0:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003afb0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003afc0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003afd0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003afe0:·7073·6522·2069·643d·2269·646d·3130·3839··pse"·id="idm1089 | |||
| 0003aff0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b000:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b010:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b020:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b030:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b040:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b050:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b060:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b070:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b080:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b090:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b0a0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b0b0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b0c0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b0d0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b0e0:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003b0f0:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003b100:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b110:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b120:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b130:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b140:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003b150:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b160:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b170:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b180:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b190:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b1a0:·6964·6d31·3039·3022·2074·6162·696e·6465··idm1090"·tabinde | |||
| 0003b1b0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b1c0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b1d0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b1e0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b1f0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b200:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b210:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b220:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b230:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b240:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b250:·646d·3130·3930·223e·3c74·6162·6c65·2063··dm1090"><table·c | |||
| 0003b260:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b270:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b280:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b290:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b2a0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b2b0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b2c0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b2d0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b2e0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b2f0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b300:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b310:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b320:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b330:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b340:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b350:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b360:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b370:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b380:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b390:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003b3a0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b3b0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b3c0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b3d0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b3e0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b3f0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b400:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b410:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b420:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b430:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b440:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b450:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b460:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003b470:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b480:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b490:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b4a0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b4b0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b4c0:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003b4d0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b4e0:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003b4f0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b500:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003b510:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b520:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b530:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b540:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b550:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b560:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b570:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b580:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b590:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b5a0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b5b0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b | 0003b030:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | ||
| 0003b | 0003b040:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003b | 0003b050:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003b | 0003b060:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003b | 0003b070:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003b | 0003b080:·6574·3d22·2369·646d·3130·3930·2220·7461··et="#idm1090"·ta | ||
| 0003b | 0003b090:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b | 0003b0a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b | 0003b0b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b | 0003b0c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b | 0003b0d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b | 0003b0e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b0f0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| Max diff block lines reached; 2773365/2790367 bytes (99.39%) of diff not shown. | |||
| Offset 120, 26 lines modified | Offset 120, 19 lines modified | ||
| 120 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 120 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | include·install_aide | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 133 | class·install_aide·{ | ||
| 134 | ··package·{·'aide': | ||
| 135 | ····ensure·=>·'installed', | ||
| 136 | ··} | ||
| 137 | } | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 143 | -·name:·Gather·the·package·facts | 136 | -·name:·Gather·the·package·facts |
| 144 | ··package_facts: | 137 | ··package_facts: |
| Offset 168, 19 lines modified | Offset 161, 26 lines modified | ||
| 168 | ··-·PCI-DSSv4-11.5.2 | 161 | ··-·PCI-DSSv4-11.5.2 |
| 169 | ··-·enable_strategy | 162 | ··-·enable_strategy |
| 170 | ··-·low_complexity | 163 | ··-·low_complexity |
| 171 | ··-·low_disruption | 164 | ··-·low_disruption |
| 172 | ··-·medium_severity | 165 | ··-·medium_severity |
| 173 | ··-·no_reboot_needed | 166 | ··-·no_reboot_needed |
| 174 | ··-·package_aide_installed | 167 | ··-·package_aide_installed |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | include·install_aide | ||
| 176 | [[packages]] | ||
| 177 | name·=·"aide" | ||
| 178 | 174 | class·install_aide·{ | |
| 175 | ··package·{·'aide': | ||
| 176 | ····ensure·=>·'installed', | ||
| 177 | ··} | ||
| 178 | } | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 180 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 181 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 181 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 182 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 182 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 183 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 183 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 184 | crontab: | 184 | crontab: |
| 185 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 185 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 393, 14 lines modified | Offset 393, 33 lines modified | ||
| 393 | ············_\x8i_\x8s_\x8m······1446 | 393 | ············_\x8i_\x8s_\x8m······1446 |
| 394 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 394 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 395 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 395 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 396 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 396 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 397 | ·····················FCS_TLSC_EXT.1 | 397 | ·····················FCS_TLSC_EXT.1 |
| 398 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 398 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 399 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 399 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 400 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 401 | var_system_crypto_policy='DEFAULT' | ||
| 402 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 403 | rc=$? | ||
| 404 | if·test·"$rc"·=·127;·then | ||
| 405 | » echo·"$stderr_of_call"·>&2 | ||
| 406 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 407 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 408 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 409 | » false··#·end·with·an·error·code | ||
| 410 | elif·test·"$rc"·!=·0;·then | ||
| 411 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 412 | » false··#·end·with·an·error·code | ||
| 413 | fi | ||
| 400 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 414 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 401 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 415 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 402 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 416 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 403 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 417 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 404 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 418 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 405 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 419 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 406 | ··set_fact: | 420 | ··set_fact: |
| Offset 445, 33 lines modified | Offset 464, 14 lines modified | ||
| 445 | ··-·PCI-DSSv4-2.2.7 | 464 | ··-·PCI-DSSv4-2.2.7 |
| 446 | ··-·configure_crypto_policy | 465 | ··-·configure_crypto_policy |
| 447 | ··-·high_severity | 466 | ··-·high_severity |
| 448 | ··-·low_complexity | 467 | ··-·low_complexity |
| 449 | ··-·low_disruption | 468 | ··-·low_disruption |
| 450 | ··-·no_reboot_needed | 469 | ··-·no_reboot_needed |
| 451 | ··-·restrict_strategy | 470 | ··-·restrict_strategy |
| 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 453 | var_system_crypto_policy='DEFAULT' | ||
| 454 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 455 | rc=$? | ||
| 456 | if·test·"$rc"·=·127;·then | ||
| 457 | » echo·"$stderr_of_call"·>&2 | ||
| 458 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 459 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 460 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 461 | » false··#·end·with·an·error·code | ||
| 462 | elif·test·"$rc"·!=·0;·then | ||
| 463 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 464 | » false··#·end·with·an·error·code | ||
| 465 | fi | ||
| 466 | Group ·Updating·Software· Group·contains·1·rule | 471 | Group ·Updating·Software· Group·contains·1·rule |
| 467 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·dnf·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also | 472 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·dnf·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also |
| 468 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called | 473 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called |
| 469 | S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. | 474 | S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. |
| 470 | OpenEmbedded·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records | 475 | OpenEmbedded·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records |
| 471 | metadata·of·installed·packages.·Consistently·using·dnf·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all | 476 | metadata·of·installed·packages.·Consistently·using·dnf·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all |
| Offset 676, 14 lines modified | Offset 676, 20 lines modified | ||
| Max diff block lines reached; 313651/319078 bytes (98.30%) of diff not shown. | |||
| Offset 15087, 133 lines modified | Offset 15087, 133 lines modified | ||
| 0003aee0:·2d74·6172·6765·743d·2223·6964·6d31·3038··-target="#idm108 | 0003aee0:·2d74·6172·6765·743d·2223·6964·6d31·3038··-target="#idm108 | ||
| 0003aef0:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | 0003aef0:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | ||
| 0003af00:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003af00:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003af10:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003af10:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003af20:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003af20:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003af30:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003af30:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003af40:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003af40:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003af50:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003af60:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003af70:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003af80:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003af90:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003afa0:·643d·2269·646d·3130·3839·223e·3c70·7265··d="idm1089"><pre | |||
| 0003afb0:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003afc0:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003afd0:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003af50:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003af60:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003af70:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003af80:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003af90:·7365·2220·6964·3d22·6964·6d31·3038·3922··se"·id="idm1089" | |||
| 0003afa0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003afb0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003afc0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003afd0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003afe0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003aff0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b000:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b010:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b020:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b030:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b040:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b050:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b060:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b070:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b080:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b090:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b0a0:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b0b0:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003b0c0:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b0d0:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b0e0:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b0f0:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003b100:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b110:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b120:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b130:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b140:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b150:·646d·3130·3930·2220·7461·6269·6e64·6578··dm1090"·tabindex | |||
| 0003b160:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b170:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b180:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b190:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b1a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b1b0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003b1c0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b1d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b1e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b1f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b200:·6d31·3039·3022·3e3c·7461·626c·6520·636c··m1090"><table·cl | |||
| 0003b210:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b220:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b230:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b240:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b250:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b260:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b270:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b280:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b290:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b2a0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b2b0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b2c0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b2d0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b2e0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b2f0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b300:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003b310:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003b320:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003b330:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003b340:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003b350:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b360:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b370:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b380:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b390:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b3a0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b3b0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b3c0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b3d0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b3e0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b3f0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b400:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b410:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003b420:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b430:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b440:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b450:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b460:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b470:·656e·3a20·2722·6b65·726e·656c·2220·696e··en:·'"kernel"·in | |||
| 0003b480:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003b490:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003b4a0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b4b0:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b4c0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b4d0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b4e0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b4f0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b500:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b510:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b520:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b530:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b540:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b550:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b560:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003 | 0003afe0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 0003 | 0003aff0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 0003b | 0003b000:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 0003b | 0003b010:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 0003b | 0003b020:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b | 0003b030:·743d·2223·6964·6d31·3039·3022·2074·6162··t="#idm1090"·tab | ||
| 0003b | 0003b040:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b | 0003b050:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b | 0003b060:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b | 0003b070:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b | 0003b080:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b | 0003b090:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003b0a0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| Max diff block lines reached; 2715349/2732351 bytes (99.38%) of diff not shown. | |||
| Offset 118, 26 lines modified | Offset 118, 19 lines modified | ||
| 118 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 118 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | include·install_aide | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 131 | class·install_aide·{ | ||
| 132 | ··package·{·'aide': | ||
| 133 | ····ensure·=>·'installed', | ||
| 134 | ··} | ||
| 135 | } | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 141 | -·name:·Gather·the·package·facts | 134 | -·name:·Gather·the·package·facts |
| 142 | ··package_facts: | 135 | ··package_facts: |
| Offset 166, 19 lines modified | Offset 159, 26 lines modified | ||
| 166 | ··-·PCI-DSSv4-11.5.2 | 159 | ··-·PCI-DSSv4-11.5.2 |
| 167 | ··-·enable_strategy | 160 | ··-·enable_strategy |
| 168 | ··-·low_complexity | 161 | ··-·low_complexity |
| 169 | ··-·low_disruption | 162 | ··-·low_disruption |
| 170 | ··-·medium_severity | 163 | ··-·medium_severity |
| 171 | ··-·no_reboot_needed | 164 | ··-·no_reboot_needed |
| 172 | ··-·package_aide_installed | 165 | ··-·package_aide_installed |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | include·install_aide | ||
| 174 | [[packages]] | ||
| 175 | name·=·"aide" | ||
| 176 | 172 | class·install_aide·{ | |
| 173 | ··package·{·'aide': | ||
| 174 | ····ensure·=>·'installed', | ||
| 175 | ··} | ||
| 176 | } | ||
| 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 178 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 178 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 179 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 179 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 180 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 180 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 181 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 181 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 182 | crontab: | 182 | crontab: |
| 183 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 183 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 549, 14 lines modified | Offset 549, 20 lines modified | ||
| 549 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the | 549 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the |
| 550 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent | 550 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent |
| 551 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, | 551 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, |
| 552 | ···········standards,·and·guidance. | 552 | ···········standards,·and·guidance. |
| 553 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. | 553 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. |
| 554 | Severity: ·medium | 554 | Severity: ·medium |
| 555 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue | 555 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue |
| 556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 557 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 558 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 559 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 560 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 561 | chgrp·0·/etc/issue | ||
| 556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 562 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 557 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 563 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 558 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 564 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 559 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 565 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 560 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 566 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 561 | -·name:·Test·for·existence·/etc/issue | 567 | -·name:·Test·for·existence·/etc/issue |
| 562 | ··stat: | 568 | ··stat: |
| Offset 578, 30 lines modified | Offset 584, 30 lines modified | ||
| 578 | ··tags: | 584 | ··tags: |
| 579 | ··-·configure_strategy | 585 | ··-·configure_strategy |
| 580 | ··-·file_groupowner_etc_issue | 586 | ··-·file_groupowner_etc_issue |
| 581 | ··-·low_complexity | 587 | ··-·low_complexity |
| 582 | ··-·low_disruption | 588 | ··-·low_disruption |
| 583 | ··-·medium_severity | 589 | ··-·medium_severity |
| 584 | ··-·no_reboot_needed | 590 | ··-·no_reboot_needed |
| 585 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 586 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 587 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 588 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 589 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 590 | chgrp·0·/etc/issue | ||
| 591 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·G\x8Gr\x8ro\x8ou\x8up\x8p·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·M\x8Me\x8es\x8ss\x8sa\x8ag\x8ge\x8e·o\x8of\x8f·t\x8th\x8he\x8e·D\x8Da\x8ay\x8y·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 591 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·G\x8Gr\x8ro\x8ou\x8up\x8p·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·M\x8Me\x8es\x8ss\x8sa\x8ag\x8ge\x8e·o\x8of\x8f·t\x8th\x8he\x8e·D\x8Da\x8ay\x8y·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 592 | To·properly·set·the·group·owner·of·/etc/motd,·run·the·command: | 592 | To·properly·set·the·group·owner·of·/etc/motd,·run·the·command: |
| 593 | $·sudo·chgrp·root·/etc/motd | 593 | $·sudo·chgrp·root·/etc/motd |
| 594 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the | 594 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the |
| 595 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent | 595 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent |
| 596 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, | 596 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, |
| 597 | ···········standards,·and·guidance. | 597 | ···········standards,·and·guidance. |
| 598 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. | 598 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. |
| 599 | Severity: ·medium | 599 | Severity: ·medium |
| 600 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_motd | 600 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_motd |
| 601 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 602 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 603 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 604 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 605 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 606 | chgrp·0·/etc/motd | ||
| 601 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 607 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 602 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 608 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 603 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 609 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 604 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 610 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 605 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 611 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 606 | -·name:·Test·for·existence·/etc/motd | 612 | -·name:·Test·for·existence·/etc/motd |
| 607 | ··stat: | 613 | ··stat: |
| Offset 623, 30 lines modified | Offset 629, 30 lines modified | ||
| 623 | ··tags: | 629 | ··tags: |
| 624 | ··-·configure_strategy | 630 | ··-·configure_strategy |
| 625 | ··-·file_groupowner_etc_motd | 631 | ··-·file_groupowner_etc_motd |
| 626 | ··-·low_complexity | 632 | ··-·low_complexity |
| 627 | ··-·low_disruption | 633 | ··-·low_disruption |
| 628 | ··-·medium_severity | 634 | ··-·medium_severity |
| 629 | ··-·no_reboot_needed | 635 | ··-·no_reboot_needed |
| 630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 631 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 632 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| Max diff block lines reached; 306040/311953 bytes (98.10%) of diff not shown. | |||
| Offset 15112, 134 lines modified | Offset 15112, 134 lines modified | ||
| 0003b070:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b070:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b080:·2223·6964·6d31·3134·3922·2074·6162·696e··"#idm1149"·tabin | 0003b080:·2223·6964·6d31·3134·3922·2074·6162·696e··"#idm1149"·tabin | ||
| 0003b090:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b090:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b0a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b0a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b0b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b0b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b0c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b0c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b0d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b0d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b0e0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b0e0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b0f0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b100:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b | 0003b0f0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003b100:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b110:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b120:·652 | 0003b120:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b130:·6c61·7073·6522·2069·643d·2269·646d·3131··lapse"·id="idm11 | |||
| 0003b130:·6964·6d31·3134·3922·3e3c·7461·626c·6520··idm1149"><table· | |||
| 0003b140:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b150:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b160:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b170:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b180:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b190:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b1a0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b1b0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b1c0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b1d0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b1e0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b1f0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b200:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b210:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b | 0003b140:·3439·223e·3c70·7265·3e3c·636f·6465·3e0a··49"><pre><code>. | ||
| 0003b150:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b160:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b170:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b230:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b240:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b250:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b260:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b270:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b280:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b290:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003b2a0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b2b0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b2c0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b2d0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b2e0:·7267·6574·3d22·2369·646d·3131·3530·2220··rget="#idm1150"· | |||
| 0003b2f0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b300:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b310:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b320:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b330:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b340:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b350:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b360:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b370:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b380:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b390:·2220·6964·3d22·6964·6d31·3135·3022·3e3c··"·id="idm1150">< | |||
| 0003b3a0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b3b0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b3c0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b3d0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b3e0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b3f0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b400:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b410:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b420:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b430:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b440:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b450:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b460:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b470:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b480:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b490:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | |||
| 0003b4a0:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | |||
| 0003b4b0:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | |||
| 0003b4c0:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | |||
| 0003b4d0:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | |||
| 0003b4e0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b4f0:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | |||
| 0003b500:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b510:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b520:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b530:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b540:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b550:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b560:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b570:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b580:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b590:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b5a0:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b5b0:·6c6c·6564·0a0a·2d20·6e61·6d65·3a20·456e··lled..-·name:·En | |||
| 0003b5c0:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b5d0:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b5e0:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b5f0:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b600:·656e·740a·2020·7768·656e·3a20·2722·6b65··ent.··when:·'"ke | |||
| 0003b610:·726e·656c·2220·696e·2061·6e73·6962·6c65··rnel"·in·ansible | |||
| 0003b620:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0003b630:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b640:·532d·352e·3130·2e31·2e33·0a20·202d·204e··S-5.10.1.3.··-·N | |||
| 0003b650:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b660:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b670:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b680:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b690:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b6a0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b6b0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b6c0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b6d0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b6e0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b6f0:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b700:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b | 0003b180:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | ||
| 0003b | 0003b190:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | ||
| 0003b | 0003b1a0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | ||
| 0003b | 0003b1b0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003b | 0003b1c0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 0003b | 0003b1d0:·3135·3022·2074·6162·696e·6465·783d·2230··150"·tabindex="0 | ||
| 0003b | 0003b1e0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b | 0003b1f0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b | 0003b200:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b | 0003b210:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b | 0003b220:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b230:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b7c0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 0003b7d0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b | 0003b240:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| Max diff block lines reached; 3473274/3490414 bytes (99.51%) of diff not shown. | |||
| Offset 122, 26 lines modified | Offset 122, 19 lines modified | ||
| 122 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 122 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | include·install_aide | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | } | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | -·name:·Gather·the·package·facts | 138 | -·name:·Gather·the·package·facts |
| 146 | ··package_facts: | 139 | ··package_facts: |
| Offset 170, 19 lines modified | Offset 163, 26 lines modified | ||
| 170 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 171 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 172 | ··-·low_complexity | 165 | ··-·low_complexity |
| 173 | ··-·low_disruption | 166 | ··-·low_disruption |
| 174 | ··-·medium_severity | 167 | ··-·medium_severity |
| 175 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 176 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | include·install_aide | ||
| 178 | [[packages]] | ||
| 179 | name·=·"aide" | ||
| 180 | 176 | class·install_aide·{ | |
| 177 | ··package·{·'aide': | ||
| 178 | ····ensure·=>·'installed', | ||
| 179 | ··} | ||
| 180 | } | ||
| 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 182 | Run·the·following·command·to·generate·a·new·database: | 182 | Run·the·following·command·to·generate·a·new·database: |
| 183 | $·sudo·/usr/sbin/aide·--init | 183 | $·sudo·/usr/sbin/aide·--init |
| 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of | 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of |
| 186 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance | 186 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance |
| 187 | about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 187 | about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 353, 14 lines modified | Offset 353, 33 lines modified | ||
| 353 | ············_\x8i_\x8s_\x8m······1446 | 353 | ············_\x8i_\x8s_\x8m······1446 |
| 354 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 354 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 355 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 355 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 356 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 356 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 357 | ·····················FCS_TLSC_EXT.1 | 357 | ·····················FCS_TLSC_EXT.1 |
| 358 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 358 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 359 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 359 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 361 | var_system_crypto_policy='DEFAULT' | ||
| 362 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 363 | rc=$? | ||
| 364 | if·test·"$rc"·=·127;·then | ||
| 365 | » echo·"$stderr_of_call"·>&2 | ||
| 366 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 367 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 368 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 369 | » false··#·end·with·an·error·code | ||
| 370 | elif·test·"$rc"·!=·0;·then | ||
| 371 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 372 | » false··#·end·with·an·error·code | ||
| 373 | fi | ||
| 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 361 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 362 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 363 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 364 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 365 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 379 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 366 | ··set_fact: | 380 | ··set_fact: |
| Offset 405, 33 lines modified | Offset 424, 14 lines modified | ||
| 405 | ··-·PCI-DSSv4-2.2.7 | 424 | ··-·PCI-DSSv4-2.2.7 |
| 406 | ··-·configure_crypto_policy | 425 | ··-·configure_crypto_policy |
| 407 | ··-·high_severity | 426 | ··-·high_severity |
| 408 | ··-·low_complexity | 427 | ··-·low_complexity |
| 409 | ··-·low_disruption | 428 | ··-·low_disruption |
| 410 | ··-·no_reboot_needed | 429 | ··-·no_reboot_needed |
| 411 | ··-·restrict_strategy | 430 | ··-·restrict_strategy |
| 412 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 413 | var_system_crypto_policy='DEFAULT' | ||
| 414 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 415 | rc=$? | ||
| 416 | if·test·"$rc"·=·127;·then | ||
| 417 | » echo·"$stderr_of_call"·>&2 | ||
| 418 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 419 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 420 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 421 | » false··#·end·with·an·error·code | ||
| 422 | elif·test·"$rc"·!=·0;·then | ||
| 423 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 424 | » false··#·end·with·an·error·code | ||
| 425 | fi | ||
| 426 | Group ·Sudo· Group·contains·1·rule | 431 | Group ·Sudo· Group·contains·1·rule |
| 427 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain | 432 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain |
| 428 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, | 433 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, |
| 429 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed | 434 | Sudo·can·allow·a·user·or·group·to·execute·privileged·commands·that·normally·only·root·is·allowed |
| 430 | to·execute. | 435 | to·execute. |
| 431 | For·more·information·on·Sudo·and·addition·Sudo·configuration·options,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8s\x8s_\x8u\x8u_\x8d\x8d_\x8o\x8o_\x8.\x8._\x8w\x8w_\x8s\x8s. | 436 | For·more·information·on·Sudo·and·addition·Sudo·configuration·options,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8s\x8s_\x8u\x8u_\x8d\x8d_\x8o\x8o_\x8.\x8._\x8w\x8w_\x8s\x8s. |
| Offset 613, 14 lines modified | Offset 613, 20 lines modified | ||
| Max diff block lines reached; 403023/408483 bytes (98.66%) of diff not shown. | |||
| Offset 14931, 117 lines modified | Offset 14931, 117 lines modified | ||
| 0003a520:·6574·3d22·2369·646d·3636·3234·2220·7461··et="#idm6624"·ta | 0003a520:·6574·3d22·2369·646d·3636·3234·2220·7461··et="#idm6624"·ta | ||
| 0003a530:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003a530:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003a540:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003a540:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003a550:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003a550:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003a560:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003a560:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003a570:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003a570:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003a580:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003a580:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003a590:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003a5a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003a5 | 0003a590:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 0003a5a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003a5b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003a5c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003a5d0:·2269·646d·3636·3234·223e·3c74·6162·6c65··"idm6624"><table | |||
| 0003a5e0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003a5f0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003a600:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003a610:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003a620:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003a630:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003a640:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003a650:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003a660:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003a670:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003a680:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003a690:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003a6a0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e63··ategy:</th><td>c | |||
| 0003a6b0:·6f6e·6669·6775·7265·3c2f·7464·3e3c·2f74··onfigure</td></t | |||
| 0003a6c0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003a6d0:·636f·6465·3e63·6867·7270·2030·202f·6574··code>chgrp·0·/et | |||
| 0003a6e0:·632f·7061·7373·7764·0a3c·2f63·6f64·653e··c/passwd.</code> | |||
| 0003a6f0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003a700:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003a710:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003a | 0003a720:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003a730:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | |||
| 0003a740:·3632·3522·2074·6162·696e·6465·783d·2230··625"·tabindex="0 | |||
| 0003a750:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003a760:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003a770:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003a780:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003a790:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003a7a0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003a7b0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003a7c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003a7d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003a7e0:·6c61·7073·6522·2069·643d·2269·646d·3636··lapse"·id="idm66 | |||
| 0003a7f0:·3235·223e·3c74·6162·6c65·2063·6c61·7373··25"><table·class | |||
| 0003a800:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003a810:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003a820:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003a830:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003a840:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003a5d0:·6964·3d22·6964·6d36·3632·3422·3e3c·7461··id="idm6624"><ta | |||
| 0003a5e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003a5f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003a600:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003a610:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003a620:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003a630:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003a640:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a650:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003a660:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003a670:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003a680:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003a690:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a6a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003a6b0:·643e·636f·6e66·6967·7572·653c·2f74·643e··d>configure</td> | |||
| 0003a6c0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003a6d0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003a6e0:·5465·7374·2066·6f72·2065·7869·7374·656e··Test·for·existen | |||
| 0003a6f0:·6365·202f·6574·632f·7061·7373·7764·0a20··ce·/etc/passwd.· | |||
| 0003a700:·2073·7461·743a·0a20·2020·2070·6174·683a···stat:.····path: | |||
| 0003a710:·202f·6574·632f·7061·7373·7764·0a20·2072···/etc/passwd.··r | |||
| 0003a720:·6567·6973·7465·723a·2066·696c·655f·6578··egister:·file_ex | |||
| 0003a730:·6973·7473·0a20·2074·6167·733a·0a20·202d··ists.··tags:.··- | |||
| 0003a740:·2043·4a49·532d·352e·352e·322e·320a·2020···CJIS-5.5.2.2.·· | |||
| 0003a750:·2d20·4e49·5354·2d38·3030·2d35·332d·4143··-·NIST-800-53-AC | |||
| 0003a760:·2d36·2831·290a·2020·2d20·4e49·5354·2d38··-6(1).··-·NIST-8 | |||
| 0003a770:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003a780:·2d20·5043·492d·4453·532d·5265·712d·382e··-·PCI-DSS-Req-8. | |||
| 0003a790:·372e·630a·2020·2d20·5043·492d·4453·5376··7.c.··-·PCI-DSSv | |||
| 0003a7a0:·342d·322e·320a·2020·2d20·5043·492d·4453··4-2.2.··-·PCI-DS | |||
| 0003a7b0:·5376·342d·322e·322e·360a·2020·2d20·636f··Sv4-2.2.6.··-·co | |||
| 0003a7c0:·6e66·6967·7572·655f·7374·7261·7465·6779··nfigure_strategy | |||
| 0003a7d0:·0a20·202d·2066·696c·655f·6772·6f75·706f··.··-·file_groupo | |||
| 0003a7e0:·776e·6572·5f65·7463·5f70·6173·7377·640a··wner_etc_passwd. | |||
| 0003a7f0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003a800:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003a810:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003a820:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003a830:·5f72·6562·6f6f·745f·6e65·6564·6564·0a0a··_reboot_needed.. | |||
| 0003a840:·2d20·6e61·6d65·3a20·456e·7375·7265·2067··-·name:·Ensure·g | |||
| 0003a850:·726f·7570·206f·776e·6572·2030·206f·6e20··roup·owner·0·on· | |||
| 0003a860:·2f65·7463·2f70·6173·7377·640a·2020·6669··/etc/passwd.··fi | |||
| 0003a870:·6c65·3a0a·2020·2020·7061·7468·3a20·2f65··le:.····path:·/e | |||
| 0003a880:·7463·2f70·6173·7377·640a·2020·2020·6772··tc/passwd.····gr | |||
| 0003a890:·6f75·703a·2027·3027·0a20·2077·6865·6e3a··oup:·'0'.··when: | |||
| 0003a8a0:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | |||
| 0003a8b0:·7420·6973·2064·6566·696e·6564·2061·6e64··t·is·defined·and | |||
| 0003a8c0:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | |||
| 0003a8d0:·742e·6578·6973·7473·0a20·2074·6167·733a··t.exists.··tags: | |||
| 0003a8e0:·0a20·202d·2043·4a49·532d·352e·352e·322e··.··-·CJIS-5.5.2. | |||
| 0003a8f0:·320a·2020·2d20·4e49·5354·2d38·3030·2d35··2.··-·NIST-800-5 | |||
| 0003a900:·332d·4143·2d36·2831·290a·2020·2d20·4e49··3-AC-6(1).··-·NI | |||
| 0003a910:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003a920:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003a930:·712d·382e·372e·630a·2020·2d20·5043·492d··q-8.7.c.··-·PCI- | |||
| 0003a940:·4453·5376·342d·322e·320a·2020·2d20·5043··DSSv4-2.2.··-·PC | |||
| 0003a950:·492d·4453·5376·342d·322e·322e·360a·2020··I-DSSv4-2.2.6.·· | |||
| 0003a960:·2d20·636f·6e66·6967·7572·655f·7374·7261··-·configure_stra | |||
| 0003a970:·7465·6779·0a20·202d·2066·696c·655f·6772··tegy.··-·file_gr | |||
| 0003a980:·6f75·706f·776e·6572·5f65·7463·5f70·6173··oupowner_etc_pas | |||
| 0003a990:·7377·640a·2020·2d20·6c6f·775f·636f·6d70··swd.··-·low_comp | |||
| 0003a9a0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003a9b0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003a9c0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003a9d0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003a9e0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003a9f0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003aa00:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003aa10:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003aa20:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003aa30:·6765·743d·2223·6964·6d36·3632·3522·2074··get="#idm6625"·t | |||
| 0003aa40:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003aa50:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003aa60:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| Max diff block lines reached; 31106/45900 bytes (67.77%) of diff not shown. | |||
| Offset 107, 14 lines modified | Offset 107, 20 lines modified | ||
| 107 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 107 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 108 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 108 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 109 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 109 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 110 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 110 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 111 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 111 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 |
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 119 | chgrp·0·/etc/passwd | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 119 | -·name:·Test·for·existence·/etc/passwd | 125 | -·name:·Test·for·existence·/etc/passwd |
| 120 | ··stat: | 126 | ··stat: |
| Offset 148, 20 lines modified | Offset 154, 14 lines modified | ||
| 148 | ··-·PCI-DSSv4-2.2.6 | 154 | ··-·PCI-DSSv4-2.2.6 |
| 149 | ··-·configure_strategy | 155 | ··-·configure_strategy |
| 150 | ··-·file_groupowner_etc_passwd | 156 | ··-·file_groupowner_etc_passwd |
| 151 | ··-·low_complexity | 157 | ··-·low_complexity |
| 152 | ··-·low_disruption | 158 | ··-·low_disruption |
| 153 | ··-·medium_severity | 159 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 160 | ··-·no_reboot_needed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 160 | chgrp·0·/etc/passwd | ||
| 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 162 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: | 162 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: |
| 163 | $·sudo·chown·root·/etc/passwd | 163 | $·sudo·chown·root·/etc/passwd |
| 164 | ············The·/etc/passwd·file·contains·information·about·the·users·that·are | 164 | ············The·/etc/passwd·file·contains·information·about·the·users·that·are |
| 165 | Rationale:··configured·on·the·system.·Protection·of·this·file·is·critical·for | 165 | Rationale:··configured·on·the·system.·Protection·of·this·file·is·critical·for |
| 166 | ············system·security. | 166 | ············system·security. |
| 167 | Severity: ··medium | 167 | Severity: ··medium |
| Offset 182, 14 lines modified | Offset 182, 20 lines modified | ||
| 182 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 182 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 183 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 183 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 184 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 184 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 185 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 185 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 186 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 186 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 187 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 187 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 188 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 | 188 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 194 | chown·0·/etc/passwd | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 194 | -·name:·Test·for·existence·/etc/passwd | 200 | -·name:·Test·for·existence·/etc/passwd |
| 195 | ··stat: | 201 | ··stat: |
| Offset 223, 20 lines modified | Offset 229, 14 lines modified | ||
| 223 | ··-·PCI-DSSv4-2.2.6 | 229 | ··-·PCI-DSSv4-2.2.6 |
| 224 | ··-·configure_strategy | 230 | ··-·configure_strategy |
| 225 | ··-·file_owner_etc_passwd | 231 | ··-·file_owner_etc_passwd |
| 226 | ··-·low_complexity | 232 | ··-·low_complexity |
| 227 | ··-·low_disruption | 233 | ··-·low_disruption |
| 228 | ··-·medium_severity | 234 | ··-·medium_severity |
| 229 | ··-·no_reboot_needed | 235 | ··-·no_reboot_needed |
| 230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 231 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 232 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 233 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 234 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 235 | chown·0·/etc/passwd | ||
| 236 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 236 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 237 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: | 237 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: |
| 238 | $·sudo·chmod·0644·/etc/passwd | 238 | $·sudo·chmod·0644·/etc/passwd |
| 239 | ············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world | 239 | ············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world |
| 240 | Rationale:··the·risk·of·its·compromise·is·increased.·The·file·contains·the·list | 240 | Rationale:··the·risk·of·its·compromise·is·increased.·The·file·contains·the·list |
| 241 | ············of·accounts·on·the·system·and·associated·information,·and | 241 | ············of·accounts·on·the·system·and·associated·information,·and |
| 242 | ············protection·of·this·file·is·critical·for·system·security. | 242 | ············protection·of·this·file·is·critical·for·system·security. |
| Offset 258, 14 lines modified | Offset 258, 24 lines modified | ||
| 258 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 258 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 259 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 259 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 260 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 260 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 261 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 261 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 262 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 262 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 | 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 |
| 265 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 266 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 267 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 268 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 269 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 270 | chmod·u-xs,g-xws,o-xwt·/etc/passwd | ||
| 265 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 271 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 266 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 272 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 267 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 273 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 268 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 274 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 269 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 275 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 270 | -·name:·Test·for·existence·/etc/passwd | 276 | -·name:·Test·for·existence·/etc/passwd |
| 271 | ··stat: | 277 | ··stat: |
| Offset 299, 21 lines modified | Offset 309, 11 lines modified | ||
| 299 | ··-·PCI-DSSv4-2.2.6 | 309 | ··-·PCI-DSSv4-2.2.6 |
| 300 | ··-·configure_strategy | 310 | ··-·configure_strategy |
| 301 | ··-·file_permissions_etc_passwd | 311 | ··-·file_permissions_etc_passwd |
| 302 | ··-·low_complexity | 312 | ··-·low_complexity |
| 303 | ··-·low_disruption | 313 | ··-·low_disruption |
| 304 | ··-·medium_severity | 314 | ··-·medium_severity |
| 305 | ··-·no_reboot_needed | 315 | ··-·no_reboot_needed |
| 306 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 307 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 308 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 309 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 310 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 311 | chmod·u-xs,g-xws,o-xwt·/etc/passwd | ||
| 312 | Red·Hat·and·Red·Hat·Enterprise·Linux·are·either·registered·trademarks·or | 316 | Red·Hat·and·Red·Hat·Enterprise·Linux·are·either·registered·trademarks·or |
| Max diff block lines reached; 126/5541 bytes (2.27%) of diff not shown. | |||
| Offset 19069, 66 lines modified | Offset 19069, 66 lines modified | ||
| 0004a7c0:·7461·7267·6574·3d22·2369·646d·3736·3334··target="#idm7634 | 0004a7c0:·7461·7267·6574·3d22·2369·646d·3736·3334··target="#idm7634 | ||
| 0004a7d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0004a7d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0004a7e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0004a7e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0004a7f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0004a7f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0004a800:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0004a800:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0004a810:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0004a810:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0004a820:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0004a820:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0004a830:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0004a830:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 0004a840:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0004a8 | 0004a840:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0004a8 | 0004a850:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0004a8 | 0004a860:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0004a8 | 0004a870:·646d·3736·3334·223e·3c74·6162·6c65·2063··dm7634"><table·c | ||
| 0004a8 | 0004a880:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0004a8 | 0004a890:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0004a8 | 0004a8a0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0004a8 | 0004a8b0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0004a8 | 0004a8c0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0004a8d0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0004a8e0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0004a8f0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0004a | 0004a900:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0004a8f0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0004a900:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | |||
| 0004a910:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | |||
| 0004a9 | 0004a910:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0004a9 | 0004a920:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | ||
| 0004a9 | 0004a930:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0004a9 | 0004a940:·6174·6567·793a·3c2f·7468·3e3c·7464·3e64··ategy:</th><td>d | ||
| 0004a9 | 0004a950:·6973·6162·6c65·3c2f·7464·3e3c·2f74·723e··isable</td></tr> | ||
| 0004a9 | 0004a960:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0004a9 | 0004a970:·6465·3e61·7069·5665·7273·696f·6e3a·206d··de>apiVersion:·m | ||
| 0004a9 | 0004a980:·6163·6869·6e65·636f·6e66·6967·7572·6174··achineconfigurat | ||
| 0004a9 | 0004a990:·696f·6e2e·6f70·656e·7368·6966·742e·696f··ion.openshift.io | ||
| 0004a9 | 0004a9a0:·2f76·310a·6b69·6e64·3a20·4d61·6368·696e··/v1.kind:·Machin | ||
| 0004a9 | 0004a9b0:·6543·6f6e·6669·670a·7370·6563·3a0a·2020··eConfig.spec:.·· | ||
| 0004a9 | 0004a9c0:·636f·6e66·6967·3a0a·2020·2020·6967·6e69··config:.····igni | ||
| 0004a9 | 0004a9d0:·7469·6f6e·3a0a·2020·2020·2020·7665·7273··tion:.······vers | ||
| 0004a9 | 0004a9e0:·696f·6e3a·2033·2e31·2e30·0a20·2020·2073··ion:·3.1.0.····s | ||
| 0004a | 0004a9f0:·7973·7465·6d64·3a0a·2020·2020·2020·756e··ystemd:.······un | ||
| 0004aa00:·6974·733a·0a20·2020·2020·202d·206e·616d··its:.······-·nam | |||
| 0004aa10:·653a·2064·6562·7567·2d73·6865·6c6c·2e73··e:·debug-shell.s | |||
| 0004aa20:·6572·7669·6365·0a20·2020·2020·2020·2065··ervice.········e | |||
| 0004aa30:·6e61·626c·6564·3a20·6661·6c73·650a·2020··nabled:·false.·· | |||
| 0004aa40:·2020·2020·2020·6d61·736b·3a20·7472·7565········mask:·true | |||
| 0004aa | 0004aa50:·0a20·2020·2020·202d·206e·616d·653a·2064··.······-·name:·d | ||
| 0004aa | 0004aa60:·6562·7567·2d73·6865·6c6c·2e73·6f63·6b65··ebug-shell.socke | ||
| 0004aa30:·6365·0a20·2020·2020·2020·2065·6e61·626c··ce.········enabl | |||
| 0004aa40:·6564·3a20·6661·6c73·650a·2020·2020·2020··ed:·false.······ | |||
| 0004aa50:·2020·6d61·736b·3a20·7472·7565·0a20·2020····mask:·true.··· | |||
| 0004aa60:·2020·202d·206e·616d·653a·2064·6562·7567·····-·name:·debug | |||
| 0004aa70:·2d73·6865·6c6c·2e73·6f63·6b65·740a·2020··-shell.socket.·· | |||
| 0004aa | 0004aa70:·740a·2020·2020·2020·2020·656e·6162·6c65··t.········enable | ||
| 0004aa | 0004aa80:·643a·2066·616c·7365·0a20·2020·2020·2020··d:·false.······· | ||
| 0004aa | 0004aa90:·206d·6173·6b3a·2074·7275·650a·3c2f·636f···mask:·true.</co | ||
| 0004aa | 0004aaa0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0004aa | 0004aab0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0004aa | 0004aac0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0004aa | 0004aad0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0004aa | 0004aae0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0004a | 0004aaf0:·646d·3736·3335·2220·7461·6269·6e64·6578··dm7635"·tabindex | ||
| 0004ab | 0004ab00:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0004ab20 | 0004ab10:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0004ab | 0004ab20:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0004ab | 0004ab30:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0004ab | 0004ab40:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0004ab | 0004ab50:·6d65·6469·6174·696f·6e20·4b75·6265·726e··mediation·Kubern | ||
| 0004ab60:·6574·6573·2073·6e69·7070·6574·20e2·87b2··etes·snippet·... | |||
| 0004ab70:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | 0004ab70:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0004ab80:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | 0004ab80:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0004ab90:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | 0004ab90:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0004aba0:·2269·646d·3736·3335·223e·3c74·6162·6c65··"idm7635"><table | 0004aba0:·2269·646d·3736·3335·223e·3c74·6162·6c65··"idm7635"><table | ||
| 0004abb0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | 0004abb0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0004abc0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | 0004abc0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0004abd0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | 0004abd0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| Offset 34734, 66 lines modified | Offset 34734, 66 lines modified | ||
| 00087ad0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 00087ad0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00087ae0:·6d31·3833·3933·2220·7461·6269·6e64·6578··m18393"·tabindex | 00087ae0:·6d31·3833·3933·2220·7461·6269·6e64·6578··m18393"·tabindex | ||
| 00087af0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 00087af0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 00087b00:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 00087b00:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00087b10:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00087b10:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00087b20:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00087b20:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00087b30:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 00087b30:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00087b40:·6d65·6469·6174·696f·6e20·4b75·6265·726e··mediation·Kubern | |||
| 00087b50:·6574·6573·2073·6e69·7070·6574·20e2·87b2··etes·snippet·... | |||
| 00087b60:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00087b70:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00087b80:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00087b90:·2269·646d·3138·3339·3322·3e3c·7461·626c··"idm18393"><tabl | |||
| 00087ba0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00087bb0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00087bc0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00087bd0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00087be0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00087bf0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00087c00:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00087c10:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00087c20:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 00087c30:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 00087c40:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | |||
| 00087c50:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00087c60:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 00087c70:·643e·6469·7361·626c·653c·2f74·643e·3c2f··d>disable</td></ | |||
| 00087c80:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00087c90:·3c63·6f64·653e·6170·6956·6572·7369·6f6e··<code>apiVersion | |||
| 00087ca0:·3a20·6d61·6368·696e·6563·6f6e·6669·6775··:·machineconfigu | |||
| 00087cb0:·7261·7469·6f6e·2e6f·7065·6e73·6869·6674··ration.openshift | |||
| 00087cc0:·2e69·6f2f·7631·0a6b·696e·643a·204d·6163··.io/v1.kind:·Mac | |||
| 00087cd0:·6869·6e65·436f·6e66·6967·0a73·7065·633a··hineConfig.spec: | |||
| 00087ce0:·0a20·2063·6f6e·6669·673a·0a20·2020·2069··.··config:.····i | |||
| 00087cf0:·676e·6974·696f·6e3a·0a20·2020·2020·2076··gnition:.······v | |||
| 00087d00:·6572·7369·6f6e·3a20·332e·312e·300a·2020··ersion:·3.1.0.·· | |||
| 00087d10:·2020·7379·7374·656d·643a·0a20·2020·2020····systemd:.····· | |||
| 00087d20:·2075·6e69·7473·3a0a·2020·2020·2020·2d20···units:.······-· | |||
| 00087d30:·6e61·6d65·3a20·626c·7565·746f·6f74·682e··name:·bluetooth. | |||
| 00087d40:·7365·7276·6963·650a·2020·2020·2020·2020··service.········ | |||
| 00087d50:·656e·6162·6c65·643a·2066·616c·7365·0a20··enabled:·false.· | |||
| 00087d60:·2020·2020·2020·206d·6173·6b3a·2074·7275·········mask:·tru | |||
| 00087d70:·650a·2020·2020·2020·2d20·6e61·6d65·3a20··e.······-·name:· | |||
| 00087d80:·626c·7565·746f·6f74·682e·736f·636b·6574··bluetooth.socket | |||
| 00087d90:·0a20·2020·2020·2020·2065·6e61·626c·6564··.········enabled | |||
| 00087da0:·3a20·6661·6c73·650a·2020·2020·2020·2020··:·false.········ | |||
| 00087db0:·6d61·736b·3a20·7472·7565·0a3c·2f63·6f64··mask:·true.</cod | |||
| 00087dc0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00087dd0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00087de0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| Max diff block lines reached; 16750/32672 bytes (51.27%) of diff not shown. | |||
| Offset 432, 15 lines modified | Offset 432, 15 lines modified | ||
| 432 | Identifiers:·CCE-82496-1 | 432 | Identifiers:·CCE-82496-1 |
| 433 | ·············_\x8c_\x8u_\x8i····3.4.5 | 433 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 | 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 |
| 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 444 | apiVersion:·machineconfiguration.openshift.io/v1 | 444 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 445 | kind:·MachineConfig | 445 | kind:·MachineConfig |
| 446 | spec: | 446 | spec: |
| Offset 451, 15 lines modified | Offset 451, 15 lines modified | ||
| 451 | ······units: | 451 | ······units: |
| 452 | ······-·name:·debug-shell.service | 452 | ······-·name:·debug-shell.service |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | ······-·name:·debug-shell.socket | 455 | ······-·name:·debug-shell.socket |
| 456 | ········enabled:·false | 456 | ········enabled:·false |
| 457 | ········mask:·true | 457 | ········mask:·true |
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 463 | apiVersion:·machineconfiguration.openshift.io/v1 | 463 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 464 | kind:·MachineConfig | 464 | kind:·MachineConfig |
| 465 | spec: | 465 | spec: |
| Offset 1881, 15 lines modified | Offset 1881, 15 lines modified | ||
| 1881 | ············_\x8c_\x8u_\x8i············3.1.16 | 1881 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1893 | apiVersion:·machineconfiguration.openshift.io/v1 | 1893 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1894 | kind:·MachineConfig | 1894 | kind:·MachineConfig |
| 1895 | spec: | 1895 | spec: |
| Offset 1900, 15 lines modified | Offset 1900, 15 lines modified | ||
| 1900 | ······units: | 1900 | ······units: |
| 1901 | ······-·name:·bluetooth.service | 1901 | ······-·name:·bluetooth.service |
| 1902 | ········enabled:·false | 1902 | ········enabled:·false |
| 1903 | ········mask:·true | 1903 | ········mask:·true |
| 1904 | ······-·name:·bluetooth.socket | 1904 | ······-·name:·bluetooth.socket |
| 1905 | ········enabled:·false | 1905 | ········enabled:·false |
| 1906 | ········mask:·true | 1906 | ········mask:·true |
| 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1912 | apiVersion:·machineconfiguration.openshift.io/v1 | 1912 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1913 | kind:·MachineConfig | 1913 | kind:·MachineConfig |
| 1914 | spec: | 1914 | spec: |
| Offset 2218, 15 lines modified | Offset 2218, 15 lines modified | ||
| 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2230 | apiVersion:·machineconfiguration.openshift.io/v1 | 2230 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2231 | kind:·MachineConfig | 2231 | kind:·MachineConfig |
| 2232 | spec: | 2232 | spec: |
| Offset 2237, 15 lines modified | Offset 2237, 15 lines modified | ||
| 2237 | ······units: | 2237 | ······units: |
| 2238 | ······-·name:·autofs.service | 2238 | ······-·name:·autofs.service |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | ······-·name:·autofs.socket | 2241 | ······-·name:·autofs.socket |
| 2242 | ········enabled:·false | 2242 | ········enabled:·false |
| 2243 | ········mask:·true | 2243 | ········mask:·true |
| 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2249 | apiVersion:·machineconfiguration.openshift.io/v1 | 2249 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2250 | kind:·MachineConfig | 2250 | kind:·MachineConfig |
| 2251 | spec: | 2251 | spec: |
| Offset 3587, 15 lines modified | Offset 3587, 15 lines modified | ||
| 3587 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 3587 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 3588 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 3588 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 3589 | Severity: ···high | 3589 | Severity: ···high |
| 3590 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 3590 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 3591 | Identifiers:·CCE-86189-8 | 3591 | Identifiers:·CCE-86189-8 |
| 3592 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 3592 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 3593 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 3593 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 3594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 3594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 3595 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3595 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3596 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 3596 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 3597 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 3597 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 3598 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3598 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3599 | apiVersion:·machineconfiguration.openshift.io/v1 | 3599 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 3600 | kind:·MachineConfig | 3600 | kind:·MachineConfig |
| 3601 | spec: | 3601 | spec: |
| Offset 3606, 15 lines modified | Offset 3606, 15 lines modified | ||
| 3606 | ······units: | 3606 | ······units: |
| 3607 | ······-·name:·sshd.service | 3607 | ······-·name:·sshd.service |
| 3608 | ········enabled:·false | 3608 | ········enabled:·false |
| 3609 | ········mask:·true | 3609 | ········mask:·true |
| 3610 | ······-·name:·sshd.socket | 3610 | ······-·name:·sshd.socket |
| 3611 | ········enabled:·false | 3611 | ········enabled:·false |
| 3612 | ········mask:·true | 3612 | ········mask:·true |
| 3613 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 3613 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 3614 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3614 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3615 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 3615 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 3616 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 3616 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 3617 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3617 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3618 | apiVersion:·machineconfiguration.openshift.io/v1 | 3618 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 3619 | kind:·MachineConfig | 3619 | kind:·MachineConfig |
| 3620 | spec: | 3620 | spec: |
| Max diff block lines reached; -1/7394 bytes (-0.01%) of diff not shown. | |||
| Offset 19068, 67 lines modified | Offset 19068, 67 lines modified | ||
| 0004a7b0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0004a7b0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0004a7c0:·3d22·2369·646d·3736·3334·2220·7461·6269··="#idm7634"·tabi | 0004a7c0:·3d22·2369·646d·3736·3334·2220·7461·6269··="#idm7634"·tabi | ||
| 0004a7d0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0004a7d0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0004a7e0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0004a7e0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0004a7f0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0004a7f0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0004a800:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0004a800:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0004a810:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0004a810:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0004a820:·223e·5265·6d65·6469·6174·696f·6e20· | 0004a820:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | ||
| 0004a830:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 0004a8 | 0004a830:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0004a8 | 0004a840:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0004a8 | 0004a850:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0004a870 | 0004a860:·7073·6522·2069·643d·2269·646d·3736·3334··pse"·id="idm7634 | ||
| 0004a8 | 0004a870:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0004a8 | 0004a880:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0004a8 | 0004a890:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0004a8 | 0004a8a0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0004a8 | 0004a8b0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0004a8 | 0004a8c0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0004a8d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0004a8e0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0004a8f0:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 0004a | 0004a900:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0004a8f0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0004a900:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | |||
| 0004a910:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0004a9 | 0004a910:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0004a9 | 0004a920:·3e74·7275·653c·2f74·643e·3c2f·7472·3e3c··>true</td></tr>< | ||
| 0004a9 | 0004a930:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0004a9 | 0004a940:·3c2f·7468·3e3c·7464·3e64·6973·6162·6c65··</th><td>disable | ||
| 0004a9 | 0004a950:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0004a9 | 0004a960:·653e·3c70·7265·3e3c·636f·6465·3e61·7069··e><pre><code>api | ||
| 0004a9 | 0004a970:·5665·7273·696f·6e3a·206d·6163·6869·6e65··Version:·machine | ||
| 0004a9 | 0004a980:·636f·6e66·6967·7572·6174·696f·6e2e·6f70··configuration.op | ||
| 0004a9 | 0004a990:·656e·7368·6966·742e·696f·2f76·310a·6b69··enshift.io/v1.ki | ||
| 0004a9 | 0004a9a0:·6e64·3a20·4d61·6368·696e·6543·6f6e·6669··nd:·MachineConfi | ||
| 0004a9 | 0004a9b0:·670a·7370·6563·3a0a·2020·636f·6e66·6967··g.spec:.··config | ||
| 0004a9 | 0004a9c0:·3a0a·2020·2020·6967·6e69·7469·6f6e·3a0a··:.····ignition:. | ||
| 0004a9 | 0004a9d0:·2020·2020·2020·7665·7273·696f·6e3a·2033········version:·3 | ||
| 0004a9 | 0004a9e0:·2e31·2e30·0a20·2020·2073·7973·7465·6d64··.1.0.····systemd | ||
| 0004aa00 | 0004a9f0:·3a0a·2020·2020·2020·756e·6974·733a·0a20··:.······units:.· | ||
| 0004aa00:·2020·2020·202d·206e·616d·653a·2064·6562·······-·name:·deb | |||
| 0004aa10:·7567·2d73·6865·6c6c·2e73·6572·7669·6365··ug-shell.service | |||
| 0004aa20:·0a20·2020·2020·2020·2065·6e61·626c·6564··.········enabled | |||
| 0004aa30:·3a20·6661·6c73·650a·2020·2020·2020·2020··:·false.········ | |||
| 0004aa40:·6d61·736b·3a20·7472·7565·0a20·2020·2020··mask:·true.····· | |||
| 0004aa | 0004aa50:·202d·206e·616d·653a·2064·6562·7567·2d73···-·name:·debug-s | ||
| 0004aa | 0004aa60:·6865·6c6c·2e73·6f63·6b65·740a·2020·2020··hell.socket.···· | ||
| 0004aa | 0004aa70:·2020·2020·656e·6162·6c65·643a·2066·616c······enabled:·fal | ||
| 0004aa | 0004aa80:·7365·0a20·2020·2020·2020·206d·6173·6b3a··se.········mask: | ||
| 0004aa50:·3a20·7472·7565·0a20·2020·2020·202d·206e··:·true.······-·n | |||
| 0004aa60:·616d·653a·2064·6562·7567·2d73·6865·6c6c··ame:·debug-shell | |||
| 0004aa70:·2e73·6f63·6b65·740a·2020·2020·2020·2020··.socket.········ | |||
| 0004aa80:·656e·6162·6c65·643a·2066·616c·7365·0a20··enabled:·false.· | |||
| 0004aa90:·2020·2020·2020·206d·6173·6b3a·2074·7275·········mask:·tru | |||
| 0004aa | 0004aa90:·2074·7275·650a·3c2f·636f·6465·3e3c·2f70···true.</code></p | ||
| 0004aa | 0004aaa0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 0004aa | 0004aab0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 0004aa | 0004aac0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0004aa | 0004aad0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0004aa | 0004aae0:·7461·7267·6574·3d22·2369·646d·3736·3335··target="#idm7635 | ||
| 0004a | 0004aaf0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0004ab | 0004ab00:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0004ab | 0004ab10:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0004ab | 0004ab20:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0004ab40 | 0004ab30:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0004ab | 0004ab40:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0004ab50:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 0004ab60:· | 0004ab60:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0004ab70:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | 0004ab70:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0004ab80:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | 0004ab80:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0004ab90:·6c61·7073·6522·2069·643d·2269·646d·3736··lapse"·id="idm76 | 0004ab90:·6c61·7073·6522·2069·643d·2269·646d·3736··lapse"·id="idm76 | ||
| 0004aba0:·3335·223e·3c74·6162·6c65·2063·6c61·7373··35"><table·class | 0004aba0:·3335·223e·3c74·6162·6c65·2063·6c61·7373··35"><table·class | ||
| 0004abb0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | 0004abb0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0004abc0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | 0004abc0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0004abd0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | 0004abd0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| Offset 34734, 66 lines modified | Offset 34734, 66 lines modified | ||
| 00087ad0:·6172·6765·743d·2223·6964·6d31·3833·3933··arget="#idm18393 | 00087ad0:·6172·6765·743d·2223·6964·6d31·3833·3933··arget="#idm18393 | ||
| 00087ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 00087ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 00087af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 00087af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 00087b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 00087b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 00087b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 00087b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00087b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00087b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 00087b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 00087b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00087b40:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 00087b50:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00087b60:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00087b70:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00087b80:·6c61·7073·6522·2069·643d·2269·646d·3138··lapse"·id="idm18 | |||
| 00087b90:·3339·3322·3e3c·7461·626c·6520·636c·6173··393"><table·clas | |||
| 00087ba0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00087bb0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00087bc0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00087bd0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00087be0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00087bf0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00087c00:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00087c10:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | |||
| 00087c20:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | |||
| 00087c30:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00087c40:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | |||
| 00087c50:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00087c60:·6779·3a3c·2f74·683e·3c74·643e·6469·7361··gy:</th><td>disa | |||
| 00087c70:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 00087c80:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00087c90:·6170·6956·6572·7369·6f6e·3a20·6d61·6368··apiVersion:·mach | |||
| 00087ca0:·696e·6563·6f6e·6669·6775·7261·7469·6f6e··ineconfiguration | |||
| 00087cb0:·2e6f·7065·6e73·6869·6674·2e69·6f2f·7631··.openshift.io/v1 | |||
| 00087cc0:·0a6b·696e·643a·204d·6163·6869·6e65·436f··.kind:·MachineCo | |||
| 00087cd0:·6e66·6967·0a73·7065·633a·0a20·2063·6f6e··nfig.spec:.··con | |||
| 00087ce0:·6669·673a·0a20·2020·2069·676e·6974·696f··fig:.····ignitio | |||
| 00087cf0:·6e3a·0a20·2020·2020·2076·6572·7369·6f6e··n:.······version | |||
| 00087d00:·3a20·332e·312e·300a·2020·2020·7379·7374··:·3.1.0.····syst | |||
| 00087d10:·656d·643a·0a20·2020·2020·2075·6e69·7473··emd:.······units | |||
| 00087d20:·3a0a·2020·2020·2020·2d20·6e61·6d65·3a20··:.······-·name:· | |||
| 00087d30:·626c·7565·746f·6f74·682e·7365·7276·6963··bluetooth.servic | |||
| 00087d40:·650a·2020·2020·2020·2020·656e·6162·6c65··e.········enable | |||
| 00087d50:·643a·2066·616c·7365·0a20·2020·2020·2020··d:·false.······· | |||
| 00087d60:·206d·6173·6b3a·2074·7275·650a·2020·2020···mask:·true.···· | |||
| 00087d70:·2020·2d20·6e61·6d65·3a20·626c·7565·746f····-·name:·blueto | |||
| 00087d80:·6f74·682e·736f·636b·6574·0a20·2020·2020··oth.socket.····· | |||
| 00087d90:·2020·2065·6e61·626c·6564·3a20·6661·6c73·····enabled:·fals | |||
| 00087da0:·650a·2020·2020·2020·2020·6d61·736b·3a20··e.········mask:· | |||
| 00087db0:·7472·7565·0a3c·2f63·6f64·653e·3c2f·7072··true.</code></pr | |||
| 00087dc0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00087dd0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00087de0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| Max diff block lines reached; 16612/32672 bytes (50.84%) of diff not shown. | |||
| Offset 432, 15 lines modified | Offset 432, 15 lines modified | ||
| 432 | Identifiers:·CCE-82496-1 | 432 | Identifiers:·CCE-82496-1 |
| 433 | ·············_\x8c_\x8u_\x8i····3.4.5 | 433 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 | 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 |
| 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 444 | apiVersion:·machineconfiguration.openshift.io/v1 | 444 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 445 | kind:·MachineConfig | 445 | kind:·MachineConfig |
| 446 | spec: | 446 | spec: |
| Offset 451, 15 lines modified | Offset 451, 15 lines modified | ||
| 451 | ······units: | 451 | ······units: |
| 452 | ······-·name:·debug-shell.service | 452 | ······-·name:·debug-shell.service |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | ······-·name:·debug-shell.socket | 455 | ······-·name:·debug-shell.socket |
| 456 | ········enabled:·false | 456 | ········enabled:·false |
| 457 | ········mask:·true | 457 | ········mask:·true |
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 463 | apiVersion:·machineconfiguration.openshift.io/v1 | 463 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 464 | kind:·MachineConfig | 464 | kind:·MachineConfig |
| 465 | spec: | 465 | spec: |
| Offset 1881, 15 lines modified | Offset 1881, 15 lines modified | ||
| 1881 | ············_\x8c_\x8u_\x8i············3.1.16 | 1881 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1893 | apiVersion:·machineconfiguration.openshift.io/v1 | 1893 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1894 | kind:·MachineConfig | 1894 | kind:·MachineConfig |
| 1895 | spec: | 1895 | spec: |
| Offset 1900, 15 lines modified | Offset 1900, 15 lines modified | ||
| 1900 | ······units: | 1900 | ······units: |
| 1901 | ······-·name:·bluetooth.service | 1901 | ······-·name:·bluetooth.service |
| 1902 | ········enabled:·false | 1902 | ········enabled:·false |
| 1903 | ········mask:·true | 1903 | ········mask:·true |
| 1904 | ······-·name:·bluetooth.socket | 1904 | ······-·name:·bluetooth.socket |
| 1905 | ········enabled:·false | 1905 | ········enabled:·false |
| 1906 | ········mask:·true | 1906 | ········mask:·true |
| 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1912 | apiVersion:·machineconfiguration.openshift.io/v1 | 1912 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1913 | kind:·MachineConfig | 1913 | kind:·MachineConfig |
| 1914 | spec: | 1914 | spec: |
| Offset 2218, 15 lines modified | Offset 2218, 15 lines modified | ||
| 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2230 | apiVersion:·machineconfiguration.openshift.io/v1 | 2230 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2231 | kind:·MachineConfig | 2231 | kind:·MachineConfig |
| 2232 | spec: | 2232 | spec: |
| Offset 2237, 15 lines modified | Offset 2237, 15 lines modified | ||
| 2237 | ······units: | 2237 | ······units: |
| 2238 | ······-·name:·autofs.service | 2238 | ······-·name:·autofs.service |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | ······-·name:·autofs.socket | 2241 | ······-·name:·autofs.socket |
| 2242 | ········enabled:·false | 2242 | ········enabled:·false |
| 2243 | ········mask:·true | 2243 | ········mask:·true |
| 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2249 | apiVersion:·machineconfiguration.openshift.io/v1 | 2249 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2250 | kind:·MachineConfig | 2250 | kind:·MachineConfig |
| 2251 | spec: | 2251 | spec: |
| Offset 3587, 15 lines modified | Offset 3587, 15 lines modified | ||
| 3587 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 3587 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 3588 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 3588 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 3589 | Severity: ···high | 3589 | Severity: ···high |
| 3590 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 3590 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 3591 | Identifiers:·CCE-86189-8 | 3591 | Identifiers:·CCE-86189-8 |
| 3592 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 3592 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 3593 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 3593 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 3594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 3594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 3595 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3595 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3596 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 3596 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 3597 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 3597 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 3598 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3598 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3599 | apiVersion:·machineconfiguration.openshift.io/v1 | 3599 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 3600 | kind:·MachineConfig | 3600 | kind:·MachineConfig |
| 3601 | spec: | 3601 | spec: |
| Offset 3606, 15 lines modified | Offset 3606, 15 lines modified | ||
| 3606 | ······units: | 3606 | ······units: |
| 3607 | ······-·name:·sshd.service | 3607 | ······-·name:·sshd.service |
| 3608 | ········enabled:·false | 3608 | ········enabled:·false |
| 3609 | ········mask:·true | 3609 | ········mask:·true |
| 3610 | ······-·name:·sshd.socket | 3610 | ······-·name:·sshd.socket |
| 3611 | ········enabled:·false | 3611 | ········enabled:·false |
| 3612 | ········mask:·true | 3612 | ········mask:·true |
| 3613 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 3613 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 3614 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3614 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3615 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 3615 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 3616 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 3616 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 3617 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3617 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3618 | apiVersion:·machineconfiguration.openshift.io/v1 | 3618 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 3619 | kind:·MachineConfig | 3619 | kind:·MachineConfig |
| 3620 | spec: | 3620 | spec: |
| Max diff block lines reached; -1/7394 bytes (-0.01%) of diff not shown. | |||
| Offset 19070, 66 lines modified | Offset 19070, 66 lines modified | ||
| 0004a7d0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0004a7d0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0004a7e0:·3736·3334·2220·7461·6269·6e64·6578·3d22··7634"·tabindex=" | 0004a7e0:·3736·3334·2220·7461·6269·6e64·6578·3d22··7634"·tabindex=" | ||
| 0004a7f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0004a7f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0004a800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0004a800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0004a810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0004a810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0004a820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0004a820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0004a830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0004a830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0004a840:·6469·6174·696f·6e20· | 0004a840:·6469·6174·696f·6e20·7363·7269·7074·20e2··diation·script·. | ||
| 0004a850:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 0004a8 | 0004a850:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0004a8 | 0004a860:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0004a8 | 0004a870:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0004a8 | 0004a880:·643d·2269·646d·3736·3334·223e·3c74·6162··d="idm7634"><tab | ||
| 0004a8 | 0004a890:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0004a8 | 0004a8a0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0004a8 | 0004a8b0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0004a8 | 0004a8c0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0004a8 | 0004a8d0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0004a8 | 0004a8e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0004a900:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0004a910:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0004a920:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | |||
| 0004a930:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0004a940:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | |||
| 0004a | 0004a8f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0004a900:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0004a910:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | |||
| 0004a920:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0004a930:·743a·3c2f·7468·3e3c·7464·3e74·7275·653c··t:</th><td>true< | |||
| 0004a940:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0004a9 | 0004a950:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0004a9 | 0004a960:·7464·3e64·6973·6162·6c65·3c2f·7464·3e3c··td>disable</td>< | ||
| 0004a9 | 0004a970:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0004a9 | 0004a980:·3e3c·636f·6465·3e61·7069·5665·7273·696f··><code>apiVersio | ||
| 0004a9a0 | 0004a990:·6e3a·206d·6163·6869·6e65·636f·6e66·6967··n:·machineconfig | ||
| 0004a9 | 0004a9a0:·7572·6174·696f·6e2e·6f70·656e·7368·6966··uration.openshif | ||
| 0004a9 | 0004a9b0:·742e·696f·2f76·310a·6b69·6e64·3a20·4d61··t.io/v1.kind:·Ma | ||
| 0004a9 | 0004a9c0:·6368·696e·6543·6f6e·6669·670a·7370·6563··chineConfig.spec | ||
| 0004a9 | 0004a9d0:·3a0a·2020·636f·6e66·6967·3a0a·2020·2020··:.··config:.···· | ||
| 0004a9 | 0004a9e0:·6967·6e69·7469·6f6e·3a0a·2020·2020·2020··ignition:.······ | ||
| 0004a | 0004a9f0:·7665·7273·696f·6e3a·2033·2e31·2e30·0a20··version:·3.1.0.· | ||
| 0004aa | 0004aa00:·2020·2073·7973·7465·6d64·3a0a·2020·2020·····systemd:.···· | ||
| 0004aa10:·2020·756e·6974·733a·0a20·2020·2020·202d····units:.······- | |||
| 0004aa20:·206e·616d·653a·2064·6562·7567·2d73·6865···name:·debug-she | |||
| 0004aa30:·6c6c·2e73·6572·7669·6365·0a20·2020·2020··ll.service.····· | |||
| 0004aa40:·2020·2065·6e61·626c·6564·3a20·6661·6c73·····enabled:·fals | |||
| 0004aa50:·650a·2020·2020·2020·2020·6d61·736b·3a20··e.········mask:· | |||
| 0004aa | 0004aa60:·7472·7565·0a20·2020·2020·202d·206e·616d··true.······-·nam | ||
| 0004aa | 0004aa70:·653a·2064·6562·7567·2d73·6865·6c6c·2e73··e:·debug-shell.s | ||
| 0004aa40:·6572·7669·6365·0a20·2020·2020·2020·2065··ervice.········e | |||
| 0004aa50:·6e61·626c·6564·3a20·6661·6c73·650a·2020··nabled:·false.·· | |||
| 0004aa60:·2020·2020·2020·6d61·736b·3a20·7472·7565········mask:·true | |||
| 0004aa70:·0a20·2020·2020·202d·206e·616d·653a·2064··.······-·name:·d | |||
| 0004aa80:·6562·7567·2d73·6865·6c6c·2e73·6f63·6b65··ebug-shell.socke | |||
| 0004aa | 0004aa80:·6f63·6b65·740a·2020·2020·2020·2020·656e··ocket.········en | ||
| 0004aa | 0004aa90:·6162·6c65·643a·2066·616c·7365·0a20·2020··abled:·false.··· | ||
| 0004aa | 0004aaa0:·2020·2020·206d·6173·6b3a·2074·7275·650a·······mask:·true. | ||
| 0004aa | 0004aab0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0004aa | 0004aac0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0004aa | 0004aad0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0004aa | 0004aae0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0004a | 0004aaf0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0004ab | 0004ab00:·3d22·2369·646d·3736·3335·2220·7461·6269··="#idm7635"·tabi | ||
| 0004ab | 0004ab10:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0004ab | 0004ab20:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0004ab | 0004ab30:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0004ab | 0004ab40:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0004ab | 0004ab50:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0004ab | 0004ab60:·223e·5265·6d65·6469·6174·696f·6e20·4b75··">Remediation·Ku | ||
| 0004ab70:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 0004ab80:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | 0004ab80:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0004ab90:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | 0004ab90:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0004aba0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | 0004aba0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0004abb0:·2069·643d·2269·646d·3736·3335·223e·3c74···id="idm7635"><t | 0004abb0:·2069·643d·2269·646d·3736·3335·223e·3c74···id="idm7635"><t | ||
| 0004abc0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | 0004abc0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0004abd0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | 0004abd0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0004abe0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | 0004abe0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| Offset 34735, 67 lines modified | Offset 34735, 67 lines modified | ||
| 00087ae0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 00087ae0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 00087af0:·2223·6964·6d31·3833·3933·2220·7461·6269··"#idm18393"·tabi | 00087af0:·2223·6964·6d31·3833·3933·2220·7461·6269··"#idm18393"·tabi | ||
| 00087b00:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 00087b00:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 00087b10:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 00087b10:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 00087b20:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 00087b20:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 00087b30:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 00087b30:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 00087b40:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 00087b40:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 00087b50:·223e·5265·6d65·6469·6174·696f·6e20· | 00087b50:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | ||
| 00087b60:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 00087b70 | 00087b60:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 00087b | 00087b70:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 00087b | 00087b80:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 00087b | 00087b90:·7073·6522·2069·643d·2269·646d·3138·3339··pse"·id="idm1839 | ||
| 00087b | 00087ba0:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | ||
| 00087b | 00087bb0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 00087b | 00087bc0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 00087b | 00087bd0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 00087b | 00087be0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 00087 | 00087bf0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 00087c00:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00087c10:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00087c20:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | |||
| 00087c | 00087c30:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 00087c20:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00087c30:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | |||
| 00087c40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00087c | 00087c40:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 00087c | 00087c50:·643e·7472·7565·3c2f·7464·3e3c·2f74·723e··d>true</td></tr> | ||
| 00087c | 00087c60:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 00087c | 00087c70:·3a3c·2f74·683e·3c74·643e·6469·7361·626c··:</th><td>disabl | ||
| 00087c | 00087c80:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 00087c | 00087c90:·6c65·3e3c·7072·653e·3c63·6f64·653e·6170··le><pre><code>ap | ||
| 00087c | 00087ca0:·6956·6572·7369·6f6e·3a20·6d61·6368·696e··iVersion:·machin | ||
| 00087c | 00087cb0:·6563·6f6e·6669·6775·7261·7469·6f6e·2e6f··econfiguration.o | ||
| 00087c | 00087cc0:·7065·6e73·6869·6674·2e69·6f2f·7631·0a6b··penshift.io/v1.k | ||
| 00087c | 00087cd0:·696e·643a·204d·6163·6869·6e65·436f·6e66··ind:·MachineConf | ||
| 00087c | 00087ce0:·6967·0a73·7065·633a·0a20·2063·6f6e·6669··ig.spec:.··confi | ||
| 00087 | 00087cf0:·673a·0a20·2020·2069·676e·6974·696f·6e3a··g:.····ignition: | ||
| 00087d | 00087d00:·0a20·2020·2020·2076·6572·7369·6f6e·3a20··.······version:· | ||
| 00087d | 00087d10:·332e·312e·300a·2020·2020·7379·7374·656d··3.1.0.····system | ||
| 00087d30 | 00087d20:·643a·0a20·2020·2020·2075·6e69·7473·3a0a··d:.······units:. | ||
| 00087d30:·2020·2020·2020·2d20·6e61·6d65·3a20·626c········-·name:·bl | |||
| 00087d40:·7565·746f·6f74·682e·7365·7276·6963·650a··uetooth.service. | |||
| 00087d50:·2020·2020·2020·2020·656e·6162·6c65·643a··········enabled: | |||
| 00087d60:·2066·616c·7365·0a20·2020·2020·2020·206d···false.········m | |||
| 00087d70:·6173·6b3a·2074·7275·650a·2020·2020·2020··ask:·true.······ | |||
| 00087d | 00087d80:·2d20·6e61·6d65·3a20·626c·7565·746f·6f74··-·name:·bluetoot | ||
| 00087d50:·6f74·682e·7365·7276·6963·650a·2020·2020··oth.service.···· | |||
| 00087d60:·2020·2020·656e·6162·6c65·643a·2066·616c······enabled:·fal | |||
| Max diff block lines reached; 8582/24642 bytes (34.83%) of diff not shown. | |||
| Offset 432, 15 lines modified | Offset 432, 15 lines modified | ||
| 432 | Identifiers:·CCE-82496-1 | 432 | Identifiers:·CCE-82496-1 |
| 433 | ·············_\x8c_\x8u_\x8i····3.4.5 | 433 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 | 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 |
| 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 444 | apiVersion:·machineconfiguration.openshift.io/v1 | 444 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 445 | kind:·MachineConfig | 445 | kind:·MachineConfig |
| 446 | spec: | 446 | spec: |
| Offset 451, 15 lines modified | Offset 451, 15 lines modified | ||
| 451 | ······units: | 451 | ······units: |
| 452 | ······-·name:·debug-shell.service | 452 | ······-·name:·debug-shell.service |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | ······-·name:·debug-shell.socket | 455 | ······-·name:·debug-shell.socket |
| 456 | ········enabled:·false | 456 | ········enabled:·false |
| 457 | ········mask:·true | 457 | ········mask:·true |
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 463 | apiVersion:·machineconfiguration.openshift.io/v1 | 463 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 464 | kind:·MachineConfig | 464 | kind:·MachineConfig |
| 465 | spec: | 465 | spec: |
| Offset 1881, 15 lines modified | Offset 1881, 15 lines modified | ||
| 1881 | ············_\x8c_\x8u_\x8i············3.1.16 | 1881 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1893 | apiVersion:·machineconfiguration.openshift.io/v1 | 1893 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1894 | kind:·MachineConfig | 1894 | kind:·MachineConfig |
| 1895 | spec: | 1895 | spec: |
| Offset 1900, 15 lines modified | Offset 1900, 15 lines modified | ||
| 1900 | ······units: | 1900 | ······units: |
| 1901 | ······-·name:·bluetooth.service | 1901 | ······-·name:·bluetooth.service |
| 1902 | ········enabled:·false | 1902 | ········enabled:·false |
| 1903 | ········mask:·true | 1903 | ········mask:·true |
| 1904 | ······-·name:·bluetooth.socket | 1904 | ······-·name:·bluetooth.socket |
| 1905 | ········enabled:·false | 1905 | ········enabled:·false |
| 1906 | ········mask:·true | 1906 | ········mask:·true |
| 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1912 | apiVersion:·machineconfiguration.openshift.io/v1 | 1912 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1913 | kind:·MachineConfig | 1913 | kind:·MachineConfig |
| 1914 | spec: | 1914 | spec: |
| Offset 2218, 15 lines modified | Offset 2218, 15 lines modified | ||
| 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2230 | apiVersion:·machineconfiguration.openshift.io/v1 | 2230 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2231 | kind:·MachineConfig | 2231 | kind:·MachineConfig |
| 2232 | spec: | 2232 | spec: |
| Offset 2237, 15 lines modified | Offset 2237, 15 lines modified | ||
| 2237 | ······units: | 2237 | ······units: |
| 2238 | ······-·name:·autofs.service | 2238 | ······-·name:·autofs.service |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | ······-·name:·autofs.socket | 2241 | ······-·name:·autofs.socket |
| 2242 | ········enabled:·false | 2242 | ········enabled:·false |
| 2243 | ········mask:·true | 2243 | ········mask:·true |
| 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2249 | apiVersion:·machineconfiguration.openshift.io/v1 | 2249 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2250 | kind:·MachineConfig | 2250 | kind:·MachineConfig |
| 2251 | spec: | 2251 | spec: |
| Offset 19070, 66 lines modified | Offset 19070, 66 lines modified | ||
| 0004a7d0:·7267·6574·3d22·2369·646d·3736·3334·2220··rget="#idm7634"· | 0004a7d0:·7267·6574·3d22·2369·646d·3736·3334·2220··rget="#idm7634"· | ||
| 0004a7e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0004a7e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0004a7f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0004a7f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0004a800:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0004a800:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0004a810:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0004a810:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0004a820:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0004a820:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0004a830:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0004a830:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0004a840:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | |||
| 0004a840:·6e20·4b75·6265·726e·6574·6573·2073·6e69··n·Kubernetes·sni | |||
| 0004a850:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0004a8 | 0004a850:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0004a870 | 0004a860:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0004a8 | 0004a870:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0004a8 | 0004a880:·3736·3334·223e·3c74·6162·6c65·2063·6c61··7634"><table·cla | ||
| 0004a8 | 0004a890:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0004a8 | 0004a8a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0004a8 | 0004a8b0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0004a8 | 0004a8c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0004a8 | 0004a8d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0004a8e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0004a8f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0004a900:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | |||
| 0004a | 0004a910:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0004a900:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0004a910:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 0004a920:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0004a9 | 0004a920:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0004a9 | 0004a930:·3e3c·7464·3e74·7275·653c·2f74·643e·3c2f··><td>true</td></ | ||
| 0004a9 | 0004a940:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0004a9 | 0004a950:·6567·793a·3c2f·7468·3e3c·7464·3e64·6973··egy:</th><td>dis | ||
| 0004a9 | 0004a960:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0004a9 | 0004a970:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0004a9 | 0004a980:·3e61·7069·5665·7273·696f·6e3a·206d·6163··>apiVersion:·mac | ||
| 0004a9 | 0004a990:·6869·6e65·636f·6e66·6967·7572·6174·696f··hineconfiguratio | ||
| 0004a9 | 0004a9a0:·6e2e·6f70·656e·7368·6966·742e·696f·2f76··n.openshift.io/v | ||
| 0004a9 | 0004a9b0:·310a·6b69·6e64·3a20·4d61·6368·696e·6543··1.kind:·MachineC | ||
| 0004a9 | 0004a9c0:·6f6e·6669·670a·7370·6563·3a0a·2020·636f··onfig.spec:.··co | ||
| 0004a9 | 0004a9d0:·6e66·6967·3a0a·2020·2020·6967·6e69·7469··nfig:.····igniti | ||
| 0004a9f0 | 0004a9e0:·6f6e·3a0a·2020·2020·2020·7665·7273·696f··on:.······versio | ||
| 0004aa0 | 0004a9f0:·6e3a·2033·2e31·2e30·0a20·2020·2073·7973··n:·3.1.0.····sys | ||
| 0004aa | 0004aa00:·7465·6d64·3a0a·2020·2020·2020·756e·6974··temd:.······unit | ||
| 0004aa10:·733a·0a20·2020·2020·202d·206e·616d·653a··s:.······-·name: | |||
| 0004aa20:·2064·6562·7567·2d73·6865·6c6c·2e73·6572···debug-shell.ser | |||
| 0004aa30:·7669·6365·0a20·2020·2020·2020·2065·6e61··vice.········ena | |||
| 0004aa40:·626c·6564·3a20·6661·6c73·650a·2020·2020··bled:·false.···· | |||
| 0004aa50:·2020·2020·6d61·736b·3a20·7472·7565·0a20······mask:·true.· | |||
| 0004aa | 0004aa60:·2020·2020·202d·206e·616d·653a·2064·6562·······-·name:·deb | ||
| 0004aa30:·7567·2d73·6865·6c6c·2e73·6572·7669·6365··ug-shell.service | |||
| 0004aa40:·0a20·2020·2020·2020·2065·6e61·626c·6564··.········enabled | |||
| 0004aa50:·3a20·6661·6c73·650a·2020·2020·2020·2020··:·false.········ | |||
| 0004aa60:·6d61·736b·3a20·7472·7565·0a20·2020·2020··mask:·true.····· | |||
| 0004aa70:·202d·206e·616d·653a·2064·6562·7567·2d73···-·name:·debug-s | |||
| 0004aa | 0004aa70:·7567·2d73·6865·6c6c·2e73·6f63·6b65·740a··ug-shell.socket. | ||
| 0004aa | 0004aa80:·2020·2020·2020·2020·656e·6162·6c65·643a··········enabled: | ||
| 0004aa | 0004aa90:·2066·616c·7365·0a20·2020·2020·2020·206d···false.········m | ||
| 0004aa | 0004aaa0:·6173·6b3a·2074·7275·650a·3c2f·636f·6465··ask:·true.</code | ||
| 0004aa | 0004aab0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0004aa | 0004aac0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0004aa | 0004aad0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0004aa | 0004aae0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0004a | 0004aaf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0004ab | 0004ab00:·3736·3335·2220·7461·6269·6e64·6578·3d22··7635"·tabindex=" | ||
| 0004ab20 | 0004ab10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0004ab | 0004ab20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0004ab | 0004ab30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0004ab | 0004ab40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0004ab | 0004ab50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0004ab | 0004ab60:·6469·6174·696f·6e20·4b75·6265·726e·6574··diation·Kubernet | ||
| 0004ab70:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 0004ab80:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | 0004ab80:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0004ab90:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | 0004ab90:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0004aba0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | 0004aba0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0004abb0:·646d·3736·3335·223e·3c74·6162·6c65·2063··dm7635"><table·c | 0004abb0:·646d·3736·3335·223e·3c74·6162·6c65·2063··dm7635"><table·c | ||
| 0004abc0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | 0004abc0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0004abd0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | 0004abd0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0004abe0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | 0004abe0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| Offset 34735, 66 lines modified | Offset 34735, 66 lines modified | ||
| 00087ae0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00087ae0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00087af0:·3833·3933·2220·7461·6269·6e64·6578·3d22··8393"·tabindex=" | 00087af0:·3833·3933·2220·7461·6269·6e64·6578·3d22··8393"·tabindex=" | ||
| 00087b00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00087b00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00087b10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00087b10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00087b20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00087b20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00087b30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00087b30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00087b40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00087b40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00087b50:·6469·6174·696f·6e20·4b75·6265·726e·6574··diation·Kubernet | |||
| 00087b60:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 00087b70:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00087b80:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00087b90:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00087ba0:·646d·3138·3339·3322·3e3c·7461·626c·6520··dm18393"><table· | |||
| 00087bb0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00087bc0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00087bd0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00087be0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00087bf0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00087c00:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00087c10:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00087c20:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00087c30:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | |||
| 00087c40:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00087c50:·2f74·683e·3c74·643e·7472·7565·3c2f·7464··/th><td>true</td | |||
| 00087c60:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00087c70:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00087c80:·6469·7361·626c·653c·2f74·643e·3c2f·7472··disable</td></tr | |||
| 00087c90:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00087ca0:·6f64·653e·6170·6956·6572·7369·6f6e·3a20··ode>apiVersion:· | |||
| 00087cb0:·6d61·6368·696e·6563·6f6e·6669·6775·7261··machineconfigura | |||
| 00087cc0:·7469·6f6e·2e6f·7065·6e73·6869·6674·2e69··tion.openshift.i | |||
| 00087cd0:·6f2f·7631·0a6b·696e·643a·204d·6163·6869··o/v1.kind:·Machi | |||
| 00087ce0:·6e65·436f·6e66·6967·0a73·7065·633a·0a20··neConfig.spec:.· | |||
| 00087cf0:·2063·6f6e·6669·673a·0a20·2020·2069·676e···config:.····ign | |||
| 00087d00:·6974·696f·6e3a·0a20·2020·2020·2076·6572··ition:.······ver | |||
| 00087d10:·7369·6f6e·3a20·332e·312e·300a·2020·2020··sion:·3.1.0.···· | |||
| 00087d20:·7379·7374·656d·643a·0a20·2020·2020·2075··systemd:.······u | |||
| 00087d30:·6e69·7473·3a0a·2020·2020·2020·2d20·6e61··nits:.······-·na | |||
| 00087d40:·6d65·3a20·626c·7565·746f·6f74·682e·7365··me:·bluetooth.se | |||
| 00087d50:·7276·6963·650a·2020·2020·2020·2020·656e··rvice.········en | |||
| 00087d60:·6162·6c65·643a·2066·616c·7365·0a20·2020··abled:·false.··· | |||
| 00087d70:·2020·2020·206d·6173·6b3a·2074·7275·650a·······mask:·true. | |||
| 00087d80:·2020·2020·2020·2d20·6e61·6d65·3a20·626c········-·name:·bl | |||
| 00087d90:·7565·746f·6f74·682e·736f·636b·6574·0a20··uetooth.socket.· | |||
| 00087da0:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 00087db0:·6661·6c73·650a·2020·2020·2020·2020·6d61··false.········ma | |||
| 00087dc0:·736b·3a20·7472·7565·0a3c·2f63·6f64·653e··sk:·true.</code> | |||
| 00087dd0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00087de0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00087df0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| Max diff block lines reached; 8444/24366 bytes (34.65%) of diff not shown. | |||
| Offset 432, 15 lines modified | Offset 432, 15 lines modified | ||
| 432 | Identifiers:·CCE-82496-1 | 432 | Identifiers:·CCE-82496-1 |
| 433 | ·············_\x8c_\x8u_\x8i····3.4.5 | 433 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 | 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 |
| 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 444 | apiVersion:·machineconfiguration.openshift.io/v1 | 444 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 445 | kind:·MachineConfig | 445 | kind:·MachineConfig |
| 446 | spec: | 446 | spec: |
| Offset 451, 15 lines modified | Offset 451, 15 lines modified | ||
| 451 | ······units: | 451 | ······units: |
| 452 | ······-·name:·debug-shell.service | 452 | ······-·name:·debug-shell.service |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | ······-·name:·debug-shell.socket | 455 | ······-·name:·debug-shell.socket |
| 456 | ········enabled:·false | 456 | ········enabled:·false |
| 457 | ········mask:·true | 457 | ········mask:·true |
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 463 | apiVersion:·machineconfiguration.openshift.io/v1 | 463 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 464 | kind:·MachineConfig | 464 | kind:·MachineConfig |
| 465 | spec: | 465 | spec: |
| Offset 1881, 15 lines modified | Offset 1881, 15 lines modified | ||
| 1881 | ············_\x8c_\x8u_\x8i············3.1.16 | 1881 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1893 | apiVersion:·machineconfiguration.openshift.io/v1 | 1893 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1894 | kind:·MachineConfig | 1894 | kind:·MachineConfig |
| 1895 | spec: | 1895 | spec: |
| Offset 1900, 15 lines modified | Offset 1900, 15 lines modified | ||
| 1900 | ······units: | 1900 | ······units: |
| 1901 | ······-·name:·bluetooth.service | 1901 | ······-·name:·bluetooth.service |
| 1902 | ········enabled:·false | 1902 | ········enabled:·false |
| 1903 | ········mask:·true | 1903 | ········mask:·true |
| 1904 | ······-·name:·bluetooth.socket | 1904 | ······-·name:·bluetooth.socket |
| 1905 | ········enabled:·false | 1905 | ········enabled:·false |
| 1906 | ········mask:·true | 1906 | ········mask:·true |
| 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1912 | apiVersion:·machineconfiguration.openshift.io/v1 | 1912 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1913 | kind:·MachineConfig | 1913 | kind:·MachineConfig |
| 1914 | spec: | 1914 | spec: |
| Offset 2218, 15 lines modified | Offset 2218, 15 lines modified | ||
| 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2230 | apiVersion:·machineconfiguration.openshift.io/v1 | 2230 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2231 | kind:·MachineConfig | 2231 | kind:·MachineConfig |
| 2232 | spec: | 2232 | spec: |
| Offset 2237, 15 lines modified | Offset 2237, 15 lines modified | ||
| 2237 | ······units: | 2237 | ······units: |
| 2238 | ······-·name:·autofs.service | 2238 | ······-·name:·autofs.service |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | ······-·name:·autofs.socket | 2241 | ······-·name:·autofs.socket |
| 2242 | ········enabled:·false | 2242 | ········enabled:·false |
| 2243 | ········mask:·true | 2243 | ········mask:·true |
| 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2249 | apiVersion:·machineconfiguration.openshift.io/v1 | 2249 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2250 | kind:·MachineConfig | 2250 | kind:·MachineConfig |
| 2251 | spec: | 2251 | spec: |
| Offset 19028, 67 lines modified | Offset 19028, 67 lines modified | ||
| 0004a530:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0004a530:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0004a540:·6964·6d37·3633·3422·2074·6162·696e·6465··idm7634"·tabinde | 0004a540:·6964·6d37·3633·3422·2074·6162·696e·6465··idm7634"·tabinde | ||
| 0004a550:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0004a550:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0004a560:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0004a560:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0004a570:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0004a570:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0004a580:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0004a580:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0004a590:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0004a590:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0004a5a0:·656d·6564·6961·7469·6f6e·20 | 0004a5a0:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | ||
| 0004a5b0:·6e65·7465·7320·736e·6970·7065·7420·e287··netes·snippet·.. | |||
| 0004a5 | 0004a5b0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0004a5 | 0004a5c0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0004a5 | 0004a5d0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0004a5 | 0004a5e0:·2220·6964·3d22·6964·6d37·3633·3422·3e3c··"·id="idm7634">< | ||
| 0004a | 0004a5f0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0004a6 | 0004a600:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0004a620 | 0004a610:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0004a6 | 0004a620:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0004a6 | 0004a630:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0004a6 | 0004a640:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0004a650:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004a660:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0004a670:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | |||
| 0004a6 | 0004a680:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0004a670:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0004a680:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 0004a690:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0004a6 | 0004a690:·626f·6f74·3a3c·2f74·683e·3c74·643e·7472··boot:</th><td>tr | ||
| 0004a6 | 0004a6a0:·7565·3c2f·7464·3e3c·2f74·723e·3c74·723e··ue</td></tr><tr> | ||
| 0004a6 | 0004a6b0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0004a6 | 0004a6c0:·683e·3c74·643e·6469·7361·626c·653c·2f74··h><td>disable</t | ||
| 0004a6 | 0004a6d0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0004a6 | 0004a6e0:·7072·653e·3c63·6f64·653e·6170·6956·6572··pre><code>apiVer | ||
| 0004a | 0004a6f0:·7369·6f6e·3a20·6d61·6368·696e·6563·6f6e··sion:·machinecon | ||
| 0004a7 | 0004a700:·6669·6775·7261·7469·6f6e·2e6f·7065·6e73··figuration.opens | ||
| 0004a7 | 0004a710:·6869·6674·2e69·6f2f·7631·0a6b·696e·643a··hift.io/v1.kind: | ||
| 0004a7 | 0004a720:·204d·6163·6869·6e65·436f·6e66·6967·0a73···MachineConfig.s | ||
| 0004a7 | 0004a730:·7065·633a·0a20·2063·6f6e·6669·673a·0a20··pec:.··config:.· | ||
| 0004a7 | 0004a740:·2020·2069·676e·6974·696f·6e3a·0a20·2020·····ignition:.··· | ||
| 0004a7 | 0004a750:·2020·2076·6572·7369·6f6e·3a20·332e·312e·····version:·3.1. | ||
| 0004a7 | 0004a760:·300a·2020·2020·7379·7374·656d·643a·0a20··0.····systemd:.· | ||
| 0004a7 | 0004a770:·2020·2020·2075·6e69·7473·3a0a·2020·2020·······units:.···· | ||
| 0004a780:·2020·2d20·6e61·6d65·3a20·6465·6275·672d····-·name:·debug- | |||
| 0004a790:·7368·656c·6c2e·7365·7276·6963·650a·2020··shell.service.·· | |||
| 0004a7a0:·2020·2020·2020·656e·6162·6c65·643a·2066········enabled:·f | |||
| 0004a7b0:·616c·7365·0a20·2020·2020·2020·206d·6173··alse.········mas | |||
| 0004a7c0:·6b3a·2074·7275·650a·2020·2020·2020·2d20··k:·true.······-· | |||
| 0004a7 | 0004a7d0:·6e61·6d65·3a20·6465·6275·672d·7368·656c··name:·debug-shel | ||
| 0004a7 | 0004a7e0:·6c2e·736f·636b·6574·0a20·2020·2020·2020··l.socket.······· | ||
| 0004a7b0:·2020·656e·6162·6c65·643a·2066·616c·7365····enabled:·false | |||
| 0004a7c0:·0a20·2020·2020·2020·206d·6173·6b3a·2074··.········mask:·t | |||
| 0004a7d0:·7275·650a·2020·2020·2020·2d20·6e61·6d65··rue.······-·name | |||
| 0004a7e0:·3a20·6465·6275·672d·7368·656c·6c2e·736f··:·debug-shell.so | |||
| 0004a7f0:·636b·6574·0a20·2020·2020·2020·2065·6e61··cket.········ena | |||
| 0004a | 0004a7f0:·2065·6e61·626c·6564·3a20·6661·6c73·650a···enabled:·false. | ||
| 0004a8 | 0004a800:·2020·2020·2020·2020·6d61·736b·3a20·7472··········mask:·tr | ||
| 0004a8 | 0004a810:·7565·0a3c·2f63·6f64·653e·3c2f·7072·653e··ue.</code></pre> | ||
| 0004a8 | 0004a820:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0004a8 | 0004a830:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0004a8 | 0004a840:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0004a8 | 0004a850:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0004a8 | 0004a860:·6765·743d·2223·6964·6d37·3633·3522·2074··get="#idm7635"·t | ||
| 0004a8 | 0004a870:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0004a8 | 0004a880:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0004a8 | 0004a890:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0004a8 | 0004a8a0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0004a8 | 0004a8b0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0004a8 | 0004a8c0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0004a8d0:·204b·7562·6572·6e65·7465·7320·736e·6970···Kubernetes·snip | |||
| 0004a8e0:· | 0004a8e0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0004a8f0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | 0004a8f0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0004a900:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | 0004a900:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0004a910:·7365·2220·6964·3d22·6964·6d37·3633·3522··se"·id="idm7635" | 0004a910:·7365·2220·6964·3d22·6964·6d37·3633·3522··se"·id="idm7635" | ||
| 0004a920:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | 0004a920:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0004a930:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | 0004a930:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0004a940:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | 0004a940:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0004a950:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | 0004a950:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| Offset 34694, 66 lines modified | Offset 34694, 66 lines modified | ||
| 00087850:·6574·3d22·2369·646d·3138·3339·3322·2074··et="#idm18393"·t | 00087850:·6574·3d22·2369·646d·3138·3339·3322·2074··et="#idm18393"·t | ||
| 00087860:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 00087860:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 00087870:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 00087870:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 00087880:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 00087880:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 00087890:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 00087890:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 000878a0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 000878a0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 000878b0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 000878b0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 000878c0:·204b·7562·6572·6e65·7465·7320·736e·6970···Kubernetes·snip | |||
| 000878d0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 000878e0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 000878f0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00087900:·7365·2220·6964·3d22·6964·6d31·3833·3933··se"·id="idm18393 | |||
| 00087910:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00087920:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00087930:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00087940:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00087950:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00087960:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00087970:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00087980:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00087990:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 000879a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 000879b0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 000879c0:·3e74·7275·653c·2f74·643e·3c2f·7472·3e3c··>true</td></tr>< | |||
| 000879d0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 000879e0:·3c2f·7468·3e3c·7464·3e64·6973·6162·6c65··</th><td>disable | |||
| 000879f0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00087a00:·653e·3c70·7265·3e3c·636f·6465·3e61·7069··e><pre><code>api | |||
| 00087a10:·5665·7273·696f·6e3a·206d·6163·6869·6e65··Version:·machine | |||
| 00087a20:·636f·6e66·6967·7572·6174·696f·6e2e·6f70··configuration.op | |||
| 00087a30:·656e·7368·6966·742e·696f·2f76·310a·6b69··enshift.io/v1.ki | |||
| 00087a40:·6e64·3a20·4d61·6368·696e·6543·6f6e·6669··nd:·MachineConfi | |||
| 00087a50:·670a·7370·6563·3a0a·2020·636f·6e66·6967··g.spec:.··config | |||
| 00087a60:·3a0a·2020·2020·6967·6e69·7469·6f6e·3a0a··:.····ignition:. | |||
| 00087a70:·2020·2020·2020·7665·7273·696f·6e3a·2033········version:·3 | |||
| 00087a80:·2e31·2e30·0a20·2020·2073·7973·7465·6d64··.1.0.····systemd | |||
| 00087a90:·3a0a·2020·2020·2020·756e·6974·733a·0a20··:.······units:.· | |||
| 00087aa0:·2020·2020·202d·206e·616d·653a·2062·6c75·······-·name:·blu | |||
| 00087ab0:·6574·6f6f·7468·2e73·6572·7669·6365·0a20··etooth.service.· | |||
| 00087ac0:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 00087ad0:·6661·6c73·650a·2020·2020·2020·2020·6d61··false.········ma | |||
| 00087ae0:·736b·3a20·7472·7565·0a20·2020·2020·202d··sk:·true.······- | |||
| 00087af0:·206e·616d·653a·2062·6c75·6574·6f6f·7468···name:·bluetooth | |||
| 00087b00:·2e73·6f63·6b65·740a·2020·2020·2020·2020··.socket.········ | |||
| 00087b10:·656e·6162·6c65·643a·2066·616c·7365·0a20··enabled:·false.· | |||
| 00087b20:·2020·2020·2020·206d·6173·6b3a·2074·7275·········mask:·tru | |||
| 00087b30:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 00087b40:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00087b50:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00087b60:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| Max diff block lines reached; 8582/24642 bytes (34.83%) of diff not shown. | |||
| Offset 421, 15 lines modified | Offset 421, 15 lines modified | ||
| 421 | Identifiers:·CCE-82496-1 | 421 | Identifiers:·CCE-82496-1 |
| 422 | ·············_\x8c_\x8u_\x8i····3.4.5 | 422 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 423 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 | 423 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 |
| 424 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 424 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 425 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 425 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 426 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 426 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 427 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 427 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 433 | apiVersion:·machineconfiguration.openshift.io/v1 | 433 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 434 | kind:·MachineConfig | 434 | kind:·MachineConfig |
| 435 | spec: | 435 | spec: |
| Offset 440, 15 lines modified | Offset 440, 15 lines modified | ||
| 440 | ······units: | 440 | ······units: |
| 441 | ······-·name:·debug-shell.service | 441 | ······-·name:·debug-shell.service |
| 442 | ········enabled:·false | 442 | ········enabled:·false |
| 443 | ········mask:·true | 443 | ········mask:·true |
| 444 | ······-·name:·debug-shell.socket | 444 | ······-·name:·debug-shell.socket |
| 445 | ········enabled:·false | 445 | ········enabled:·false |
| 446 | ········mask:·true | 446 | ········mask:·true |
| 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 448 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 448 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 449 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 449 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 450 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 450 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 451 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 451 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 452 | apiVersion:·machineconfiguration.openshift.io/v1 | 452 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 453 | kind:·MachineConfig | 453 | kind:·MachineConfig |
| 454 | spec: | 454 | spec: |
| Offset 1870, 15 lines modified | Offset 1870, 15 lines modified | ||
| 1870 | ············_\x8c_\x8u_\x8i············3.1.16 | 1870 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1871 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1871 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1872 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1872 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1873 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1873 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1874 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1874 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1875 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1875 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1876 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1876 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1877 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1877 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1878 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1878 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1879 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1879 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1880 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1880 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1881 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1881 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1882 | apiVersion:·machineconfiguration.openshift.io/v1 | 1882 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1883 | kind:·MachineConfig | 1883 | kind:·MachineConfig |
| 1884 | spec: | 1884 | spec: |
| Offset 1889, 15 lines modified | Offset 1889, 15 lines modified | ||
| 1889 | ······units: | 1889 | ······units: |
| 1890 | ······-·name:·bluetooth.service | 1890 | ······-·name:·bluetooth.service |
| 1891 | ········enabled:·false | 1891 | ········enabled:·false |
| 1892 | ········mask:·true | 1892 | ········mask:·true |
| 1893 | ······-·name:·bluetooth.socket | 1893 | ······-·name:·bluetooth.socket |
| 1894 | ········enabled:·false | 1894 | ········enabled:·false |
| 1895 | ········mask:·true | 1895 | ········mask:·true |
| 1896 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1896 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1897 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1897 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1898 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1898 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1899 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1899 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1900 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1900 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1901 | apiVersion:·machineconfiguration.openshift.io/v1 | 1901 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1902 | kind:·MachineConfig | 1902 | kind:·MachineConfig |
| 1903 | spec: | 1903 | spec: |
| Offset 2207, 15 lines modified | Offset 2207, 15 lines modified | ||
| 2207 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2207 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2208 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2208 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2209 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2209 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2210 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2210 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2211 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2211 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2212 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2212 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2213 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2213 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2215 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2215 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2216 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2216 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2217 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2217 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2218 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2218 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2219 | apiVersion:·machineconfiguration.openshift.io/v1 | 2219 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2220 | kind:·MachineConfig | 2220 | kind:·MachineConfig |
| 2221 | spec: | 2221 | spec: |
| Offset 2226, 15 lines modified | Offset 2226, 15 lines modified | ||
| 2226 | ······units: | 2226 | ······units: |
| 2227 | ······-·name:·autofs.service | 2227 | ······-·name:·autofs.service |
| 2228 | ········enabled:·false | 2228 | ········enabled:·false |
| 2229 | ········mask:·true | 2229 | ········mask:·true |
| 2230 | ······-·name:·autofs.socket | 2230 | ······-·name:·autofs.socket |
| 2231 | ········enabled:·false | 2231 | ········enabled:·false |
| 2232 | ········mask:·true | 2232 | ········mask:·true |
| 2233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2237 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2237 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2238 | apiVersion:·machineconfiguration.openshift.io/v1 | 2238 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2239 | kind:·MachineConfig | 2239 | kind:·MachineConfig |
| 2240 | spec: | 2240 | spec: |
| Offset 23059, 66 lines modified | Offset 23059, 66 lines modified | ||
| 0005a120:·2d74·6172·6765·743d·2223·6964·6d32·3733··-target="#idm273 | 0005a120:·2d74·6172·6765·743d·2223·6964·6d32·3733··-target="#idm273 | ||
| 0005a130:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | 0005a130:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | ||
| 0005a140:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0005a140:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0005a150:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0005a150:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0005a160:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0005a160:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0005a170:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0005a170:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0005a180:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0005a180:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0005a190:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0005a190:·6174·696f·6e20·4b75·6265·726e·6574·6573··ation·Kubernetes | |||
| 0005a1a0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0005a1 | 0005a1a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0005a1 | 0005a1b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0005a1 | 0005a1c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0005a1 | 0005a1d0:·2269·646d·3237·3336·3622·3e3c·7461·626c··"idm27366"><tabl | ||
| 0005a1 | 0005a1e0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0005a | 0005a1f0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0005a2 | 0005a200:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0005a2 | 0005a210:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0005a2 | 0005a220:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0005a2 | 0005a230:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0005a250:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0005a260:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | |||
| 0005a270:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | |||
| 0005a280:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0005a290:·683e·3c74·643e·7472·7565·3c2f·7464·3e3c··h><td>true</td>< | |||
| 0005a2 | 0005a240:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0005a250:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0005a260:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 0005a270:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0005a280:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | |||
| 0005a290:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0005a2 | 0005a2a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0005a2 | 0005a2b0:·643e·6469·7361·626c·653c·2f74·643e·3c2f··d>disable</td></ | ||
| 0005a2 | 0005a2c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0005a2 | 0005a2d0:·3c63·6f64·653e·6170·6956·6572·7369·6f6e··<code>apiVersion | ||
| 0005a2 | 0005a2e0:·3a20·6d61·6368·696e·6563·6f6e·6669·6775··:·machineconfigu | ||
| 0005a | 0005a2f0:·7261·7469·6f6e·2e6f·7065·6e73·6869·6674··ration.openshift | ||
| 0005a3 | 0005a300:·2e69·6f2f·7631·0a6b·696e·643a·204d·6163··.io/v1.kind:·Mac | ||
| 0005a3 | 0005a310:·6869·6e65·436f·6e66·6967·0a73·7065·633a··hineConfig.spec: | ||
| 0005a3 | 0005a320:·0a20·2063·6f6e·6669·673a·0a20·2020·2069··.··config:.····i | ||
| 0005a3 | 0005a330:·676e·6974·696f·6e3a·0a20·2020·2020·2076··gnition:.······v | ||
| 0005a3 | 0005a340:·6572·7369·6f6e·3a20·332e·312e·300a·2020··ersion:·3.1.0.·· | ||
| 0005a3 | 0005a350:·2020·7379·7374·656d·643a·0a20·2020·2020····systemd:.····· | ||
| 0005a3 | 0005a360:·2075·6e69·7473·3a0a·2020·2020·2020·2d20···units:.······-· | ||
| 0005a3 | 0005a370:·6e61·6d65·3a20·7373·6864·2e73·6572·7669··name:·sshd.servi | ||
| 0005a390:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 0005a3a0:·6661·6c73·650a·2020·2020·2020·2020·6d61··false.········ma | |||
| 0005a3b0:·736b·3a20·7472·7565·0a20·2020·2020·202d··sk:·true.······- | |||
| 0005a3c0:·206e·616d·653a·2073·7368·642e·736f·636b···name:·sshd.sock | |||
| 0005a3 | 0005a380:·6365·0a20·2020·2020·2020·2065·6e61·626c··ce.········enabl | ||
| 0005a3 | 0005a390:·6564·3a20·6661·6c73·650a·2020·2020·2020··ed:·false.······ | ||
| 0005a3 | 0005a3a0:·2020·6d61·736b·3a20·7472·7565·0a20·2020····mask:·true.··· | ||
| 0005a3b0:·2020·202d·206e·616d·653a·2073·7368·642e·····-·name:·sshd. | |||
| 0005a3c0:·736f·636b·6574·0a20·2020·2020·2020·2065··socket.········e | |||
| 0005a3d0:·6e61·626c·6564·3a20·6661·6c73·650a·2020··nabled:·false.·· | |||
| 0005a3e0:·2020·2020·2020·6d61·736b·3a20·7472·7565········mask:·true | |||
| 0005a | 0005a3f0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 0005a4 | 0005a400:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 0005a420 | 0005a410:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 0005a4 | 0005a420:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 0005a4 | 0005a430:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0005a4 | 0005a440:·743d·2223·6964·6d32·3733·3637·2220·7461··t="#idm27367"·ta | ||
| 0005a4 | 0005a450:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0005a4 | 0005a460:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0005a4 | 0005a470:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0005a4 | 0005a480:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0005a4 | 0005a490:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0005a4 | 0005a4a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0005a4b0:·4b75·6265·726e·6574·6573·2073·6e69·7070··Kubernetes·snipp | |||
| 0005a4c0:· | 0005a4c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0005a4d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | 0005a4d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0005a4e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | 0005a4e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0005a4f0:·6522·2069·643d·2269·646d·3237·3336·3722··e"·id="idm27367" | 0005a4f0:·6522·2069·643d·2269·646d·3237·3336·3722··e"·id="idm27367" | ||
| 0005a500:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | 0005a500:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0005a510:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | 0005a510:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0005a520:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | 0005a520:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0005a530:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | 0005a530:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense |
| Offset 705, 15 lines modified | Offset 705, 15 lines modified | ||
| 705 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 705 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 706 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 706 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 707 | Severity: ···high | 707 | Severity: ···high |
| 708 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 708 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 709 | Identifiers:·CCE-86189-8 | 709 | Identifiers:·CCE-86189-8 |
| 710 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 710 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 711 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 711 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 713 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 713 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 714 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 714 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 715 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 715 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 716 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 716 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 717 | apiVersion:·machineconfiguration.openshift.io/v1 | 717 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 718 | kind:·MachineConfig | 718 | kind:·MachineConfig |
| 719 | spec: | 719 | spec: |
| Offset 724, 15 lines modified | Offset 724, 15 lines modified | ||
| 724 | ······units: | 724 | ······units: |
| 725 | ······-·name:·sshd.service | 725 | ······-·name:·sshd.service |
| 726 | ········enabled:·false | 726 | ········enabled:·false |
| 727 | ········mask:·true | 727 | ········mask:·true |
| 728 | ······-·name:·sshd.socket | 728 | ······-·name:·sshd.socket |
| 729 | ········enabled:·false | 729 | ········enabled:·false |
| 730 | ········mask:·true | 730 | ········mask:·true |
| 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 736 | apiVersion:·machineconfiguration.openshift.io/v1 | 736 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 737 | kind:·MachineConfig | 737 | kind:·MachineConfig |
| 738 | spec: | 738 | spec: |
| Offset 23059, 66 lines modified | Offset 23059, 66 lines modified | ||
| 0005a120:·2d74·6172·6765·743d·2223·6964·6d32·3733··-target="#idm273 | 0005a120:·2d74·6172·6765·743d·2223·6964·6d32·3733··-target="#idm273 | ||
| 0005a130:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | 0005a130:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | ||
| 0005a140:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0005a140:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0005a150:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0005a150:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0005a160:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0005a160:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0005a170:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0005a170:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0005a180:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0005a180:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0005a190:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0005a190:·6174·696f·6e20·4b75·6265·726e·6574·6573··ation·Kubernetes | |||
| 0005a1a0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0005a1 | 0005a1a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0005a1 | 0005a1b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0005a1 | 0005a1c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0005a1 | 0005a1d0:·2269·646d·3237·3336·3622·3e3c·7461·626c··"idm27366"><tabl | ||
| 0005a1 | 0005a1e0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0005a | 0005a1f0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0005a2 | 0005a200:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0005a2 | 0005a210:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0005a2 | 0005a220:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0005a2 | 0005a230:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0005a250:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0005a260:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | |||
| 0005a270:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | |||
| 0005a280:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0005a290:·683e·3c74·643e·7472·7565·3c2f·7464·3e3c··h><td>true</td>< | |||
| 0005a2 | 0005a240:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0005a250:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0005a260:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 0005a270:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0005a280:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | |||
| 0005a290:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0005a2 | 0005a2a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0005a2 | 0005a2b0:·643e·6469·7361·626c·653c·2f74·643e·3c2f··d>disable</td></ | ||
| 0005a2 | 0005a2c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0005a2 | 0005a2d0:·3c63·6f64·653e·6170·6956·6572·7369·6f6e··<code>apiVersion | ||
| 0005a2 | 0005a2e0:·3a20·6d61·6368·696e·6563·6f6e·6669·6775··:·machineconfigu | ||
| 0005a | 0005a2f0:·7261·7469·6f6e·2e6f·7065·6e73·6869·6674··ration.openshift | ||
| 0005a3 | 0005a300:·2e69·6f2f·7631·0a6b·696e·643a·204d·6163··.io/v1.kind:·Mac | ||
| 0005a3 | 0005a310:·6869·6e65·436f·6e66·6967·0a73·7065·633a··hineConfig.spec: | ||
| 0005a3 | 0005a320:·0a20·2063·6f6e·6669·673a·0a20·2020·2069··.··config:.····i | ||
| 0005a3 | 0005a330:·676e·6974·696f·6e3a·0a20·2020·2020·2076··gnition:.······v | ||
| 0005a3 | 0005a340:·6572·7369·6f6e·3a20·332e·312e·300a·2020··ersion:·3.1.0.·· | ||
| 0005a3 | 0005a350:·2020·7379·7374·656d·643a·0a20·2020·2020····systemd:.····· | ||
| 0005a3 | 0005a360:·2075·6e69·7473·3a0a·2020·2020·2020·2d20···units:.······-· | ||
| 0005a3 | 0005a370:·6e61·6d65·3a20·7373·6864·2e73·6572·7669··name:·sshd.servi | ||
| 0005a390:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 0005a3a0:·6661·6c73·650a·2020·2020·2020·2020·6d61··false.········ma | |||
| 0005a3b0:·736b·3a20·7472·7565·0a20·2020·2020·202d··sk:·true.······- | |||
| 0005a3c0:·206e·616d·653a·2073·7368·642e·736f·636b···name:·sshd.sock | |||
| 0005a3 | 0005a380:·6365·0a20·2020·2020·2020·2065·6e61·626c··ce.········enabl | ||
| 0005a3 | 0005a390:·6564·3a20·6661·6c73·650a·2020·2020·2020··ed:·false.······ | ||
| 0005a3 | 0005a3a0:·2020·6d61·736b·3a20·7472·7565·0a20·2020····mask:·true.··· | ||
| 0005a3b0:·2020·202d·206e·616d·653a·2073·7368·642e·····-·name:·sshd. | |||
| 0005a3c0:·736f·636b·6574·0a20·2020·2020·2020·2065··socket.········e | |||
| 0005a3d0:·6e61·626c·6564·3a20·6661·6c73·650a·2020··nabled:·false.·· | |||
| 0005a3e0:·2020·2020·2020·6d61·736b·3a20·7472·7565········mask:·true | |||
| 0005a | 0005a3f0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 0005a4 | 0005a400:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 0005a420 | 0005a410:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 0005a4 | 0005a420:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 0005a4 | 0005a430:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0005a4 | 0005a440:·743d·2223·6964·6d32·3733·3637·2220·7461··t="#idm27367"·ta | ||
| 0005a4 | 0005a450:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0005a4 | 0005a460:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0005a4 | 0005a470:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0005a4 | 0005a480:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0005a4 | 0005a490:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0005a4 | 0005a4a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0005a4b0:·4b75·6265·726e·6574·6573·2073·6e69·7070··Kubernetes·snipp | |||
| 0005a4c0:· | 0005a4c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0005a4d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | 0005a4d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0005a4e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | 0005a4e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0005a4f0:·6522·2069·643d·2269·646d·3237·3336·3722··e"·id="idm27367" | 0005a4f0:·6522·2069·643d·2269·646d·3237·3336·3722··e"·id="idm27367" | ||
| 0005a500:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | 0005a500:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0005a510:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | 0005a510:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0005a520:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | 0005a520:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0005a530:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | 0005a530:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense |
| Offset 705, 15 lines modified | Offset 705, 15 lines modified | ||
| 705 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 705 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 706 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 706 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 707 | Severity: ···high | 707 | Severity: ···high |
| 708 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 708 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 709 | Identifiers:·CCE-86189-8 | 709 | Identifiers:·CCE-86189-8 |
| 710 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 710 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 711 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 711 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 713 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 713 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 714 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 714 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 715 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 715 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 716 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 716 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 717 | apiVersion:·machineconfiguration.openshift.io/v1 | 717 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 718 | kind:·MachineConfig | 718 | kind:·MachineConfig |
| 719 | spec: | 719 | spec: |
| Offset 724, 15 lines modified | Offset 724, 15 lines modified | ||
| 724 | ······units: | 724 | ······units: |
| 725 | ······-·name:·sshd.service | 725 | ······-·name:·sshd.service |
| 726 | ········enabled:·false | 726 | ········enabled:·false |
| 727 | ········mask:·true | 727 | ········mask:·true |
| 728 | ······-·name:·sshd.socket | 728 | ······-·name:·sshd.socket |
| 729 | ········enabled:·false | 729 | ········enabled:·false |
| 730 | ········mask:·true | 730 | ········mask:·true |
| 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 736 | apiVersion:·machineconfiguration.openshift.io/v1 | 736 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 737 | kind:·MachineConfig | 737 | kind:·MachineConfig |
| 738 | spec: | 738 | spec: |
| Offset 23059, 65 lines modified | Offset 23059, 65 lines modified | ||
| 0005a120:·6574·3d22·2369·646d·3237·3336·3622·2074··et="#idm27366"·t | 0005a120:·6574·3d22·2369·646d·3237·3336·3622·2074··et="#idm27366"·t | ||
| 0005a130:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0005a130:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0005a140:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0005a140:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0005a150:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0005a150:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0005a160:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0005a160:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0005a170:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0005a170:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0005a180:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0005a180:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0005a190:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0005a190:·204b·7562·6572·6e65·7465·7320·736e·6970···Kubernetes·snip | |||
| 0005a1a0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0005a1 | 0005a1a0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0005a1 | 0005a1b0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0005a1 | 0005a1c0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | ||
| 0005a1 | 0005a1d0:·3733·3636·223e·3c74·6162·6c65·2063·6c61··7366"><table·cla | ||
| 0005a1 | 0005a1e0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0005a | 0005a1f0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0005a2 | 0005a200:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0005a2 | 0005a210:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0005a2 | 0005a220:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0005a230:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0005a240:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0005a250:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | |||
| 0005a2 | 0005a260:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0005a250:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0005a260:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 0005a270:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0005a2 | 0005a270:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0005a2 | 0005a280:·3e3c·7464·3e74·7275·653c·2f74·643e·3c2f··><td>true</td></ | ||
| 0005a2 | 0005a290:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0005a2 | 0005a2a0:·6567·793a·3c2f·7468·3e3c·7464·3e64·6973··egy:</th><td>dis | ||
| 0005a2 | 0005a2b0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0005a2 | 0005a2c0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0005a2e0 | 0005a2d0:·3e61·7069·5665·7273·696f·6e3a·206d·6163··>apiVersion:·mac | ||
| 0005a2 | 0005a2e0:·6869·6e65·636f·6e66·6967·7572·6174·696f··hineconfiguratio | ||
| 0005a | 0005a2f0:·6e2e·6f70·656e·7368·6966·742e·696f·2f76··n.openshift.io/v | ||
| 0005a310 | 0005a300:·310a·6b69·6e64·3a20·4d61·6368·696e·6543··1.kind:·MachineC | ||
| 0005a3 | 0005a310:·6f6e·6669·670a·7370·6563·3a0a·2020·636f··onfig.spec:.··co | ||
| 0005a3 | 0005a320:·6e66·6967·3a0a·2020·2020·6967·6e69·7469··nfig:.····igniti | ||
| 0005a3 | 0005a330:·6f6e·3a0a·2020·2020·2020·7665·7273·696f··on:.······versio | ||
| 0005a3 | 0005a340:·6e3a·2033·2e31·2e30·0a20·2020·2073·7973··n:·3.1.0.····sys | ||
| 0005a3 | 0005a350:·7465·6d64·3a0a·2020·2020·2020·756e·6974··temd:.······unit | ||
| 0005a370 | 0005a360:·733a·0a20·2020·2020·202d·206e·616d·653a··s:.······-·name: | ||
| 0005a3 | 0005a370:·2073·7368·642e·7365·7276·6963·650a·2020···sshd.service.·· | ||
| 0005a390:·2020·656e·6162·6c65·643a·2066·616c·7365····enabled:·false | |||
| 0005a3a0:·0a20·2020·2020·2020·206d·6173·6b3a·2074··.········mask:·t | |||
| 0005a3b0:·7275·650a·2020·2020·2020·2d20·6e61·6d65··rue.······-·name | |||
| 0005a3c0:·3a20·7373·6864·2e73·6f63·6b65·740a·2020··:·sshd.socket.·· | |||
| 0005a3 | 0005a380:·2020·2020·2020·656e·6162·6c65·643a·2066········enabled:·f | ||
| 0005a3 | 0005a390:·616c·7365·0a20·2020·2020·2020·206d·6173··alse.········mas | ||
| 0005a3a0:·6b3a·2074·7275·650a·2020·2020·2020·2d20··k:·true.······-· | |||
| 0005a3b0:·6e61·6d65·3a20·7373·6864·2e73·6f63·6b65··name:·sshd.socke | |||
| 0005a3c0:·740a·2020·2020·2020·2020·656e·6162·6c65··t.········enable | |||
| 0005a3d0:·643a·2066·616c·7365·0a20·2020·2020·2020··d:·false.······· | |||
| 0005a3 | 0005a3e0:·206d·6173·6b3a·2074·7275·650a·3c2f·636f···mask:·true.</co | ||
| 0005a | 0005a3f0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0005a410 | 0005a400:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0005a4 | 0005a410:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0005a4 | 0005a420:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0005a4 | 0005a430:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0005a4 | 0005a440:·646d·3237·3336·3722·2074·6162·696e·6465··dm27367"·tabinde | ||
| 0005a4 | 0005a450:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0005a4 | 0005a460:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0005a4 | 0005a470:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0005a4 | 0005a480:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0005a4 | 0005a490:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0005a4 | 0005a4a0:·656d·6564·6961·7469·6f6e·204b·7562·6572··emediation·Kuber | ||
| 0005a4b0:·6e65·7465·7320·736e·6970·7065·7420·e287··netes·snippet·.. | |||
| 0005a4c0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | 0005a4c0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0005a4d0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | 0005a4d0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0005a4e0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | 0005a4e0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0005a4f0:·3d22·6964·6d32·3733·3637·223e·3c74·6162··="idm27367"><tab | 0005a4f0:·3d22·6964·6d32·3733·3637·223e·3c74·6162··="idm27367"><tab | ||
| 0005a500:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | 0005a500:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0005a510:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | 0005a510:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0005a520:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | 0005a520:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab |
| Offset 705, 15 lines modified | Offset 705, 15 lines modified | ||
| 705 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 705 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 706 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 706 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 707 | Severity: ···high | 707 | Severity: ···high |
| 708 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 708 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 709 | Identifiers:·CCE-86189-8 | 709 | Identifiers:·CCE-86189-8 |
| 710 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 710 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 711 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 711 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 713 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 713 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 714 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 714 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 715 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 715 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 716 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 716 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 717 | apiVersion:·machineconfiguration.openshift.io/v1 | 717 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 718 | kind:·MachineConfig | 718 | kind:·MachineConfig |
| 719 | spec: | 719 | spec: |
| Offset 724, 15 lines modified | Offset 724, 15 lines modified | ||
| 724 | ······units: | 724 | ······units: |
| 725 | ······-·name:·sshd.service | 725 | ······-·name:·sshd.service |
| 726 | ········enabled:·false | 726 | ········enabled:·false |
| 727 | ········mask:·true | 727 | ········mask:·true |
| 728 | ······-·name:·sshd.socket | 728 | ······-·name:·sshd.socket |
| 729 | ········enabled:·false | 729 | ········enabled:·false |
| 730 | ········mask:·true | 730 | ········mask:·true |
| 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 736 | apiVersion:·machineconfiguration.openshift.io/v1 | 736 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 737 | kind:·MachineConfig | 737 | kind:·MachineConfig |
| 738 | spec: | 738 | spec: |
| Offset 15095, 281 lines modified | Offset 15095, 281 lines modified | ||
| 0003af60:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003af60:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003af70:·3733·3037·2220·7461·6269·6e64·6578·3d22··7307"·tabindex=" | 0003af70:·3733·3037·2220·7461·6269·6e64·6578·3d22··7307"·tabindex=" | ||
| 0003af80:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003af80:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003af90:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003af90:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003afa0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003afa0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003afb0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003afb0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003afc0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003afc0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003afd0:·6469·6174·696f·6e20· | 0003afd0:·6469·6174·696f·6e20·7363·7269·7074·20e2··diation·script·. | ||
| 0003afe0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003aff0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b000:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b010:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | |||
| 0003b020:·3037·223e·3c74·6162·6c65·2063·6c61·7373··07"><table·class | |||
| 0003b030:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b040:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b050:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b060:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b070:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b080:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b090:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b0a0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b0b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b0c0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b0d0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b0e0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b0f0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b100:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b110:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b120:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003b130:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b140:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b150:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b160:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b170:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b180:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b190:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b1a0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b1b0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b1c0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b1d0:·2223·6964·6d37·3330·3822·2074·6162·696e··"#idm7308"·tabin | |||
| 0003b1e0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b1f0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b200:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b210:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b220:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b230:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003b240:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b250:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b260:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b270:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b280:·2269·646d·3733·3038·223e·3c74·6162·6c65··"idm7308"><table | |||
| 0003b290:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b2a0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b2b0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b2c0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b2d0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b2e0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b2f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b300:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b310:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b320:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b330:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b340:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b350:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b360:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b370:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b380:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003b390:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003b3a0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003b3b0:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003b3c0:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003b3d0:·2d20·4343·452d·3930·3437·372d·310a·2020··-·CCE-90477-1.·· | |||
| 0003b3e0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b3f0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b400:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b410:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b420:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b430:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b440:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b450:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b460:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b470:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b480:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b490:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b4a0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b4b0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003b4c0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b4d0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b4e0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b4f0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b500:·2077·6865·6e3a·2027·226b·6572·6e65·6c22···when:·'"kernel" | |||
| 0003b510:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003b520:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 0003b530:·6773·3a0a·2020·2d20·4343·452d·3930·3437··gs:.··-·CCE-9047 | |||
| 0003b540:·372d·310a·2020·2d20·434a·4953·2d35·2e31··7-1.··-·CJIS-5.1 | |||
| 0003b550:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003b560:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b570:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b580:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b590:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b5a0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b5b0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b5c0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b5d0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b5e0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b5f0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b600:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b610:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b620:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b630:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b640:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b650:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b660:·7461·7267·6574·3d22·2369·646d·3733·3039··target="#idm7309 | |||
| 0003b670:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b680:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b690:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b6a0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b6b0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b6c0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b6d0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b6e0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b6f0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b700:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b710:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b720:·3d22·6964·6d37·3330·3922·3e3c·7072·653e··="idm7309"><pre> | |||
| 0003b730:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b740:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| Max diff block lines reached; 21312784/21350210 bytes (99.82%) of diff not shown. | |||
| Offset 15100, 281 lines modified | Offset 15100, 281 lines modified | ||
| 0003afb0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003afb0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003afc0:·6964·6d37·3330·3722·2074·6162·696e·6465··idm7307"·tabinde | 0003afc0:·6964·6d37·3330·3722·2074·6162·696e·6465··idm7307"·tabinde | ||
| 0003afd0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003afd0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003afe0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003afe0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003aff0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003aff0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b000:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b000:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b010:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b010:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b020:·656d·6564·6961·7469·6f6e·20 | 0003b020:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | ||
| 0003b030:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b040:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b050:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b060:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b070:·6d37·3330·3722·3e3c·7461·626c·6520·636c··m7307"><table·cl | |||
| 0003b080:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b090:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b0a0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b0b0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b0c0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b0d0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b0e0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b0f0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b100:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b110:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b120:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b130:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b140:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b150:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b160:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b170:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b180:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b190:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b1a0:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b1b0:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b1c0:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b1d0:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003b1e0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b1f0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b200:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b210:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b220:·6574·3d22·2369·646d·3733·3038·2220·7461··et="#idm7308"·ta | |||
| 0003b230:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b240:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b250:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b260:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b270:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b280:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b290:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b2a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b2b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b2c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b2d0:·6964·3d22·6964·6d37·3330·3822·3e3c·7461··id="idm7308"><ta | |||
| 0003b2e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b2f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b300:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b310:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b320:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b330:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b340:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b350:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b360:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b370:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b380:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b390:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b3a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b3b0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b3c0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b3d0:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b3e0:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b3f0:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b400:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b410:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b420:·0a20·202d·2043·4345·2d39·3034·3737·2d31··.··-·CCE-90477-1 | |||
| 0003b430:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b440:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b450:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b460:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b470:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b480:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b490:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b4a0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b4b0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b4c0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b4d0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b4e0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b4f0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b500:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b510:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b520:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b530:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b540:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b550:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003b560:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003b570:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003b580:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | |||
| 0003b590:·3034·3737·2d31·0a20·202d·2043·4a49·532d··0477-1.··-·CJIS- | |||
| 0003b5a0:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003b5b0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b5c0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b5d0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b5e0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b5f0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b600:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b610:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b620:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b630:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b640:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b650:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b660:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003b670:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b680:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b690:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b6a0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b6b0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003b6c0:·3330·3922·2074·6162·696e·6465·783d·2230··309"·tabindex="0 | |||
| 0003b6d0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b6e0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b6f0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b700:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b710:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b720:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003b730:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003b740:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b750:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b760:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b770:·2069·643d·2269·646d·3733·3039·223e·3c70···id="idm7309"><p | |||
| 0003b780:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b790:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| Max diff block lines reached; 21607679/21645105 bytes (99.83%) of diff not shown. | |||
| Offset 15091, 281 lines modified | Offset 15091, 281 lines modified | ||
| 0003af20:·2d74·6172·6765·743d·2223·6964·6d37·3330··-target="#idm730 | 0003af20:·2d74·6172·6765·743d·2223·6964·6d37·3330··-target="#idm730 | ||
| 0003af30:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | 0003af30:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | ||
| 0003af40:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003af40:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003af50:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003af50:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003af60:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003af60:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003af70:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003af70:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003af80:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003af80:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003af90:·7469·6f6e·2073·6372·6970·7420·e287·b23c··tion·script·...< | |||
| 0003af90:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003afa0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003afb0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003afc0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003afd0:·7365·2220·6964·3d22·6964·6d37·3330·3722··se"·id="idm7307" | |||
| 0003afe0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003aff0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b000:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b010:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b020:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b030:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b040:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b050:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b060:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b070:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b080:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b090:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b0a0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b0b0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b0c0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b0d0:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b0e0:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b0f0:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003b100:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b110:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b120:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b130:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003b140:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b150:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b160:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b170:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b180:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b190:·646d·3733·3038·2220·7461·6269·6e64·6578··dm7308"·tabindex | |||
| 0003b1a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b1b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b1c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b1d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b1e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b1f0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003b200:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b210:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b220:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b230:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b240:·6d37·3330·3822·3e3c·7461·626c·6520·636c··m7308"><table·cl | |||
| 0003b250:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b260:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b270:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b280:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b290:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b2a0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b2b0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b2c0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b2d0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b2e0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b2f0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b300:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b310:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b320:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b330:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b340:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003b350:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003b360:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003b370:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003b380:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003b390:·4345·2d39·3034·3737·2d31·0a20·202d·2043··CE-90477-1.··-·C | |||
| 0003b3a0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b3b0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b3c0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b3d0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b3e0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b3f0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b400:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b410:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b420:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b430:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b440:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b450:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b460:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003b470:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b480:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b490:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b4a0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b4b0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b4c0:·656e·3a20·2722·6b65·726e·656c·2220·696e··en:·'"kernel"·in | |||
| 0003b4d0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003b4e0:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003b4f0:·0a20·202d·2043·4345·2d39·3034·3737·2d31··.··-·CCE-90477-1 | |||
| 0003b500:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b510:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b520:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b530:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b540:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b550:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b560:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b570:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b580:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b590:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b5a0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b5b0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b5c0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b5d0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b5e0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b5f0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b600:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b610:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b620:·6765·743d·2223·6964·6d37·3330·3922·2074··get="#idm7309"·t | |||
| 0003b630:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b640:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b650:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b660:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b670:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b680:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b690:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b6a0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b6b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b6c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b6d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b6e0:·646d·3733·3039·223e·3c70·7265·3e3c·636f··dm7309"><pre><co | |||
| 0003b6f0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| Max diff block lines reached; 9218501/9255927 bytes (99.60%) of diff not shown. | |||
| Offset 118, 26 lines modified | Offset 118, 48 lines modified | ||
| 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ·············_\x8c_\x8i_\x8s············6.1.1 | 123 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | include·install_aide | ||
| 131 | class·install_aide·{ | ||
| 132 | ··package·{·'aide': | ||
| 133 | ····ensure·=>·'installed', | ||
| 134 | ··} | ||
| 135 | 130 | dnf·install·aide | |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | package·install·aide | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | [[packages]] | ||
| 139 | name·=·"aide" | ||
| 140 | version·=·"*" | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 147 | if·rpm·--quiet·-q·kernel;·then | ||
| 148 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 149 | ····dnf·install·-y·"aide" | ||
| 150 | fi | ||
| 151 | else | ||
| 152 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 153 | fi | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 141 | -·name:·Gather·the·package·facts | 159 | -·name:·Gather·the·package·facts |
| 142 | ··package_facts: | 160 | ··package_facts: |
| Offset 168, 55 lines modified | Offset 190, 33 lines modified | ||
| 168 | ··-·PCI-DSSv4-11.5.2 | 190 | ··-·PCI-DSSv4-11.5.2 |
| 169 | ··-·enable_strategy | 191 | ··-·enable_strategy |
| 170 | ··-·low_complexity | 192 | ··-·low_complexity |
| 171 | ··-·low_disruption | 193 | ··-·low_disruption |
| 172 | ··-·medium_severity | 194 | ··-·medium_severity |
| 173 | ··-·no_reboot_needed | 195 | ··-·no_reboot_needed |
| 174 | ··-·package_aide_installed | 196 | ··-·package_aide_installed |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | [[packages]] | ||
| 177 | name·=·"aide" | ||
| 178 | version·=·"*" | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | dnf·install·aide | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 190 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 191 | if·rpm·--quiet·-q·kernel;·then | ||
| 192 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 193 | ····dnf·install·-y·"aide" | ||
| 194 | fi | ||
| 195 | else | ||
| 196 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 197 | fi | ||
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 203 | package·--add=aide | 202 | package·--add=aide |
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 208 | include·install_aide | ||
| 209 | 209 | class·install_aide·{ | |
| 210 | ··package·{·'aide': | ||
| 211 | ····ensure·=>·'installed', | ||
| 212 | ··} | ||
| 213 | } | ||
| 210 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 214 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 211 | Run·the·following·command·to·generate·a·new·database: | 215 | Run·the·following·command·to·generate·a·new·database: |
| 212 | $·sudo·/usr/sbin/aide·--init | 216 | $·sudo·/usr/sbin/aide·--init |
| 213 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 217 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 214 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 218 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 215 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 219 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 216 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 220 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 242, 14 lines modified | Offset 242, 28 lines modified | ||
| 242 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 242 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 243 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 243 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 244 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 244 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 245 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 245 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 246 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 246 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 247 | ·············_\x8c_\x8i_\x8s············6.1.1 | 247 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 248 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 248 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 249 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 250 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 251 | if·rpm·--quiet·-q·kernel;·then | ||
| 252 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| Max diff block lines reached; 1065504/1070739 bytes (99.51%) of diff not shown. | |||
| Offset 14772, 297 lines modified | Offset 14772, 297 lines modified | ||
| 00039b30:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | 00039b30:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | ||
| 00039b40:·3630·3722·2074·6162·696e·6465·783d·2230··607"·tabindex="0 | 00039b40:·3630·3722·2074·6162·696e·6465·783d·2230··607"·tabindex="0 | ||
| 00039b50:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00039b50:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00039b60:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00039b60:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00039b70:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00039b70:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00039b80:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00039b80:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00039b90:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00039b90:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00039ba0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 00039bb0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00039bc0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00039bd0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00039be0:·6170·7365·2220·6964·3d22·6964·6d31·3036··apse"·id="idm106 | |||
| 00039bf0:·3037·223e·3c74·6162·6c65·2063·6c61·7373··07"><table·class | |||
| 00039c00:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00039 | 00039ba0:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | ||
| 00039bb0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00039bc0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00039bd0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00039be0:·3d22·6964·6d31·3036·3037·223e·3c74·6162··="idm10607"><tab | |||
| 00039bf0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00039c00:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00039c10:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00039c20:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00039c30:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00039c40:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00039c50:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00039c60:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00039c70:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039c80:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00039c90:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00039ca0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00039cb0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00039cc0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 00039cd0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00039ce0:·6f64·653e·0a64·6e66·2069·6e73·7461·6c6c··ode>.dnf·install | |||
| 00039cf0:·2064·6e66·2d61·7574·6f6d·6174·6963·0a3c···dnf-automatic.< | |||
| 00039d00:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 00039d10:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 00039d20:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 00039d30:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 00039d40:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 00039d50:·2223·6964·6d31·3036·3038·2220·7461·6269··"#idm10608"·tabi | |||
| 00039d60:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 00039d70:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 00039d80:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 00039d90:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 00039da0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 00039db0:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 00039dc0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 00039dd0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00039de0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00039df0:·7073·6522·2069·643d·2269·646d·3130·3630··pse"·id="idm1060 | |||
| 00039e00:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 00039e10:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00039 | 00039e20:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 00039c30:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00039c40:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00039c50:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00039c60:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00039c70:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00039c80:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039c90:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00039ca0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00039cb0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00039cc0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00039cd0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00039 | 00039e30:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 00039e40:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00039e50:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00039e60:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00039e70:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00039e80:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00039e90:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00039ea0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00039eb0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00039ec0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00039ed0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 00039ee0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00039ef0:·3c70·7265·3e3c·636f·6465·3e0a·7061·636b··<pre><code>.pack | |||
| 00039 | 00039f00:·6167·6520·696e·7374·616c·6c20·646e·662d··age·install·dnf- | ||
| 00039 | 00039f10:·6175·746f·6d61·7469·630a·3c2f·636f·6465··automatic.</code | ||
| 00039d10:·2069·6e73·7461·6c6c·5f64·6e66·2d61·7574···install_dnf-aut | |||
| 00039d20:·6f6d·6174·6963·207b·0a20·2070·6163·6b61··omatic·{.··packa | |||
| 00039d30:·6765·207b·2027·646e·662d·6175·746f·6d61··ge·{·'dnf-automa | |||
| 00039d40:·7469·6327·3a0a·2020·2020·656e·7375·7265··tic':.····ensure | |||
| 00039d50:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 00039d60:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 00039 | 00039f20:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 00039 | 00039f30:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 00039 | 00039f40:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 00039 | 00039f50:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 00039 | 00039f60:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 00039 | 00039f70:·3130·3630·3922·2074·6162·696e·6465·783d··10609"·tabindex= | ||
| 00039 | 00039f80:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 00039 | 00039f90:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 00039 | 00039fa0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 00039 | 00039fb0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 00039 | 00039fc0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 00039 | 00039fd0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 00039fe0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 00039ff0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003a000:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003a010:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003a020:·6522·2069·643d·2269·646d·3130·3630·3922··e"·id="idm10609" | |||
| 0003a030:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003a040:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 00039e30:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00039e40:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00039e50:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00039e60:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00039e70:·3130·3630·3822·3e3c·7461·626c·6520·636c··10608"><table·cl | |||
| 00039e80:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00039e90:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00039ea0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00039eb0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00039ec0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00039ed0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00039ee0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00039ef0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00039f00:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00039f10:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00039f20:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00039f30:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00039f40:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 00039f50:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 00039f60:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 00039f70:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| Max diff block lines reached; 2830546/2870180 bytes (98.62%) of diff not shown. | |||
| Offset 84, 26 lines modified | Offset 84, 49 lines modified | ||
| 84 | ·············suitable·for·automatic,·regular·execution. | 84 | ·············suitable·for·automatic,·regular·execution. |
| 85 | Severity: ···medium | 85 | Severity: ···medium |
| 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 87 | Identifiers:·CCE-87561-7 | 87 | Identifiers:·CCE-87561-7 |
| 88 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 88 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 96 | include·install_dnf-automatic | ||
| 96 | dnf·install·dnf-automatic | ||
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 97 | c | 102 | package·install·dnf-automatic |
| 98 | ··package·{·'dnf-automatic': | ||
| 99 | ····ensure·=>·'installed', | ||
| 100 | ··} | ||
| 101 | 103 | _.R_.e_.m_.e_.d_.i_.a_.t_.i_.o_.n_.·_.O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_.t_.·_.s_.n_.i_.p_.p_.e_.t_.·_.⇲ | |
| 104 | [[packages]] | ||
| 105 | name·=·"dnf-automatic" | ||
| 106 | version·=·"*" | ||
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 112 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 113 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 114 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 115 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 116 | ····dnf·install·-y·"dnf-automatic" | ||
| 117 | fi | ||
| 118 | else | ||
| 119 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 120 | fi | ||
| 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 103 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 104 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 105 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 106 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 107 | -·name:·Gather·the·package·facts | 126 | -·name:·Gather·the·package·facts |
| 108 | ··package_facts: | 127 | ··package_facts: |
| Offset 129, 56 lines modified | Offset 152, 33 lines modified | ||
| 129 | ··-·CCE-87561-7 | 152 | ··-·CCE-87561-7 |
| 130 | ··-·enable_strategy | 153 | ··-·enable_strategy |
| 131 | ··-·low_complexity | 154 | ··-·low_complexity |
| 132 | ··-·low_disruption | 155 | ··-·low_disruption |
| 133 | ··-·medium_severity | 156 | ··-·medium_severity |
| 134 | ··-·no_reboot_needed | 157 | ··-·no_reboot_needed |
| 135 | ··-·package_dnf-automatic_installed | 158 | ··-·package_dnf-automatic_installed |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | [[packages]] | ||
| 138 | name·=·"dnf-automatic" | ||
| 139 | version·=·"*" | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | dnf·install·dnf-automatic | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 152 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 153 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 154 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 155 | ····dnf·install·-y·"dnf-automatic" | ||
| 156 | fi | ||
| 157 | else | ||
| 158 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 159 | fi | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | package·--add=dnf-automatic | 164 | package·--add=dnf-automatic |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | include·install_dnf-automatic | ||
| 171 | class·install_dnf-automatic·{ | ||
| 171 | package· | 172 | ··package·{·'dnf-automatic': |
| 173 | ····ensure·=>·'installed', | ||
| 174 | ··} | ||
| 175 | } | ||
| 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 173 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 177 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 174 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 178 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 175 | automatic.conf. | 179 | automatic.conf. |
| 176 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 180 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 177 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 181 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 178 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 182 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 189, 14 lines modified | Offset 189, 56 lines modified | ||
| 189 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 189 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 190 | Identifiers:·CCE-86671-5 | 190 | Identifiers:·CCE-86671-5 |
| 191 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 191 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 192 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 192 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 193 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 193 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 194 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 | 194 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 |
| 195 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 195 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 197 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 198 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 199 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| Max diff block lines reached; 192277/198801 bytes (96.72%) of diff not shown. | |||
| Offset 15141, 281 lines modified | Offset 15141, 281 lines modified | ||
| 0003b240:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003b240:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b250:·743d·2223·6964·6d37·3330·3722·2074·6162··t="#idm7307"·tab | 0003b250:·743d·2223·6964·6d37·3330·3722·2074·6162··t="#idm7307"·tab | ||
| 0003b260:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003b260:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b270:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003b270:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b280:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003b280:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b290:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003b290:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b2a0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003b2a0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b2b0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003b2b0:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | ||
| 0003b2c0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b2d0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b2e0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b2f0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b300:·3d22·6964·6d37·3330·3722·3e3c·7461·626c··="idm7307"><tabl | |||
| 0003b310:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b320:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b330:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b340:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b350:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b360:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b370:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b380:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b390:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b3a0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b3b0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b3c0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b3d0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b3e0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b3f0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b400:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003b410:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003b420:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003b430:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003b440:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003b450:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003b460:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003b470:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b480:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b490:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b4a0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b4b0:·7461·7267·6574·3d22·2369·646d·3733·3038··target="#idm7308 | |||
| 0003b4c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b4d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b4e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b4f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b500:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b510:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b520:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b | 0003b2c0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 0003b | 0003b2d0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b | 0003b2e0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b | 0003b2f0:·6170·7365·2220·6964·3d22·6964·6d37·3330··apse"·id="idm730 | ||
| 0003b | 0003b300:·3722·3e3c·7461·626c·6520·636c·6173·733d··7"><table·class= | ||
| 0003b | 0003b310:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003b | 0003b320:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b | 0003b330:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003b | 0003b340:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003b5 | 0003b350:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b | 0003b360:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b | 0003b370:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003b | 0003b380:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b | 0003b390:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b | 0003b3a0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003b | 0003b3b0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003b | 0003b3c0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003b | 0003b3d0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | ||
| 0003b | 0003b3e0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003b3f0:·3c70·7265·3e3c·636f·6465·3e0a·646e·6620··<pre><code>.dnf· | |||
| 0003b400:·696e·7374·616c·6c20·6169·6465·0a3c·2f63··install·aide.</c | |||
| 0003b660:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b670:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003b680:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003b690:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003b6a0:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003b6b0:·6167·733a·0a20·202d·2043·4345·2d39·3034··ags:.··-·CCE-904 | |||
| 0003b6c0:·3737·2d31·0a20·202d·2043·4a49·532d·352e··77-1.··-·CJIS-5. | |||
| 0003b6d0:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | |||
| 0003b6e0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b6f0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b700:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b710:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b720:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b730:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b740:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b750:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b760:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b770:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b780:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b790:·7461·6c6c·6564·0a0a·2d20·6e61·6d65·3a20··talled..-·name:· | |||
| 0003b7a0:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003b7b0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003b7c0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003b7d0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003b7e0:·6573·656e·740a·2020·7768·656e·3a20·2722··esent.··when:·'" | |||
| 0003b7f0:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003b800:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003b810:·7327·0a20·2074·6167·733a·0a20·202d·2043··s'.··tags:.··-·C | |||
| 0003b820:·4345·2d39·3034·3737·2d31·0a20·202d·2043··CE-90477-1.··-·C | |||
| 0003b830:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b840:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b850:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b860:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b870:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b880:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b890:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b8a0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b8b0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b8c0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b8d0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b8e0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b8f0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b | 0003b410:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0003b | 0003b420:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003b | 0003b430:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003b | 0003b440:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0003b | 0003b450:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b | 0003b460:·6964·6d37·3330·3822·2074·6162·696e·6465··idm7308"·tabinde | ||
| 0003b | 0003b470:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b | 0003b480:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b | 0003b490:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b | 0003b4a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b | 0003b4b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b4c0:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | |||
| 0003b4d0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b4e0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b4f0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b500:·2220·6964·3d22·6964·6d37·3330·3822·3e3c··"·id="idm7308">< | |||
| 0003b510:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| Max diff block lines reached; 24336719/24374145 bytes (99.85%) of diff not shown. | |||
| Offset 15103, 281 lines modified | Offset 15103, 281 lines modified | ||
| 0003afe0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003afe0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003aff0:·646d·3733·3037·2220·7461·6269·6e64·6578··dm7307"·tabindex | 0003aff0:·646d·3733·3037·2220·7461·6269·6e64·6578··dm7307"·tabindex | ||
| 0003b000:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b000:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b010:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b010:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b020:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b020:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b030:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b030:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b040:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b040:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b050:·6d65·6469·6174·696f·6e20· | 0003b050:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | ||
| 0003b060:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b070:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b080:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b090:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b0a0:·3733·3037·223e·3c74·6162·6c65·2063·6c61··7307"><table·cla | |||
| 0003b0b0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b0c0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b0d0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b0e0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b0f0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b100:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b110:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b120:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b130:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b140:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b150:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b160:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b170:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b180:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b190:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b1a0:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b1b0:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b1c0:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b1d0:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b1e0:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b1f0:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b200:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b210:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b220:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b230:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b240:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b250:·743d·2223·6964·6d37·3330·3822·2074·6162··t="#idm7308"·tab | |||
| 0003b260:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b270:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b280:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b290:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b2a0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b2b0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b2c0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b2d0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b2e0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b2f0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b300:·643d·2269·646d·3733·3038·223e·3c74·6162··d="idm7308"><tab | |||
| 0003b310:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b320:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b330:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b340:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b350:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b360:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b370:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b380:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b390:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b3a0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b3b0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b3c0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b3d0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b3e0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b3f0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b400:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003b410:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003b420:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003b430:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003b440:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003b450:·2020·2d20·4343·452d·3930·3437·372d·310a····-·CCE-90477-1. | |||
| 0003b460:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b470:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003b480:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b490:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b4a0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b4b0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b4c0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b4d0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b4e0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b4f0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b500:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b510:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b520:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b530:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003b540:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b550:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b560:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b570:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b580:·0a20·2077·6865·6e3a·2027·226b·6572·6e65··.··when:·'"kerne | |||
| 0003b590:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | |||
| 0003b5a0:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003b5b0:·7461·6773·3a0a·2020·2d20·4343·452d·3930··tags:.··-·CCE-90 | |||
| 0003b5c0:·3437·372d·310a·2020·2d20·434a·4953·2d35··477-1.··-·CJIS-5 | |||
| 0003b5d0:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b5e0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b5f0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b600:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b610:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b620:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b630:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b640:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b650:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b660:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b670:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b680:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b690:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b6a0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b6b0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b6c0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b6d0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b6e0:·612d·7461·7267·6574·3d22·2369·646d·3733··a-target="#idm73 | |||
| 0003b6f0:·3039·2220·7461·6269·6e64·6578·3d22·3022··09"·tabindex="0" | |||
| 0003b700:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b710:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b720:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b730:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b740:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b750:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b760:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b770:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b780:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b790:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b7a0:·6964·3d22·6964·6d37·3330·3922·3e3c·7072··id="idm7309"><pr | |||
| 0003b7b0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b7c0:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| Max diff block lines reached; 11155402/11192828 bytes (99.67%) of diff not shown. | |||
| Offset 103, 26 lines modified | Offset 103, 48 lines modified | ||
| 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ·············_\x8c_\x8i_\x8s············6.1.1 | 108 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 115 | include·install_aide | ||
| 116 | class·install_aide·{ | ||
| 117 | ··package·{·'aide': | ||
| 118 | ····ensure·=>·'installed', | ||
| 119 | ··} | ||
| 120 | 115 | dnf·install·aide | |
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 121 | package·install·aide | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 132 | if·rpm·--quiet·-q·kernel;·then | ||
| 133 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 134 | ····dnf·install·-y·"aide" | ||
| 135 | fi | ||
| 136 | else | ||
| 137 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 138 | fi | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Gather·the·package·facts | 144 | -·name:·Gather·the·package·facts |
| 127 | ··package_facts: | 145 | ··package_facts: |
| Offset 153, 55 lines modified | Offset 175, 33 lines modified | ||
| 153 | ··-·PCI-DSSv4-11.5.2 | 175 | ··-·PCI-DSSv4-11.5.2 |
| 154 | ··-·enable_strategy | 176 | ··-·enable_strategy |
| 155 | ··-·low_complexity | 177 | ··-·low_complexity |
| 156 | ··-·low_disruption | 178 | ··-·low_disruption |
| 157 | ··-·medium_severity | 179 | ··-·medium_severity |
| 158 | ··-·no_reboot_needed | 180 | ··-·no_reboot_needed |
| 159 | ··-·package_aide_installed | 181 | ··-·package_aide_installed |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | dnf·install·aide | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 176 | if·rpm·--quiet·-q·kernel;·then | ||
| 177 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 178 | ····dnf·install·-y·"aide" | ||
| 179 | fi | ||
| 180 | else | ||
| 181 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 182 | fi | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 188 | package·--add=aide | 187 | package·--add=aide |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 193 | include·install_aide | ||
| 194 | 194 | class·install_aide·{ | |
| 195 | ··package·{·'aide': | ||
| 196 | ····ensure·=>·'installed', | ||
| 197 | ··} | ||
| 198 | } | ||
| 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 196 | Run·the·following·command·to·generate·a·new·database: | 200 | Run·the·following·command·to·generate·a·new·database: |
| 197 | $·sudo·/usr/sbin/aide·--init | 201 | $·sudo·/usr/sbin/aide·--init |
| 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 199 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 203 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 200 | To·initiate·a·manual·check,·run·the·following·command: | 204 | To·initiate·a·manual·check,·run·the·following·command: |
| 201 | $·sudo·/usr/sbin/aide·--check | 205 | $·sudo·/usr/sbin/aide·--check |
| Offset 220, 14 lines modified | Offset 220, 28 lines modified | ||
| 220 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 220 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 221 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 221 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 222 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 222 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 223 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 223 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 224 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 224 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 225 | ·············_\x8c_\x8i_\x8s············6.1.1 | 225 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 226 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 226 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 228 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 229 | if·rpm·--quiet·-q·kernel;·then | ||
| 230 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| Max diff block lines reached; 1309822/1315206 bytes (99.59%) of diff not shown. | |||
| Offset 15094, 281 lines modified | Offset 15094, 281 lines modified | ||
| 0003af50:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003af50:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003af60:·6964·6d37·3330·3722·2074·6162·696e·6465··idm7307"·tabinde | 0003af60:·6964·6d37·3330·3722·2074·6162·696e·6465··idm7307"·tabinde | ||
| 0003af70:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003af70:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003af80:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003af80:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003af90:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003af90:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003afa0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003afa0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003afb0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003afb0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003afc0:·656d·6564·6961·7469·6f6e·20 | 0003afc0:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | ||
| 0003afd0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003afe0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003aff0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b000:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b010:·6d37·3330·3722·3e3c·7461·626c·6520·636c··m7307"><table·cl | |||
| 0003b020:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b030:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b040:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b050:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b060:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b070:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b080:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b090:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b0a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b0b0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b0c0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b0d0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b0e0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b0f0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b100:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b110:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b120:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b130:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b140:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b150:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b160:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b170:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003b180:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b190:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b1a0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b1b0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b1c0:·6574·3d22·2369·646d·3733·3038·2220·7461··et="#idm7308"·ta | |||
| 0003b1d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b1e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b1f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b200:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b210:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b220:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b230:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b240:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b250:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b260:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b270:·6964·3d22·6964·6d37·3330·3822·3e3c·7461··id="idm7308"><ta | |||
| 0003b280:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b290:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b2a0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b2b0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b2c0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b2d0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b2e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b2f0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b300:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b310:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b320:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b330:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b340:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b350:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b360:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b370:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b380:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b390:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b3a0:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b3b0:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b3c0:·0a20·202d·2043·4345·2d39·3034·3737·2d31··.··-·CCE-90477-1 | |||
| 0003b3d0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b3e0:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b3f0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b400:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b410:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b420:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b430:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b440:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b450:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b460:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b470:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b480:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b490:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b4a0:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b4b0:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b4c0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b4d0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b4e0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b4f0:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003b500:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003b510:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003b520:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | |||
| 0003b530:·3034·3737·2d31·0a20·202d·2043·4a49·532d··0477-1.··-·CJIS- | |||
| 0003b540:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003b550:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b560:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b570:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b580:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b590:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b5a0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b5b0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b5c0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b5d0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b5e0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b5f0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b600:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003b610:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b620:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b630:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b640:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b650:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003b660:·3330·3922·2074·6162·696e·6465·783d·2230··309"·tabindex="0 | |||
| 0003b670:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b680:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b690:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b6a0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b6b0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b6c0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003b6d0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003b6e0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b6f0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b700:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b710:·2069·643d·2269·646d·3733·3039·223e·3c70···id="idm7309"><p | |||
| 0003b720:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b730:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| Max diff block lines reached; 10769245/10806671 bytes (99.65%) of diff not shown. | |||
| Offset 101, 26 lines modified | Offset 101, 48 lines modified | ||
| 101 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 101 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 102 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 102 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 106 | ·············_\x8c_\x8i_\x8s············6.1.1 | 106 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 113 | include·install_aide | ||
| 114 | class·install_aide·{ | ||
| 115 | ··package·{·'aide': | ||
| 116 | ····ensure·=>·'installed', | ||
| 117 | ··} | ||
| 118 | 113 | dnf·install·aide | |
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 119 | package·install·aide | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 130 | if·rpm·--quiet·-q·kernel;·then | ||
| 131 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 132 | ····dnf·install·-y·"aide" | ||
| 133 | fi | ||
| 134 | else | ||
| 135 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 136 | fi | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 124 | -·name:·Gather·the·package·facts | 142 | -·name:·Gather·the·package·facts |
| 125 | ··package_facts: | 143 | ··package_facts: |
| Offset 151, 55 lines modified | Offset 173, 33 lines modified | ||
| 151 | ··-·PCI-DSSv4-11.5.2 | 173 | ··-·PCI-DSSv4-11.5.2 |
| 152 | ··-·enable_strategy | 174 | ··-·enable_strategy |
| 153 | ··-·low_complexity | 175 | ··-·low_complexity |
| 154 | ··-·low_disruption | 176 | ··-·low_disruption |
| 155 | ··-·medium_severity | 177 | ··-·medium_severity |
| 156 | ··-·no_reboot_needed | 178 | ··-·no_reboot_needed |
| 157 | ··-·package_aide_installed | 179 | ··-·package_aide_installed |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"aide" | ||
| 161 | version·=·"*" | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 167 | dnf·install·aide | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 174 | if·rpm·--quiet·-q·kernel;·then | ||
| 175 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 176 | ····dnf·install·-y·"aide" | ||
| 177 | fi | ||
| 178 | else | ||
| 179 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 180 | fi | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 186 | package·--add=aide | 185 | package·--add=aide |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 191 | include·install_aide | ||
| 192 | 192 | class·install_aide·{ | |
| 193 | ··package·{·'aide': | ||
| 194 | ····ensure·=>·'installed', | ||
| 195 | ··} | ||
| 196 | } | ||
| 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 197 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 194 | Run·the·following·command·to·generate·a·new·database: | 198 | Run·the·following·command·to·generate·a·new·database: |
| 195 | $·sudo·/usr/sbin/aide·--init | 199 | $·sudo·/usr/sbin/aide·--init |
| 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 200 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 197 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 201 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 198 | To·initiate·a·manual·check,·run·the·following·command: | 202 | To·initiate·a·manual·check,·run·the·following·command: |
| 199 | $·sudo·/usr/sbin/aide·--check | 203 | $·sudo·/usr/sbin/aide·--check |
| Offset 218, 14 lines modified | Offset 218, 28 lines modified | ||
| 218 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 218 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 219 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 219 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 220 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 220 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 222 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 222 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 223 | ·············_\x8c_\x8i_\x8s············6.1.1 | 223 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 224 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 224 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 226 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 227 | if·rpm·--quiet·-q·kernel;·then | ||
| 228 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| Max diff block lines reached; 1258217/1263601 bytes (99.57%) of diff not shown. | |||
| Offset 15133, 281 lines modified | Offset 15133, 281 lines modified | ||
| 0003b1c0:·7461·7267·6574·3d22·2369·646d·3733·3037··target="#idm7307 | 0003b1c0:·7461·7267·6574·3d22·2369·646d·3733·3037··target="#idm7307 | ||
| 0003b1d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b1d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b1e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b1e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b1f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b1f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b200:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b200:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b210:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b210:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b220:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b220:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b230:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0003b230:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b240:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b250:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b260:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b270:·6522·2069·643d·2269·646d·3733·3037·223e··e"·id="idm7307"> | |||
| 0003b280:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b290:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b2a0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b2b0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b2c0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b2d0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b2e0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b2f0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b300:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b310:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b320:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b330:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b340:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b350:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b360:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b370:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b380:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b390:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b3a0:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b3b0:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b3c0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b3d0:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b3e0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b3f0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b400:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b410:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b420:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b430:·6d37·3330·3822·2074·6162·696e·6465·783d··m7308"·tabindex= | |||
| 0003b440:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b450:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b460:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b470:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b480:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b490:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b4a0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b | 0003b240:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b | 0003b250:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b | 0003b260:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b | 0003b270:·646d·3733·3037·223e·3c74·6162·6c65·2063··dm7307"><table·c | ||
| 0003b | 0003b280:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b | 0003b290:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b | 0003b2a0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b | 0003b2b0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003b | 0003b2c0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003b | 0003b2d0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b | 0003b2e0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b | 0003b2f0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b | 0003b300:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b | 0003b310:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b | 0003b320:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b | 0003b330:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b | 0003b340:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003b | 0003b350:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003b | 0003b360:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b370:·0a64·6e66·2069·6e73·7461·6c6c·2061·6964··.dnf·install·aid | |||
| 0003b5e0:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003b5f0:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003b600:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003b610:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003b620:·6f0a·2020·7461·6773·3a0a·2020·2d20·4343··o.··tags:.··-·CC | |||
| 0003b630:·452d·3930·3437·372d·310a·2020·2d20·434a··E-90477-1.··-·CJ | |||
| 0003b640:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b650:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b660:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b670:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b680:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b690:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b6a0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b6b0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b6c0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b6d0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b6e0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b6f0:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b700:·655f·696e·7374·616c·6c65·640a·0a2d·206e··e_installed..-·n | |||
| 0003b710:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b720:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b730:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b740:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b750:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b760:·6e3a·2027·226b·6572·6e65·6c22·2069·6e20··n:·'"kernel"·in· | |||
| 0003b770:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003b780:·636b·6167·6573·270a·2020·7461·6773·3a0a··ckages'.··tags:. | |||
| 0003b790:·2020·2d20·4343·452d·3930·3437·372d·310a····-·CCE-90477-1. | |||
| 0003b7a0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b7b0:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003b7c0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b7d0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b7e0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b7f0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b800:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b810:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b820:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b830:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b840:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b850:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b860:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b | 0003b380:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | ||
| 0003b | 0003b390:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003b | 0003b3a0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003b | 0003b3b0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003b | 0003b3c0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003b | 0003b3d0:·6574·3d22·2369·646d·3733·3038·2220·7461··et="#idm7308"·ta | ||
| 0003b | 0003b3e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b | 0003b3f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b | 0003b400:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b | 0003b410:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b | 0003b420:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b | 0003b430:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b440:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b450:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b460:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b470:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | |||
| 0003b480:·3038·223e·3c74·6162·6c65·2063·6c61·7373··08"><table·class | |||
| 0003b490:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| Max diff block lines reached; 24160895/24198321 bytes (99.85%) of diff not shown. | |||
| Offset 15182, 414 lines modified | Offset 15182, 414 lines modified | ||
| 0003b4d0:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | 0003b4d0:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | ||
| 0003b4e0:·3936·3622·2074·6162·696e·6465·783d·2230··966"·tabindex="0 | 0003b4e0:·3936·3622·2074·6162·696e·6465·783d·2230··966"·tabindex="0 | ||
| 0003b4f0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b4f0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b500:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b500:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b510:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b510:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b520:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b520:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b530:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b530:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b540:·6961·7469·6f6e·20 | 0003b540:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 0003b550:·6 | 0003b550:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003b560:· | 0003b560:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b570:· | 0003b570:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b580:· | 0003b580:·7365·2220·6964·3d22·6964·6d36·3936·3622··se"·id="idm6966" | ||
| 0003b590:·3 | 0003b590:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | ||
| 0003b5a0:· | 0003b5a0:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | ||
| 0003b5b0:· | 0003b5b0:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | ||
| 0003b5c0:·6 | 0003b5c0:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | ||
| 0003b5d0:· | 0003b5d0:·730a·6966·2021·2028·207b·2072·706d·202d··s.if·!·(·{·rpm·- | ||
| 0003b5e0:· | 0003b5e0:·2d71·7569·6574·202d·7120·6b65·726e·656c··-quiet·-q·kernel | ||
| 0003b5f0:· | 0003b5f0:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b600:· | 0003b600:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b610:· | 0003b610:·7270·6d2d·6f73·7472·6565·203b·7d20·2661··rpm-ostree·;}·&a | ||
| 0003b620:· | 0003b620:·6d70·3b26·616d·703b·207b·2072·706d·202d··mp;&·{·rpm·- | ||
| 0003b630:· | 0003b630:·2d71·7569·6574·202d·7120·626f·6f74·6320··-quiet·-q·bootc· | ||
| 0003b640:·3 | 0003b640:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003b650:· | 0003b650:·2120·7270·6d20·2d2d·7175·6965·7420·2d71··!·rpm·--quiet·-q | ||
| 0003b660:· | 0003b660:·206f·7065·6e73·6869·6674·2d6b·7562·656c···openshift-kubel | ||
| 0003b670:·74 | 0003b670:·6574·203b·7d20·293b·2074·6865·6e0a·0a23··et·;}·);·then..# | ||
| 0003b680:·2 | 0003b680:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | ||
| 0003b690:· | 0003b690:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | ||
| 0003b6a0:·20 | 0003b6a0:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | ||
| 0003b6b0:·74 | 0003b6b0:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | ||
| 0003b6c0:· | 0003b6c0:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | ||
| 0003b6d0:·206 | 0003b6d0:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | ||
| 0003b6e0:· | 0003b6e0:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | ||
| 0003b6f0:· | 0003b6f0:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | ||
| 0003b700:· | 0003b700:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b710:· | 0003b710:·7368·3d22·2428·7270·6d20·2d56·6120·2d2d··sh="$(rpm·-Va·-- | ||
| 0003b720:· | 0003b720:·6e6f·636f·6e66·6967·207c·2067·7265·7020··noconfig·|·grep· | ||
| 0003b730:·2d | 0003b730:·2d45·2027·5e2e·2e35·2720·7c20·6177·6b20··-E·'^..5'·|·awk· | ||
| 0003b740:·2 | 0003b740:·277b·7072·696e·7420·244e·467d·2720·2922··'{print·$NF}'·)" | ||
| 0003b750:· | 0003b750:·0a0a·6966·205b·202d·6e20·2224·6669·6c65··..if·[·-n·"$file | ||
| 0003b760:· | 0003b760:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003b770:· | 0003b770:·5f68·6173·6822·205d·3b20·7468·656e·0a20··_hash"·];·then.· | ||
| 0003b780:· | 0003b780:·2020·2023·2046·726f·6d20·6669·6c65·7320·····#·From·files· | ||
| 0003b790:· | 0003b790:·6e61·6d65·7320·6765·7420·7061·636b·6167··names·get·packag | ||
| 0003b7a0:· | 0003b7a0:·6520·6e61·6d65·7320·616e·6420·6368·616e··e·names·and·chan | ||
| 0003b7b0:· | 0003b7b0:·6765·206e·6577·6c69·6e65·2074·6f20·7370··ge·newline·to·sp | ||
| 0003b7c0:· | 0003b7c0:·6163·652c·2062·6563·6175·7365·2072·706d··ace,·because·rpm | ||
| 0003b7d0:·20 | 0003b7d0:·2077·7269·7465·7320·6561·6368·2070·6163···writes·each·pac | ||
| 0003b7e0:· | 0003b7e0:·6b61·6765·2074·6f20·6e65·7720·6c69·6e65··kage·to·new·line | ||
| 0003b7f0:· | 0003b7f0:·0a20·2020·2070·6163·6b61·6765·735f·746f··.····packages_to | ||
| 0003b800:· | 0003b800:·5f72·6569·6e73·7461·6c6c·3d22·2428·7270··_reinstall="$(rp | ||
| 0003b810:·6 | 0003b810:·6d20·2d71·6620·2466·696c·6573·5f77·6974··m·-qf·$files_wit | ||
| 0003b820:· | 0003b820:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b830:· | 0003b830:·207c·2074·7220·275c·6e27·2027·2027·2922···|·tr·'\n'·'·')" | ||
| 0003b840:· | 0003b840:·0a0a·2020·2020·0a20·2020·2064·6e66·2072··..····.····dnf·r | ||
| 0003b850:· | 0003b850:·6569·6e73·7461·6c6c·202d·7920·2470·6163··einstall·-y·$pac | ||
| 0003b860:· | 0003b860:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | ||
| 0003b870:·6 | 0003b870:·6c6c·0a20·2020·200a·6669·0a0a·656c·7365··ll.····.fi..else | ||
| 0003b880:· | 0003b880:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | ||
| 0003b890:·6 | 0003b890:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | ||
| 0003b8a0:·6 | 0003b8a0:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | ||
| 0003b8b0:· | 0003b8b0:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | ||
| 0003b8c0:· | 0003b8c0:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | ||
| 0003b8d0:· | 0003b8d0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003b8e0:· | 0003b8e0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003b8f0:· | 0003b8f0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003b900:·6 | 0003b900:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003b910:·6 | 0003b910:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b920:· | 0003b920:·3639·3637·2220·7461·6269·6e64·6578·3d22··6967"·tabindex=" | ||
| 0003b930:· | 0003b930:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b940:·20 | 0003b940:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b950:·6 | 0003b950:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b960:· | 0003b960:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b970:· | 0003b970:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b980:·6 | 0003b980:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b990:·7 | 0003b990:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003b9a0:·2 | 0003b9a0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b9b0:·6 | 0003b9b0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b9c0:·6 | 0003b9c0:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | ||
| 0003b9d0:· | 0003b9d0:·3936·3722·3e3c·7461·626c·6520·636c·6173··967"><table·clas | ||
| 0003b9e0:· | 0003b9e0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b9f0:·7 | 0003b9f0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003ba00:· | 0003ba00:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003ba10:· | 0003ba10:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003ba20:· | 0003ba20:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003ba30:·4 | 0003ba30:·7464·3e68·6967·683c·2f74·643e·3c2f·7472··td>high</td></tr | ||
| 0003ba40:· | 0003ba40:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003ba50:· | 0003ba50:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 0003ba60:· | 0003ba60:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0003ba70:· | 0003ba70:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003ba80:·3 | 0003ba80:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003ba90:· | 0003ba90:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003baa0:· | 0003baa0:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 0003bab0:· | 0003bab0:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 0003bac0:· | 0003bac0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003bad0:· | 0003bad0:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | ||
| 0003bae0:· | 0003bae0:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | ||
| 0003baf0:· | 0003baf0:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | ||
| 0003bb00:·6 | 0003bb00:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | ||
| 0003bb10:· | 0003bb10:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | ||
| 0003bb20:·202 | 0003bb20:·202d·2043·4345·2d38·3939·3434·2d33·0a20···-·CCE-89944-3.· | ||
| 0003bb30:· | 0003bb30:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003bb40:· | 0003bb40:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003bb50:· | 0003bb50:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | ||
| 0003bb60:· | 0003bb60:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | ||
| 0003bb70:· | 0003bb70:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 0003bb80:· | 0003bb80:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | ||
| 0003bb90:· | 0003bb90:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | ||
| 0003bba0:· | 0003bba0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003bbb0:· | 0003bbb0:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | ||
| 0003bbc0:· | 0003bbc0:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | ||
| 0003bbd0:· | 0003bbd0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003bbe0:· | 0003bbe0:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | ||
| 0003bbf0:·2d | 0003bbf0:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | ||
| 0003bc00:· | 0003bc00:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | ||
| 0003bc10:· | 0003bc10:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 0003bc20:· | 0003bc20:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | ||
| 0003bc30:· | 0003bc30:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | ||
| 0003bc40:·6 | 0003bc40:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | ||
| 0003bc50:·6 | 0003bc50:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | ||
| 0003bc60:·6 | 0003bc60:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | ||
| 0003bc70:· | 0003bc70:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | ||
| 0003bc80:·6 | 0003bc80:·6963·745f·7374·7261·7465·6779·0a20·202d··ict_strategy.··- | ||
| 0003bc90:· | 0003bc90:·2072·706d·5f76·6572·6966·795f·6861·7368···rpm_verify_hash | ||
| 0003bca0:·6 | 0003bca0:·6573·0a0a·2d20·6e61·6d65·3a20·2753·6574··es..-·name:·'Set | ||
| Max diff block lines reached; 6381607/6437387 bytes (99.13%) of diff not shown. | |||
| Offset 103, 14 lines modified | Offset 103, 33 lines modified | ||
| 103 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 103 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 104 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 104 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 111 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 112 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 113 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 114 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 115 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 116 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 117 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 118 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 119 | fi | ||
| 120 | else | ||
| 121 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 122 | fi | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 115 | -·name:·Gather·the·package·facts | 128 | -·name:·Gather·the·package·facts |
| 116 | ··package_facts: | 129 | ··package_facts: |
| Offset 283, 33 lines modified | Offset 302, 14 lines modified | ||
| 283 | ··-·PCI-DSSv4-11.5.2 | 302 | ··-·PCI-DSSv4-11.5.2 |
| 284 | ··-·high_complexity | 303 | ··-·high_complexity |
| 285 | ··-·high_severity | 304 | ··-·high_severity |
| 286 | ··-·medium_disruption | 305 | ··-·medium_disruption |
| 287 | ··-·no_reboot_needed | 306 | ··-·no_reboot_needed |
| 288 | ··-·restrict_strategy | 307 | ··-·restrict_strategy |
| 289 | ··-·rpm_verify_hashes | 308 | ··-·rpm_verify_hashes |
| 290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 291 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 292 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 293 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 294 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 295 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 296 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 297 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 298 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 299 | fi | ||
| 300 | else | ||
| 301 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 302 | fi | ||
| 303 | Group ·System·Cryptographic·Policies· Group·contains·2·rules | 309 | Group ·System·Cryptographic·Policies· Group·contains·2·rules |
| 304 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 310 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 305 | ····*·GnuTLS·library | 311 | ····*·GnuTLS·library |
| 306 | ····*·OpenSSL·library | 312 | ····*·OpenSSL·library |
| 307 | ····*·NSS·library | 313 | ····*·NSS·library |
| 308 | ····*·OpenJDK | 314 | ····*·OpenJDK |
| 309 | ····*·Libkrb5 | 315 | ····*·Libkrb5 |
| Offset 331, 14 lines modified | Offset 331, 58 lines modified | ||
| 331 | ·············_\x8i_\x8s_\x8m······1446 | 331 | ·············_\x8i_\x8s_\x8m······1446 |
| 332 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 332 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 333 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 333 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 334 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 334 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 335 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 335 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 336 | ·············_\x8c_\x8i_\x8s······1.6.1 | 336 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 337 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 337 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 339 | var_system_crypto_policy='DEFAULT' | ||
| 340 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 341 | rc=$? | ||
| 342 | if·test·"$rc"·=·127;·then | ||
| 343 | » echo·"$stderr_of_call"·>&2 | ||
| 344 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 345 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 346 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 347 | » false··#·end·with·an·error·code | ||
| 348 | elif·test·"$rc"·!=·0;·then | ||
| 349 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 350 | » false··#·end·with·an·error·code | ||
| 351 | fi | ||
| 352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 353 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 354 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 355 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 356 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 357 | --- | ||
| 358 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 359 | kind:·MachineConfig | ||
| 360 | spec: | ||
| 361 | ··config: | ||
| 362 | ····ignition: | ||
| 363 | ······version:·3.1.0 | ||
| 364 | ····systemd: | ||
| 365 | ······units: | ||
| 366 | ········-·name:·configure-crypto-policy.service | ||
| 367 | ··········enabled:·true | ||
| 368 | ··········contents:·| | ||
| 369 | ············[Unit] | ||
| 370 | ············Before=kubelet.service | ||
| 371 | ············[Service] | ||
| 372 | ············Type=oneshot | ||
| 373 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 374 | ············RemainAfterExit=yes | ||
| 375 | ············[Install] | ||
| 376 | ············WantedBy=multi-user.target | ||
| 338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 377 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 339 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 378 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 340 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 379 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 341 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 380 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 342 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 381 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 343 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 382 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 344 | ··set_fact: | 383 | ··set_fact: |
| Offset 385, 58 lines modified | Offset 429, 14 lines modified | ||
| Max diff block lines reached; 718041/724004 bytes (99.18%) of diff not shown. | |||
| Offset 15208, 414 lines modified | Offset 15208, 414 lines modified | ||
| 0003b670:·2d74·6172·6765·743d·2223·6964·6d36·3936··-target="#idm696 | 0003b670:·2d74·6172·6765·743d·2223·6964·6d36·3936··-target="#idm696 | ||
| 0003b680:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | 0003b680:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | ||
| 0003b690:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b690:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b6a0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b6a0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b6b0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b6b0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b6c0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b6c0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b6d0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b6d0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b6e0:·7469·6f6e·20 | 0003b6e0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | ||
| 0003b6f0:·7 | 0003b6f0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b700:· | 0003b700:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b710:·6 | 0003b710:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b720:· | 0003b720:·2220·6964·3d22·6964·6d36·3936·3622·3e3c··"·id="idm6966">< | ||
| 0003b730:·2 | 0003b730:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 0003b740:· | 0003b740:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 0003b750:· | 0003b750:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | ||
| 0003b760:· | 0003b760:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | ||
| 0003b770:·6 | 0003b770:·6966·2021·2028·207b·2072·706d·202d·2d71··if·!·(·{·rpm·--q | ||
| 0003b780:· | 0003b780:·7569·6574·202d·7120·6b65·726e·656c·203b··uiet·-q·kernel·; | ||
| 0003b790:· | 0003b790:·7d20·2661·6d70·3b26·616d·703b·207b·2072··}·&&·{·r | ||
| 0003b7a0:·7 | 0003b7a0:·706d·202d·2d71·7569·6574·202d·7120·7270··pm·--quiet·-q·rp | ||
| 0003b7b0:· | 0003b7b0:·6d2d·6f73·7472·6565·203b·7d20·2661·6d70··m-ostree·;}·& | ||
| 0003b7c0:·3 | 0003b7c0:·3b26·616d·703b·207b·2072·706d·202d·2d71··;&·{·rpm·--q | ||
| 0003b7d0:· | 0003b7d0:·7569·6574·202d·7120·626f·6f74·6320·3b7d··uiet·-q·bootc·;} | ||
| 0003b7e0:· | 0003b7e0:·2026·616d·703b·2661·6d70·3b20·7b20·2120···&&·{·!· | ||
| 0003b7f0:· | 0003b7f0:·7270·6d20·2d2d·7175·6965·7420·2d71·206f··rpm·--quiet·-q·o | ||
| 0003b800:·7 | 0003b800:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | ||
| 0003b810:· | 0003b810:·203b·7d20·293b·2074·6865·6e0a·0a23·2046···;}·);·then..#·F | ||
| 0003b820:·6 | 0003b820:·696e·6420·7768·6963·6820·6669·6c65·7320··ind·which·files· | ||
| 0003b830:· | 0003b830:·6861·7665·2069·6e63·6f72·7265·6374·2068··have·incorrect·h | ||
| 0003b840:·6 | 0003b840:·6173·6820·286e·6f74·2069·6e20·2f65·7463··ash·(not·in·/etc | ||
| 0003b850:· | 0003b850:·2c20·6265·6361·7573·6520·6f66·2074·6865··,·because·of·the | ||
| 0003b860:· | 0003b860:·2073·7973·7465·6d20·7265·6c61·7465·6420···system·related· | ||
| 0003b870:· | 0003b870:·636f·6e66·6967·2066·696c·6573·2920·616e··config·files)·an | ||
| 0003b880:· | 0003b880:·6420·7468·656e·2067·6574·2066·696c·6573··d·then·get·files | ||
| 0003b890:· | 0003b890:·206e·616d·6573·0a66·696c·6573·5f77·6974···names.files_wit | ||
| 0003b8a0:· | 0003b8a0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b8b0:· | 0003b8b0:·3d22·2428·7270·6d20·2d56·6120·2d2d·6e6f··="$(rpm·-Va·--no | ||
| 0003b8c0:· | 0003b8c0:·636f·6e66·6967·207c·2067·7265·7020·2d45··config·|·grep·-E | ||
| 0003b8d0:· | 0003b8d0:·2027·5e2e·2e35·2720·7c20·6177·6b20·277b···'^..5'·|·awk·'{ | ||
| 0003b8e0:· | 0003b8e0:·7072·696e·7420·244e·467d·2720·2922·0a0a··print·$NF}'·)".. | ||
| 0003b8f0:· | 0003b8f0:·6966·205b·202d·6e20·2224·6669·6c65·735f··if·[·-n·"$files_ | ||
| 0003b900:· | 0003b900:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003b910:· | 0003b910:·6173·6822·205d·3b20·7468·656e·0a20·2020··ash"·];·then.··· | ||
| 0003b920:·2 | 0003b920:·2023·2046·726f·6d20·6669·6c65·7320·6e61···#·From·files·na | ||
| 0003b930:· | 0003b930:·6d65·7320·6765·7420·7061·636b·6167·6520··mes·get·package· | ||
| 0003b940:· | 0003b940:·6e61·6d65·7320·616e·6420·6368·616e·6765··names·and·change | ||
| 0003b950:·2 | 0003b950:·206e·6577·6c69·6e65·2074·6f20·7370·6163···newline·to·spac | ||
| 0003b960:· | 0003b960:·652c·2062·6563·6175·7365·2072·706d·2077··e,·because·rpm·w | ||
| 0003b970:· | 0003b970:·7269·7465·7320·6561·6368·2070·6163·6b61··rites·each·packa | ||
| 0003b980:· | 0003b980:·6765·2074·6f20·6e65·7720·6c69·6e65·0a20··ge·to·new·line.· | ||
| 0003b990:· | 0003b990:·2020·2070·6163·6b61·6765·735f·746f·5f72·····packages_to_r | ||
| 0003b9a0:· | 0003b9a0:·6569·6e73·7461·6c6c·3d22·2428·7270·6d20··einstall="$(rpm· | ||
| 0003b9b0:· | 0003b9b0:·2d71·6620·2466·696c·6573·5f77·6974·685f··-qf·$files_with_ | ||
| 0003b9c0:· | 0003b9c0:·696e·636f·7272·6563·745f·6861·7368·207c··incorrect_hash·| | ||
| 0003b9d0:· | 0003b9d0:·2074·7220·275c·6e27·2027·2027·2922·0a0a···tr·'\n'·'·')".. | ||
| 0003b9e0:· | 0003b9e0:·2020·2020·0a20·2020·2064·6e66·2072·6569······.····dnf·rei | ||
| 0003b9f0:·6 | 0003b9f0:·6e73·7461·6c6c·202d·7920·2470·6163·6b61··nstall·-y·$packa | ||
| 0003ba00:· | 0003ba00:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003ba10:· | 0003ba10:·0a20·2020·200a·6669·0a0a·656c·7365·0a20··.····.fi..else.· | ||
| 0003ba20:· | 0003ba20:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | ||
| 0003ba30:·6 | 0003ba30:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | ||
| 0003ba40:·7 | 0003ba40:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | ||
| 0003ba50:·6 | 0003ba50:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | ||
| 0003ba60:· | 0003ba60:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | ||
| 0003ba70:· | 0003ba70:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003ba80:· | 0003ba80:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003ba90:· | 0003ba90:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0003baa0:· | 0003baa0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003bab0:· | 0003bab0:·612d·7461·7267·6574·3d22·2369·646d·3639··a-target="#idm69 | ||
| 0003bac0:· | 0003bac0:·3637·2220·7461·6269·6e64·6578·3d22·3022··67"·tabindex="0" | ||
| 0003bad0:· | 0003bad0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003bae0:· | 0003bae0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003baf0:·6 | 0003baf0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003bb00:· | 0003bb00:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003bb10:·6 | 0003bb10:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003bb20:·61 | 0003bb20:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003bb30:·6 | 0003bb30:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003bb40:· | 0003bb40:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003bb50:· | 0003bb50:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003bb60:· | 0003bb60:·6170·7365·2220·6964·3d22·6964·6d36·3936··apse"·id="idm696 | ||
| 0003bb70:· | 0003bb70:·3722·3e3c·7461·626c·6520·636c·6173·733d··7"><table·class= | ||
| 0003bb80:· | 0003bb80:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003bb90:· | 0003bb90:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003bba0:· | 0003bba0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003bbb0:· | 0003bbb0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003bbc0:· | 0003bbc0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003bbd0:· | 0003bbd0:·3e68·6967·683c·2f74·643e·3c2f·7472·3e3c··>high</td></tr>< | ||
| 0003bbe0:· | 0003bbe0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003bbf0:· | 0003bbf0:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | ||
| 0003bc00:· | 0003bc00:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | ||
| 0003bc10:· | 0003bc10:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003bc20:· | 0003bc20:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003bc30:· | 0003bc30:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003bc40:· | 0003bc40:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | ||
| 0003bc50:· | 0003bc50:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | ||
| 0003bc60:· | 0003bc60:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003bc70:· | 0003bc70:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | ||
| 0003bc80:· | 0003bc80:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | ||
| 0003bc90:· | 0003bc90:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | ||
| 0003bca0:· | 0003bca0:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | ||
| 0003bcb0:·6 | 0003bcb0:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | ||
| 0003bcc0:·2 | 0003bcc0:·2043·4345·2d38·3939·3434·2d33·0a20·202d···CCE-89944-3.··- | ||
| 0003bcd0:· | 0003bcd0:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003bce0:· | 0003bce0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003bcf0:· | 0003bcf0:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003bd00:· | 0003bd00:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003bd10:· | 0003bd10:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003bd20:· | 0003bd20:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003bd30:· | 0003bd30:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003bd40:· | 0003bd40:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003bd50:· | 0003bd50:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003bd60:· | 0003bd60:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003bd70:· | 0003bd70:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003bd80:· | 0003bd80:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003bd90:· | 0003bd90:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003bda0:· | 0003bda0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003bdb0:· | 0003bdb0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003bdc0:· | 0003bdc0:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003bdd0:· | 0003bdd0:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003bde0:· | 0003bde0:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003bdf0:·6 | 0003bdf0:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003be00:· | 0003be00:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| 0003be10:·6 | 0003be10:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | ||
| 0003be20:· | 0003be20:·745f·7374·7261·7465·6779·0a20·202d·2072··t_strategy.··-·r | ||
| 0003be30:· | 0003be30:·706d·5f76·6572·6966·795f·6861·7368·6573··pm_verify_hashes | ||
| 0003be40:· | 0003be40:·0a0a·2d20·6e61·6d65·3a20·2753·6574·2066··..-·name:·'Set·f | ||
| Max diff block lines reached; 19460404/19516184 bytes (99.71%) of diff not shown. | |||
| Offset 15120, 281 lines modified | Offset 15120, 281 lines modified | ||
| 0003b0f0:·6172·6765·743d·2223·6964·6d37·3330·3722··arget="#idm7307" | 0003b0f0:·6172·6765·743d·2223·6964·6d37·3330·3722··arget="#idm7307" | ||
| 0003b100:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003b100:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b110:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003b110:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b120:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003b120:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b130:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003b130:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b140:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003b140:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b150:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003b150:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b160:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b170:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b180:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b190:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b1a0:·2220·6964·3d22·6964·6d37·3330·3722·3e3c··"·id="idm7307">< | |||
| 0003b1b0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b1c0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b1d0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b1e0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b1f0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b200:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b210:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b220:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b230:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b240:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b250:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b260:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b270:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b280:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b290:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b2a0:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003b2b0:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003b2c0:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003b2d0:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003b2e0:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003b2f0:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b300:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003b310:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b320:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b330:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b340:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b350:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b360:·3733·3038·2220·7461·6269·6e64·6578·3d22··7308"·tabindex=" | |||
| 0003b370:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b380:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b390:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b3a0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b3b0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b3c0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003b3d0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b3e0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b3f0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b400:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b410:·3330·3822·3e3c·7461·626c·6520·636c·6173··308"><table·clas | |||
| 0003b420:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b430:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b440:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b450:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b460:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b470:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b480:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b490:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b4a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b4b0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b4c0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b4d0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b4e0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b4f0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b500:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b510:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003b520:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003b530:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003b540:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003b550:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b560:·2d39·3034·3737·2d31·0a20·202d·2043·4a49··-90477-1.··-·CJI | |||
| 0003b570:·532d·352e·3130·2e31·2e33·0a20·202d·204e··S-5.10.1.3.··-·N | |||
| 0003b580:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b590:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b5a0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b5b0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b5c0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b5d0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b5e0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b5f0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b600:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b610:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b620:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b630:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003b640:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b650:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b660:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b670:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b680:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b690:·3a20·2722·6b65·726e·656c·2220·696e·2061··:·'"kernel"·in·a | |||
| 0003b6a0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003b6b0:·6b61·6765·7327·0a20·2074·6167·733a·0a20··kages'.··tags:.· | |||
| 0003b6c0:·202d·2043·4345·2d39·3034·3737·2d31·0a20···-·CCE-90477-1.· | |||
| 0003b6d0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b6e0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b6f0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b700:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b710:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b720:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b730:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b740:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b750:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b760:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b770:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b780:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b790:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b7a0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b7b0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b7c0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b7d0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b7e0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b7f0:·743d·2223·6964·6d37·3330·3922·2074·6162··t="#idm7309"·tab | |||
| 0003b800:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b810:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b820:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b830:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b840:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b850:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003b860:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b870:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b880:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b890:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b8a0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b8b0:·3733·3039·223e·3c70·7265·3e3c·636f·6465··7309"><pre><code | |||
| 0003b8c0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b8d0:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| Max diff block lines reached; 10874611/10912037 bytes (99.66%) of diff not shown. | |||
| Offset 105, 26 lines modified | Offset 105, 48 lines modified | ||
| 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 110 | ·············_\x8c_\x8i_\x8s············6.1.1 | 110 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 117 | include·install_aide | ||
| 118 | class·install_aide·{ | ||
| 119 | ··package·{·'aide': | ||
| 120 | ····ensure·=>·'installed', | ||
| 121 | ··} | ||
| 122 | 117 | dnf·install·aide | |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 123 | package·install·aide | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | [[packages]] | ||
| 126 | name·=·"aide" | ||
| 127 | version·=·"*" | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 134 | if·rpm·--quiet·-q·kernel;·then | ||
| 135 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 136 | ····dnf·install·-y·"aide" | ||
| 137 | fi | ||
| 138 | else | ||
| 139 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 140 | fi | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | -·name:·Gather·the·package·facts | 146 | -·name:·Gather·the·package·facts |
| 129 | ··package_facts: | 147 | ··package_facts: |
| Offset 155, 55 lines modified | Offset 177, 33 lines modified | ||
| 155 | ··-·PCI-DSSv4-11.5.2 | 177 | ··-·PCI-DSSv4-11.5.2 |
| 156 | ··-·enable_strategy | 178 | ··-·enable_strategy |
| 157 | ··-·low_complexity | 179 | ··-·low_complexity |
| 158 | ··-·low_disruption | 180 | ··-·low_disruption |
| 159 | ··-·medium_severity | 181 | ··-·medium_severity |
| 160 | ··-·no_reboot_needed | 182 | ··-·no_reboot_needed |
| 161 | ··-·package_aide_installed | 183 | ··-·package_aide_installed |
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 163 | [[packages]] | ||
| 164 | name·=·"aide" | ||
| 165 | version·=·"*" | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | dnf·install·aide | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 178 | if·rpm·--quiet·-q·kernel;·then | ||
| 179 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 180 | ····dnf·install·-y·"aide" | ||
| 181 | fi | ||
| 182 | else | ||
| 183 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 184 | fi | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 190 | package·--add=aide | 189 | package·--add=aide |
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 195 | include·install_aide | ||
| 196 | 196 | class·install_aide·{ | |
| 197 | ··package·{·'aide': | ||
| 198 | ····ensure·=>·'installed', | ||
| 199 | ··} | ||
| 200 | } | ||
| 197 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 201 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 198 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 202 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 199 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 203 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 200 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 204 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 279, 14 lines modified | Offset 279, 58 lines modified | ||
| 279 | ·············_\x8i_\x8s_\x8m······1446 | 279 | ·············_\x8i_\x8s_\x8m······1446 |
| 280 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 280 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 281 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 281 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 282 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 282 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 283 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 283 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 284 | ·············_\x8c_\x8i_\x8s······1.6.1 | 284 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 285 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 285 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 287 | var_system_crypto_policy='FIPS' | ||
| Max diff block lines reached; 1127153/1134114 bytes (99.39%) of diff not shown. | |||
| Offset 15124, 281 lines modified | Offset 15124, 281 lines modified | ||
| 0003b130:·7267·6574·3d22·2369·646d·3733·3037·2220··rget="#idm7307"· | 0003b130:·7267·6574·3d22·2369·646d·3733·3037·2220··rget="#idm7307"· | ||
| 0003b140:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b140:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b150:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b150:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b160:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b160:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b170:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b170:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b180:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b180:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b190:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b190:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b1a0:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b1b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b1c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b1d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b1e0:·2069·643d·2269·646d·3733·3037·223e·3c74···id="idm7307"><t | |||
| 0003b1f0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b200:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b210:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b220:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b230:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b240:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b250:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b260:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b270:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b280:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b290:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b2a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b2b0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b2c0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b2d0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b2e0:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003b2f0:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003b300:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 0003b310:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003b320:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003b330:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003b340:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003b350:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b360:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b370:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b380:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b390:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003b3a0:·3330·3822·2074·6162·696e·6465·783d·2230··308"·tabindex="0 | |||
| 0003b3b0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b3c0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b3d0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b3e0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b3f0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b400:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b410:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b420:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b430:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b440:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | |||
| 0003b450:·3038·223e·3c74·6162·6c65·2063·6c61·7373··08"><table·class | |||
| 0003b460:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b470:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b480:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b490:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b4a0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b4b0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b4c0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b4d0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b4e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b4f0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b500:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b510:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b520:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b530:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b540:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b550:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | |||
| 0003b560:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | |||
| 0003b570:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | |||
| 0003b580:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | |||
| 0003b590:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003b5a0:·3930·3437·372d·310a·2020·2d20·434a·4953··90477-1.··-·CJIS | |||
| 0003b5b0:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 0003b5c0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b5d0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b5e0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b5f0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b600:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b610:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b620:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b630:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b640:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b650:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b660:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b670:·696e·7374·616c·6c65·640a·0a2d·206e·616d··installed..-·nam | |||
| 0003b680:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b690:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b6a0:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b6b0:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b6c0:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b6d0:·2027·226b·6572·6e65·6c22·2069·6e20·616e···'"kernel"·in·an | |||
| 0003b6e0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003b6f0:·6167·6573·270a·2020·7461·6773·3a0a·2020··ages'.··tags:.·· | |||
| 0003b700:·2d20·4343·452d·3930·3437·372d·310a·2020··-·CCE-90477-1.·· | |||
| 0003b710:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b720:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b730:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b740:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b750:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b760:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b770:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b780:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b790:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b7a0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b7b0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b7c0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b7d0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b7e0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b7f0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b800:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b810:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b820:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b830:·3d22·2369·646d·3733·3039·2220·7461·6269··="#idm7309"·tabi | |||
| 0003b840:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b850:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b860:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b870:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b880:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b890:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003b8a0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b8b0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b8c0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b8d0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b8e0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b8f0:·3330·3922·3e3c·7072·653e·3c63·6f64·653e··309"><pre><code> | |||
| 0003b900:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b910:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| Max diff block lines reached; 10874542/10911968 bytes (99.66%) of diff not shown. | |||
| Offset 106, 26 lines modified | Offset 106, 48 lines modified | ||
| 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 111 | ·············_\x8c_\x8i_\x8s············6.1.1 | 111 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 112 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 112 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 118 | include·install_aide | ||
| 119 | class·install_aide·{ | ||
| 120 | ··package·{·'aide': | ||
| 121 | ····ensure·=>·'installed', | ||
| 122 | ··} | ||
| 123 | 118 | dnf·install·aide | |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 124 | package·install·aide | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 135 | if·rpm·--quiet·-q·kernel;·then | ||
| 136 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 137 | ····dnf·install·-y·"aide" | ||
| 138 | fi | ||
| 139 | else | ||
| 140 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 141 | fi | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | -·name:·Gather·the·package·facts | 147 | -·name:·Gather·the·package·facts |
| 130 | ··package_facts: | 148 | ··package_facts: |
| Offset 156, 55 lines modified | Offset 178, 33 lines modified | ||
| 156 | ··-·PCI-DSSv4-11.5.2 | 178 | ··-·PCI-DSSv4-11.5.2 |
| 157 | ··-·enable_strategy | 179 | ··-·enable_strategy |
| 158 | ··-·low_complexity | 180 | ··-·low_complexity |
| 159 | ··-·low_disruption | 181 | ··-·low_disruption |
| 160 | ··-·medium_severity | 182 | ··-·medium_severity |
| 161 | ··-·no_reboot_needed | 183 | ··-·no_reboot_needed |
| 162 | ··-·package_aide_installed | 184 | ··-·package_aide_installed |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 172 | dnf·install·aide | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 179 | if·rpm·--quiet·-q·kernel;·then | ||
| 180 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 181 | ····dnf·install·-y·"aide" | ||
| 182 | fi | ||
| 183 | else | ||
| 184 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 185 | fi | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 191 | package·--add=aide | 190 | package·--add=aide |
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 196 | include·install_aide | ||
| 197 | 197 | class·install_aide·{ | |
| 198 | ··package·{·'aide': | ||
| 199 | ····ensure·=>·'installed', | ||
| 200 | ··} | ||
| 201 | } | ||
| 198 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 202 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 199 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 203 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 200 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 204 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 201 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 205 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 202 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 280, 14 lines modified | Offset 280, 58 lines modified | ||
| 280 | ·············_\x8i_\x8s_\x8m······1446 | 280 | ·············_\x8i_\x8s_\x8m······1446 |
| 281 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 281 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 282 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 282 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 283 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 283 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 284 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 284 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 285 | ·············_\x8c_\x8i_\x8s······1.6.1 | 285 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 286 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 286 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 287 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 288 | var_system_crypto_policy='FIPS' | ||
| Max diff block lines reached; 1127153/1134114 bytes (99.39%) of diff not shown. | |||
| Offset 15121, 281 lines modified | Offset 15121, 281 lines modified | ||
| 0003b100:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b100:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b110:·646d·3733·3037·2220·7461·6269·6e64·6578··dm7307"·tabindex | 0003b110:·646d·3733·3037·2220·7461·6269·6e64·6578··dm7307"·tabindex | ||
| 0003b120:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b120:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b130:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b130:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b140:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b140:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b150:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b150:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b160:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b160:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b170:·6d65·6469·6174·696f·6e20· | 0003b170:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | ||
| 0003b180:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b190:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b1a0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b1b0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b1c0:·3733·3037·223e·3c74·6162·6c65·2063·6c61··7307"><table·cla | |||
| 0003b1d0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b1e0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b1f0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b200:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b210:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b220:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b230:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b240:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b250:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b260:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b270:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b280:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b290:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b2a0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b2b0:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b2c0:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b2d0:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b2e0:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b2f0:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b300:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b310:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b320:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b330:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b340:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b350:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b360:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b370:·743d·2223·6964·6d37·3330·3822·2074·6162··t="#idm7308"·tab | |||
| 0003b380:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b390:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b3a0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b3b0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b3c0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b3d0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b3e0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b3f0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b400:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b410:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b420:·643d·2269·646d·3733·3038·223e·3c74·6162··d="idm7308"><tab | |||
| 0003b430:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b440:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b450:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b460:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b470:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b480:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b490:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b4a0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b4b0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b4c0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b4d0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b4e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b4f0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b500:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b510:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b520:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003b530:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003b540:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003b550:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003b560:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003b570:·2020·2d20·4343·452d·3930·3437·372d·310a····-·CCE-90477-1. | |||
| 0003b580:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b590:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003b5a0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b5b0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b5c0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b5d0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b5e0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b5f0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b600:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b610:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b620:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b630:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b640:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b650:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003b660:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b670:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b680:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b690:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b6a0:·0a20·2077·6865·6e3a·2027·226b·6572·6e65··.··when:·'"kerne | |||
| 0003b6b0:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | |||
| 0003b6c0:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003b6d0:·7461·6773·3a0a·2020·2d20·4343·452d·3930··tags:.··-·CCE-90 | |||
| 0003b6e0:·3437·372d·310a·2020·2d20·434a·4953·2d35··477-1.··-·CJIS-5 | |||
| 0003b6f0:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b700:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b710:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b720:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b730:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b740:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b750:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b760:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b770:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b780:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b790:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b7a0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b7b0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b7c0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b7d0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b7e0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b7f0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b800:·612d·7461·7267·6574·3d22·2369·646d·3733··a-target="#idm73 | |||
| 0003b810:·3039·2220·7461·6269·6e64·6578·3d22·3022··09"·tabindex="0" | |||
| 0003b820:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b830:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b840:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b850:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b860:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b870:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b880:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b890:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b8a0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b8b0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b8c0:·6964·3d22·6964·6d37·3330·3922·3e3c·7072··id="idm7309"><pr | |||
| 0003b8d0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b8e0:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| Max diff block lines reached; 10873783/10911209 bytes (99.66%) of diff not shown. | |||
| Offset 105, 26 lines modified | Offset 105, 48 lines modified | ||
| 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 110 | ·············_\x8c_\x8i_\x8s············6.1.1 | 110 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 117 | include·install_aide | ||
| 118 | class·install_aide·{ | ||
| 119 | ··package·{·'aide': | ||
| 120 | ····ensure·=>·'installed', | ||
| 121 | ··} | ||
| 122 | 117 | dnf·install·aide | |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 123 | package·install·aide | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | [[packages]] | ||
| 126 | name·=·"aide" | ||
| 127 | version·=·"*" | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 134 | if·rpm·--quiet·-q·kernel;·then | ||
| 135 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 136 | ····dnf·install·-y·"aide" | ||
| 137 | fi | ||
| 138 | else | ||
| 139 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 140 | fi | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | -·name:·Gather·the·package·facts | 146 | -·name:·Gather·the·package·facts |
| 129 | ··package_facts: | 147 | ··package_facts: |
| Offset 155, 55 lines modified | Offset 177, 33 lines modified | ||
| 155 | ··-·PCI-DSSv4-11.5.2 | 177 | ··-·PCI-DSSv4-11.5.2 |
| 156 | ··-·enable_strategy | 178 | ··-·enable_strategy |
| 157 | ··-·low_complexity | 179 | ··-·low_complexity |
| 158 | ··-·low_disruption | 180 | ··-·low_disruption |
| 159 | ··-·medium_severity | 181 | ··-·medium_severity |
| 160 | ··-·no_reboot_needed | 182 | ··-·no_reboot_needed |
| 161 | ··-·package_aide_installed | 183 | ··-·package_aide_installed |
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 163 | [[packages]] | ||
| 164 | name·=·"aide" | ||
| 165 | version·=·"*" | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | dnf·install·aide | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 178 | if·rpm·--quiet·-q·kernel;·then | ||
| 179 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 180 | ····dnf·install·-y·"aide" | ||
| 181 | fi | ||
| 182 | else | ||
| 183 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 184 | fi | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 190 | package·--add=aide | 189 | package·--add=aide |
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 195 | include·install_aide | ||
| 196 | 196 | class·install_aide·{ | |
| 197 | ··package·{·'aide': | ||
| 198 | ····ensure·=>·'installed', | ||
| 199 | ··} | ||
| 200 | } | ||
| 197 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 201 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 198 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 202 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 199 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 203 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 200 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 204 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 279, 14 lines modified | Offset 279, 58 lines modified | ||
| 279 | ·············_\x8i_\x8s_\x8m······1446 | 279 | ·············_\x8i_\x8s_\x8m······1446 |
| 280 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 280 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 281 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 281 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 282 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 282 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 283 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 283 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 284 | ·············_\x8c_\x8i_\x8s······1.6.1 | 284 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 285 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 285 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 287 | var_system_crypto_policy='FIPS' | ||
| Max diff block lines reached; 1127153/1134114 bytes (99.39%) of diff not shown. | |||
| Offset 15425, 252 lines modified | Offset 15425, 252 lines modified | ||
| 0003c400:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003c400:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003c410:·6d37·3934·3522·2074·6162·696e·6465·783d··m7945"·tabindex= | 0003c410:·6d37·3934·3522·2074·6162·696e·6465·783d··m7945"·tabindex= | ||
| 0003c420:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003c420:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003c430:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003c430:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003c440:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003c440:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003c450:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003c450:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003c460:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003c460:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003c470:·6564·6961·7469·6f6e·20 | 0003c470:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | ||
| 0003c480:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003c490:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c4a0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003c4b0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003c4c0:·3934·3522·3e3c·7461·626c·6520·636c·6173··945"><table·clas | |||
| 0003c4d0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003c4e0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003c4f0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003c500:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003c510:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003c520:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c530:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003c540:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003c550:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c560:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003c570:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003c580:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003c590:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003c5a0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003c5b0:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003c5c0:·6c75·6465·2069·6e73·7461·6c6c·5f63·7279··lude·install_cry | |||
| 0003c5d0:·7074·6f2d·706f·6c69·6369·6573·0a0a·636c··pto-policies..cl | |||
| 0003c5e0:·6173·7320·696e·7374·616c·6c5f·6372·7970··ass·install_cryp | |||
| 0003c5f0:·746f·2d70·6f6c·6963·6965·7320·7b0a·2020··to-policies·{.·· | |||
| 0003c600:·7061·636b·6167·6520·7b20·2763·7279·7074··package·{·'crypt | |||
| 0003c610:·6f2d·706f·6c69·6369·6573·273a·0a20·2020··o-policies':.··· | |||
| 0003c620:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003c630:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003c640:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003c650:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003c660:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003c670:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003c680:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003c690:·743d·2223·6964·6d37·3934·3622·2074·6162··t="#idm7946"·tab | |||
| 0003c6a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003c6b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003c6c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003c6d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003c6e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003c6f0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003c700:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003c710:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c720:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003c730:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003c740:·643d·2269·646d·3739·3436·223e·3c74·6162··d="idm7946"><tab | |||
| 0003c750:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003c760:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003c770:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003c780:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003c790:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003c7a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003c7b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003c7c0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003c7d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c7e0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003c7f0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003c800:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003c810:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003c820:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003c830:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003c840:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003c850:·7265·2063·7279·7074·6f2d·706f·6c69·6369··re·crypto-polici | |||
| 0003c860:·6573·2069·7320·696e·7374·616c·6c65·640a··es·is·installed. | |||
| 0003c870:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003c880:·616d·653a·2063·7279·7074·6f2d·706f·6c69··ame:·crypto-poli | |||
| 0003c890:·6369·6573·0a20·2020·2073·7461·7465·3a20··cies.····state:· | |||
| 0003c8a0:·7072·6573·656e·740a·2020·7461·6773·3a0a··present.··tags:. | |||
| 0003c8b0:·2020·2d20·4343·452d·3839·3636·382d·380a····-·CCE-89668-8. | |||
| 0003c8c0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003c8d0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003c8e0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003c8f0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003c900:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003c910:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003c920:·6564·0a20·202d·2070·6163·6b61·6765·5f63··ed.··-·package_c | |||
| 0003c930:·7279·7074·6f2d·706f·6c69·6369·6573·5f69··rypto-policies_i | |||
| 0003c940:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003c950:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003c960:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003c970:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003c980:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003c990:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003c9a0:·3934·3722·2074·6162·696e·6465·783d·2230··947"·tabindex="0 | |||
| 0003c9b0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003c9c0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003c9d0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003c9e0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003c9f0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003ca00:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003ca10:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003ca20:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ca30:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003ca40:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003ca50:·2069·643d·2269·646d·3739·3437·223e·3c70···id="idm7947"><p | |||
| 0003ca60:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003ca70:·6167·6573·5d5d·0a6e·616d·6520·3d20·2263··ages]].name·=·"c | |||
| 0003ca80:·7279·7074·6f2d·706f·6c69·6369·6573·220a··rypto-policies". | |||
| 0003ca90:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003caa0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003cab0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003cac0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003cad0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003cae0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003caf0:·2369·646d·3739·3438·2220·7461·6269·6e64··#idm7948"·tabind | |||
| 0003cb00:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003cb10:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003cb20:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003cb30:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003cb40:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003cb50:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 0003cb60:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003cb70:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003cb80:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003cb90:·6522·2069·643d·2269·646d·3739·3438·223e··e"·id="idm7948"> | |||
| 0003cba0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003cbb0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003cbc0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003cbd0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003cbe0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| Max diff block lines reached; 6743167/6776591 bytes (99.51%) of diff not shown. | |||
| Offset 129, 78 lines modified | Offset 129, 78 lines modified | ||
| 129 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 129 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 130 | Severity: ···medium | 130 | Severity: ···medium |
| 131 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 131 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 132 | Identifiers:·CCE-89668-8 | 132 | Identifiers:·CCE-89668-8 |
| 133 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 133 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| 134 | References:··_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 134 | References:··_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 135 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 135 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 141 | include·install_crypto-policies | ||
| 142 | 141 | dnf·install·crypto-policies | |
| 143 | ··package·{·'crypto-policies': | ||
| 144 | ····ensure·=>·'installed', | ||
| 145 | ··} | ||
| 146 | } | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | package·install·crypto-policies | ||
| 152 | -·name:·Ensure·crypto-policies·is·installed | ||
| 153 | ··package: | ||
| 154 | ····name:·crypto-policies | ||
| 155 | ····state:·present | ||
| 156 | ··tags: | ||
| 157 | ··-·CCE-89668-8 | ||
| 158 | ··-·enable_strategy | ||
| 159 | ··-·low_complexity | ||
| 160 | ··-·low_disruption | ||
| 161 | ··-·medium_severity | ||
| 162 | ··-·no_reboot_needed | ||
| 163 | ··-·package_crypto-policies_installed | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 165 | [[packages]] | 149 | [[packages]] |
| 166 | name·=·"crypto-policies" | 150 | name·=·"crypto-policies" |
| 167 | version·=·"*" | 151 | version·=·"*" |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | dnf·install·crypto-policies | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 179 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 157 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| 180 | ····dnf·install·-y·"crypto-policies" | 158 | ····dnf·install·-y·"crypto-policies" |
| 181 | fi | 159 | fi |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | -·name:·Ensure·crypto-policies·is·installed | ||
| 166 | ··package: | ||
| 167 | ····name:·crypto-policies | ||
| 168 | ····state:·present | ||
| 169 | ··tags: | ||
| 170 | ··-·CCE-89668-8 | ||
| 171 | ··-·enable_strategy | ||
| 172 | ··-·low_complexity | ||
| 173 | ··-·low_disruption | ||
| 174 | ··-·medium_severity | ||
| 175 | ··-·no_reboot_needed | ||
| 176 | ··-·package_crypto-policies_installed | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | package·--add=crypto-policies | 182 | package·--add=crypto-policies |
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 188 | include·install_crypto-policies | ||
| 189 | class·install_crypto-policies·{ | ||
| 193 | package· | 190 | ··package·{·'crypto-policies': |
| 191 | ····ensure·=>·'installed', | ||
| 192 | ··} | ||
| 193 | } | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 195 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| 196 | $·sudo·update-crypto-policies·--set·FIPS:OSPP | 196 | $·sudo·update-crypto-policies·--set·FIPS:OSPP |
| 197 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 197 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 198 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 198 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 199 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 199 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 200 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 200 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 212, 14 lines modified | Offset 212, 58 lines modified | ||
| 212 | ·············_\x8i_\x8s_\x8m······1446 | 212 | ·············_\x8i_\x8s_\x8m······1446 |
| 213 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 213 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 214 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 214 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 215 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 215 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 216 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 216 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 217 | ·············_\x8c_\x8i_\x8s······1.6.1 | 217 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 218 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 218 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 220 | var_system_crypto_policy='FIPS:OSPP' | ||
| 221 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 222 | rc=$? | ||
| 223 | if·test·"$rc"·=·127;·then | ||
| 224 | » echo·"$stderr_of_call"·>&2 | ||
| 225 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 226 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 227 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 228 | » false··#·end·with·an·error·code | ||
| 229 | elif·test·"$rc"·!=·0;·then | ||
| 230 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| Max diff block lines reached; 901293/909520 bytes (99.10%) of diff not shown. | |||
| Offset 15210, 414 lines modified | Offset 15210, 414 lines modified | ||
| 0003b690:·612d·7461·7267·6574·3d22·2369·646d·3639··a-target="#idm69 | 0003b690:·612d·7461·7267·6574·3d22·2369·646d·3639··a-target="#idm69 | ||
| 0003b6a0:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | 0003b6a0:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | ||
| 0003b6b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b6b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b6c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b6c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b6d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b6d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b6e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b6e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b6f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b6f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b700:·6174·696f·6e20· | 0003b700:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | ||
| 0003b710:· | 0003b710:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 0003b720:· | 0003b720:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003b730:·6 | 0003b730:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003b740:·6 | 0003b740:·6522·2069·643d·2269·646d·3639·3636·223e··e"·id="idm6966"> | ||
| 0003b750:·3 | 0003b750:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 0003b760:· | 0003b760:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 0003b770:·69 | 0003b770:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | ||
| 0003b780:· | 0003b780:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | ||
| 0003b790:· | 0003b790:·0a69·6620·2120·2820·7b20·7270·6d20·2d2d··.if·!·(·{·rpm·-- | ||
| 0003b7a0:·7 | 0003b7a0:·7175·6965·7420·2d71·206b·6572·6e65·6c20··quiet·-q·kernel· | ||
| 0003b7b0:·3 | 0003b7b0:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003b7c0:·7 | 0003b7c0:·7270·6d20·2d2d·7175·6965·7420·2d71·2072··rpm·--quiet·-q·r | ||
| 0003b7d0:· | 0003b7d0:·706d·2d6f·7374·7265·6520·3b7d·2026·616d··pm-ostree·;}·&am | ||
| 0003b7e0:· | 0003b7e0:·703b·2661·6d70·3b20·7b20·7270·6d20·2d2d··p;&·{·rpm·-- | ||
| 0003b7f0:·7 | 0003b7f0:·7175·6965·7420·2d71·2062·6f6f·7463·203b··quiet·-q·bootc·; | ||
| 0003b800:·7 | 0003b800:·7d20·2661·6d70·3b26·616d·703b·207b·2021··}·&&·{·! | ||
| 0003b810:· | 0003b810:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b820:·6 | 0003b820:·6f70·656e·7368·6966·742d·6b75·6265·6c65··openshift-kubele | ||
| 0003b830:·7 | 0003b830:·7420·3b7d·2029·3b20·7468·656e·0a0a·2320··t·;}·);·then..#· | ||
| 0003b840:· | 0003b840:·4669·6e64·2077·6869·6368·2066·696c·6573··Find·which·files | ||
| 0003b850:· | 0003b850:·2068·6176·6520·696e·636f·7272·6563·7420···have·incorrect· | ||
| 0003b860:· | 0003b860:·6861·7368·2028·6e6f·7420·696e·202f·6574··hash·(not·in·/et | ||
| 0003b870:· | 0003b870:·632c·2062·6563·6175·7365·206f·6620·7468··c,·because·of·th | ||
| 0003b880:·73 | 0003b880:·6520·7379·7374·656d·2072·656c·6174·6564··e·system·related | ||
| 0003b890:· | 0003b890:·2063·6f6e·6669·6720·6669·6c65·7329·2061···config·files)·a | ||
| 0003b8a0:· | 0003b8a0:·6e64·2074·6865·6e20·6765·7420·6669·6c65··nd·then·get·file | ||
| 0003b8b0:· | 0003b8b0:·7320·6e61·6d65·730a·6669·6c65·735f·7769··s·names.files_wi | ||
| 0003b8c0:· | 0003b8c0:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | ||
| 0003b8d0:· | 0003b8d0:·683d·2224·2872·706d·202d·5661·202d·2d6e··h="$(rpm·-Va·--n | ||
| 0003b8e0:· | 0003b8e0:·6f63·6f6e·6669·6720·7c20·6772·6570·202d··oconfig·|·grep·- | ||
| 0003b8f0:· | 0003b8f0:·4520·275e·2e2e·3527·207c·2061·776b·2027··E·'^..5'·|·awk·' | ||
| 0003b900:· | 0003b900:·7b70·7269·6e74·2024·4e46·7d27·2029·220a··{print·$NF}'·)". | ||
| 0003b910:· | 0003b910:·0a69·6620·5b20·2d6e·2022·2466·696c·6573··.if·[·-n·"$files | ||
| 0003b920:· | 0003b920:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | ||
| 0003b930:· | 0003b930:·6861·7368·2220·5d3b·2074·6865·6e0a·2020··hash"·];·then.·· | ||
| 0003b940:· | 0003b940:·2020·2320·4672·6f6d·2066·696c·6573·206e····#·From·files·n | ||
| 0003b950:· | 0003b950:·616d·6573·2067·6574·2070·6163·6b61·6765··ames·get·package | ||
| 0003b960:·2 | 0003b960:·206e·616d·6573·2061·6e64·2063·6861·6e67···names·and·chang | ||
| 0003b970:· | 0003b970:·6520·6e65·776c·696e·6520·746f·2073·7061··e·newline·to·spa | ||
| 0003b980:· | 0003b980:·6365·2c20·6265·6361·7573·6520·7270·6d20··ce,·because·rpm· | ||
| 0003b990:· | 0003b990:·7772·6974·6573·2065·6163·6820·7061·636b··writes·each·pack | ||
| 0003b9a0:· | 0003b9a0:·6167·6520·746f·206e·6577·206c·696e·650a··age·to·new·line. | ||
| 0003b9b0:· | 0003b9b0:·2020·2020·7061·636b·6167·6573·5f74·6f5f······packages_to_ | ||
| 0003b9c0:· | 0003b9c0:·7265·696e·7374·616c·6c3d·2224·2872·706d··reinstall="$(rpm | ||
| 0003b9d0:· | 0003b9d0:·202d·7166·2024·6669·6c65·735f·7769·7468···-qf·$files_with | ||
| 0003b9e0:· | 0003b9e0:·5f69·6e63·6f72·7265·6374·5f68·6173·6820··_incorrect_hash· | ||
| 0003b9f0:· | 0003b9f0:·7c20·7472·2027·5c6e·2720·2720·2729·220a··|·tr·'\n'·'·')". | ||
| 0003ba00:· | 0003ba00:·0a20·2020·200a·2020·2020·646e·6620·7265··.····.····dnf·re | ||
| 0003ba10:· | 0003ba10:·696e·7374·616c·6c20·2d79·2024·7061·636b··install·-y·$pack | ||
| 0003ba20:· | 0003ba20:·6167·6573·5f74·6f5f·7265·696e·7374·616c··ages_to_reinstal | ||
| 0003ba30:·6 | 0003ba30:·6c0a·2020·2020·0a66·690a·0a65·6c73·650a··l.····.fi..else. | ||
| 0003ba40:· | 0003ba40:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | ||
| 0003ba50:·6 | 0003ba50:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | ||
| 0003ba60:·63 | 0003ba60:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | ||
| 0003ba70:·6 | 0003ba70:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | ||
| 0003ba80:·6 | 0003ba80:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | ||
| 0003ba90:· | 0003ba90:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | ||
| 0003baa0:· | 0003baa0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | ||
| 0003bab0:·6 | 0003bab0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | ||
| 0003bac0:·6 | 0003bac0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003bad0:· | 0003bad0:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | ||
| 0003bae0:· | 0003bae0:·3936·3722·2074·6162·696e·6465·783d·2230··967"·tabindex="0 | ||
| 0003baf0:· | 0003baf0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003bb00:· | 0003bb00:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003bb10:·6 | 0003bb10:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003bb20:· | 0003bb20:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003bb30:·686 | 0003bb30:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003bb40:· | 0003bb40:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003bb50:·6 | 0003bb50:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003bb60:· | 0003bb60:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003bb70:·6 | 0003bb70:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003bb80:·6 | 0003bb80:·6c61·7073·6522·2069·643d·2269·646d·3639··lapse"·id="idm69 | ||
| 0003bb90:· | 0003bb90:·3637·223e·3c74·6162·6c65·2063·6c61·7373··67"><table·class | ||
| 0003bba0:· | 0003bba0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003bbb0:· | 0003bbb0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003bbc0:· | 0003bbc0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003bbd0:· | 0003bbd0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003bbe0:· | 0003bbe0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003bbf0:· | 0003bbf0:·643e·6869·6768·3c2f·7464·3e3c·2f74·723e··d>high</td></tr> | ||
| 0003bc00:·3 | 0003bc00:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003bc10:· | 0003bc10:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | ||
| 0003bc20:· | 0003bc20:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | ||
| 0003bc30:· | 0003bc30:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003bc40:·3 | 0003bc40:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003bc50:· | 0003bc50:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003bc60:· | 0003bc60:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | ||
| 0003bc70:·4 | 0003bc70:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | ||
| 0003bc80:· | 0003bc80:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003bc90:· | 0003bc90:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | ||
| 0003bca0:· | 0003bca0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | ||
| 0003bcb0:· | 0003bcb0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | ||
| 0003bcc0:· | 0003bcc0:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | ||
| 0003bcd0:·206 | 0003bcd0:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | ||
| 0003bce0:·2 | 0003bce0:·2d20·4343·452d·3839·3934·342d·330a·2020··-·CCE-89944-3.·· | ||
| 0003bcf0:· | 0003bcf0:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | ||
| 0003bd00:· | 0003bd00:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003bd10:· | 0003bd10:·2d33·2e33·2e38·0a20·202d·204e·4953·542d··-3.3.8.··-·NIST- | ||
| 0003bd20:· | 0003bd20:·3830·302d·3137·312d·332e·342e·310a·2020··800-171-3.4.1.·· | ||
| 0003bd30:· | 0003bd30:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | ||
| 0003bd40:· | 0003bd40:·2d39·2833·290a·2020·2d20·4e49·5354·2d38··-9(3).··-·NIST-8 | ||
| 0003bd50:· | 0003bd50:·3030·2d35·332d·434d·2d36·2863·290a·2020··00-53-CM-6(c).·· | ||
| 0003bd60:· | 0003bd60:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003bd70:· | 0003bd70:·2d36·2864·290a·2020·2d20·4e49·5354·2d38··-6(d).··-·NIST-8 | ||
| 0003bd80:·3 | 0003bd80:·3030·2d35·332d·5349·2d37·0a20·202d·204e··00-53-SI-7.··-·N | ||
| 0003bd90:· | 0003bd90:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003bda0:· | 0003bda0:·3129·0a20·202d·204e·4953·542d·3830·302d··1).··-·NIST-800- | ||
| 0003bdb0:· | 0003bdb0:·3533·2d53·492d·3728·3629·0a20·202d·2050··53-SI-7(6).··-·P | ||
| 0003bdc0:· | 0003bdc0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | ||
| 0003bdd0:· | 0003bdd0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | ||
| 0003bde0:·2e | 0003bde0:·2e35·2e32·0a20·202d·2068·6967·685f·636f··.5.2.··-·high_co | ||
| 0003bdf0:· | 0003bdf0:·6d70·6c65·7869·7479·0a20·202d·2068·6967··mplexity.··-·hig | ||
| 0003be00:· | 0003be00:·685f·7365·7665·7269·7479·0a20·202d·206d··h_severity.··-·m | ||
| 0003be10:·6 | 0003be10:·6564·6975·6d5f·6469·7372·7570·7469·6f6e··edium_disruption | ||
| 0003be20:· | 0003be20:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | ||
| 0003be30:·6 | 0003be30:·6565·6465·640a·2020·2d20·7265·7374·7269··eeded.··-·restri | ||
| 0003be40:·6 | 0003be40:·6374·5f73·7472·6174·6567·790a·2020·2d20··ct_strategy.··-· | ||
| 0003be50:·7 | 0003be50:·7270·6d5f·7665·7269·6679·5f68·6173·6865··rpm_verify_hashe | ||
| 0003be60:·73 | 0003be60:·730a·0a2d·206e·616d·653a·2027·5365·7420··s..-·name:·'Set· | ||
| Max diff block lines reached; 16563588/16619368 bytes (99.66%) of diff not shown. | |||
| Offset 15128, 281 lines modified | Offset 15128, 281 lines modified | ||
| 0003b170:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b170:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b180:·3d22·2369·646d·3733·3037·2220·7461·6269··="#idm7307"·tabi | 0003b180:·3d22·2369·646d·3733·3037·2220·7461·6269··="#idm7307"·tabi | ||
| 0003b190:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b190:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b1a0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b1a0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b1b0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b1b0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b1c0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b1c0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b1d0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b1d0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b1e0:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b1e0:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | ||
| 0003b1f0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b200:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b210:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b220:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b230:·2269·646d·3733·3037·223e·3c74·6162·6c65··"idm7307"><table | |||
| 0003b240:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b250:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b260:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b270:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b280:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b290:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b2a0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b2b0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b2c0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b2d0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b2e0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b2f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b300:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b310:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b320:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b330:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003b340:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003b350:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003b360:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b370:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003b380:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003b390:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003b3a0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b3b0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b3c0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b3d0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b3e0:·6172·6765·743d·2223·6964·6d37·3330·3822··arget="#idm7308" | |||
| 0003b3f0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b400:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b410:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b420:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b430:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b440:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b450:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b | 0003b1f0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0003b | 0003b200:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b | 0003b210:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b | 0003b220:·7073·6522·2069·643d·2269·646d·3733·3037··pse"·id="idm7307 | ||
| 0003b | 0003b230:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003b | 0003b240:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003b | 0003b250:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b | 0003b260:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003b | 0003b270:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003b | 0003b280:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b | 0003b290:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b | 0003b2a0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b | 0003b2b0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b2c0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b | 0003b2d0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b | 0003b2e0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b | 0003b2f0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b | 0003b300:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | ||
| 0003b | 0003b310:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003b320:·7072·653e·3c63·6f64·653e·0a64·6e66·2069··pre><code>.dnf·i | |||
| 0003b330:·6e73·7461·6c6c·2061·6964·650a·3c2f·636f··nstall·aide.</co | |||
| 0003b590:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b5a0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b5b0:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b5c0:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b5d0:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b5e0:·6773·3a0a·2020·2d20·4343·452d·3930·3437··gs:.··-·CCE-9047 | |||
| 0003b5f0:·372d·310a·2020·2d20·434a·4953·2d35·2e31··7-1.··-·CJIS-5.1 | |||
| 0003b600:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003b610:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b620:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b630:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b640:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b650:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b660:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b670:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b680:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b690:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b6a0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b6b0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b6c0:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003b6d0:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b6e0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b6f0:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b700:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b710:·7365·6e74·0a20·2077·6865·6e3a·2027·226b··sent.··when:·'"k | |||
| 0003b720:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | |||
| 0003b730:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003b740:·270a·2020·7461·6773·3a0a·2020·2d20·4343··'.··tags:.··-·CC | |||
| 0003b750:·452d·3930·3437·372d·310a·2020·2d20·434a··E-90477-1.··-·CJ | |||
| 0003b760:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b770:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b780:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b790:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b7a0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b7b0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b7c0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b7d0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b7e0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b7f0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b800:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b810:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b820:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b | 0003b340:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0003b | 0003b350:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0003b | 0003b360:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0003b | 0003b370:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0003b | 0003b380:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b | 0003b390:·646d·3733·3038·2220·7461·6269·6e64·6578··dm7308"·tabindex | ||
| 0003b | 0003b3a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b | 0003b3b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b | 0003b3c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b | 0003b3d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b | 0003b3e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b3f0:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | |||
| 0003b400:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b410:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b420:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b430:·2069·643d·2269·646d·3733·3038·223e·3c74···id="idm7308"><t | |||
| 0003b440:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| Max diff block lines reached; 33480797/33518223 bytes (99.89%) of diff not shown. | |||
| Offset 15124, 280 lines modified | Offset 15124, 280 lines modified | ||
| 0003b130:·6574·3d22·2369·646d·3733·3037·2220·7461··et="#idm7307"·ta | 0003b130:·6574·3d22·2369·646d·3733·3037·2220·7461··et="#idm7307"·ta | ||
| 0003b140:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b140:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b150:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b150:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b160:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b160:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b170:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b170:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b180:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b180:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b190:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b190:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b1a0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b1b0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b1c0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b1d0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b1e0:·643d·2269·646d·3733·3037·223e·3c74·6162··d="idm7307"><tab | |||
| 0003b1f0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b200:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b210:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b220:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b230:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b240:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b250:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b260:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b270:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b280:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b290:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b2a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b2b0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b2c0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b2d0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b2e0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b2f0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b300:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b310:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b320:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b330:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b340:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003b350:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b360:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b370:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b380:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b390:·2d74·6172·6765·743d·2223·6964·6d37·3330··-target="#idm730 | |||
| 0003b3a0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003b3b0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b3c0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b3d0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b3e0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b3f0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b400:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b410:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b420:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b430:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b440:·7073·6522·2069·643d·2269·646d·3733·3038··pse"·id="idm7308 | |||
| 0003b450:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b460:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b470:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b480:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b490:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b4a0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b4b0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b4c0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b4d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b4e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b4f0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b500:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b510:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b520:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b530:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b540:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b550:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003b560:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003b570:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003b580:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003b590:·7461·6773·3a0a·2020·2d20·4343·452d·3930··tags:.··-·CCE-90 | |||
| 0003b5a0:·3437·372d·310a·2020·2d20·434a·4953·2d35··477-1.··-·CJIS-5 | |||
| 0003b5b0:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b5c0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b5d0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b5e0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b5f0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b600:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b610:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b620:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b630:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b640:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b650:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b660:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b670:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003b680:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b690:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b6a0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b6b0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b6c0:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003b6d0:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003b6e0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003b6f0:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003b700:·4343·452d·3930·3437·372d·310a·2020·2d20··CCE-90477-1.··-· | |||
| 0003b710:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b720:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b730:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b740:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b750:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b760:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b770:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b780:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b790:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b7a0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b7b0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b7c0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b7d0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b7e0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b7f0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b800:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b810:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b820:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b830:·2369·646d·3733·3039·2220·7461·6269·6e64··#idm7309"·tabind | |||
| 0003b840:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b850:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b860:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b870:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b880:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b890:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003b8a0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b8b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b8c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b8d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b8e0:·6170·7365·2220·6964·3d22·6964·6d37·3330··apse"·id="idm730 | |||
| 0003b8f0:·3922·3e3c·7072·653e·3c63·6f64·653e·0a5b··9"><pre><code>.[ | |||
| 0003b900:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b910:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| Max diff block lines reached; 33350405/33387693 bytes (99.89%) of diff not shown. | |||
| Offset 15247, 284 lines modified | Offset 15247, 284 lines modified | ||
| 0003b8e0:·6765·743d·2223·6964·6d37·3939·3022·2074··get="#idm7990"·t | 0003b8e0:·6765·743d·2223·6964·6d37·3939·3022·2074··get="#idm7990"·t | ||
| 0003b8f0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b8f0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b900:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b900:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b910:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b910:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b920:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b920:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b930:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b930:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b940:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b940:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b950:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003b960:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b970:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b980:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b990:·6964·3d22·6964·6d37·3939·3022·3e3c·7461··id="idm7990"><ta | |||
| 0003b9a0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b9b0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b9c0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b9d0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b9e0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b9f0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003ba00:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ba10:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003ba20:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ba30:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003ba40:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003ba50:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ba60:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003ba70:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003ba80:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003ba90:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003baa0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003bab0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003bac0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003bad0:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003bae0:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003baf0:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003bb00:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003bb10:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003bb20:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003bb30:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003bb40:·612d·7461·7267·6574·3d22·2369·646d·3739··a-target="#idm79 | |||
| 0003bb50:·3931·2220·7461·6269·6e64·6578·3d22·3022··91"·tabindex="0" | |||
| 0003bb60:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003bb70:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003bb80:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003bb90:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003bba0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003bbb0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b | 0003b950:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0003b | 0003b960:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b | 0003b970:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b | 0003b980:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | ||
| 0003b | 0003b990:·3939·3022·3e3c·7461·626c·6520·636c·6173··990"><table·clas | ||
| 0003b | 0003b9a0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b | 0003b9b0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b | 0003b9c0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b | 0003b9d0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b | 0003b9e0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b | 0003b9f0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003ba00:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b | 0003ba10:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003ba20:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003ba30:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003ba40:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003ba50:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003ba60:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003ba70:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003ba80:·653e·3c70·7265·3e3c·636f·6465·3e0a·646e··e><pre><code>.dn | |||
| 0003ba90:·6620·696e·7374·616c·6c20·6169·6465·0a3c··f·install·aide.< | |||
| 0003baa0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003bab0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003bac0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003bad0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003bae0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003baf0:·2223·6964·6d37·3939·3122·2074·6162·696e··"#idm7991"·tabin | |||
| 0003bb00:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bb10:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bb20:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bb30:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bb40:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003bb50:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | |||
| 0003bb60:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003bb70:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003bb80:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003bb90:·7365·2220·6964·3d22·6964·6d37·3939·3122··se"·id="idm7991" | |||
| 0003bba0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003bbb0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003bbc0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003bbd0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003bbe0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003bbf0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003bc00:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bc10:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003bc20:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bc30:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003bc40:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003bc | 0003bc50:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003bc | 0003bc60:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003bc | 0003bc70:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | ||
| 0003bc | 0003bc80:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003bc90:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 0003bca0:·6520·696e·7374·616c·6c20·6169·6465·0a3c··e·install·aide.< | |||
| 0003bcb0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003bcc0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003bcd0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003bce0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003bcf0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bd00:·2223·6964·6d37·3939·3222·2074·6162·696e··"#idm7992"·tabin | |||
| 0003bd10:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bd20:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bd30:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bd40:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bd50:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003bd60:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003bd70:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003bd80:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003bd90:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bda0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bdb0:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003bdc0:·3932·223e·3c70·7265·3e3c·636f·6465·3e0a··92"><pre><code>. | |||
| 0003bdd0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003bde0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003bdf0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003bcf0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003bd00:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003bd10:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003bd20:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003bd30:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003bd40:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | |||
| Max diff block lines reached; 22934549/22972389 bytes (99.84%) of diff not shown. | |||
| Offset 15252, 284 lines modified | Offset 15252, 284 lines modified | ||
| 0003b930:·7461·7267·6574·3d22·2369·646d·3739·3930··target="#idm7990 | 0003b930:·7461·7267·6574·3d22·2369·646d·3739·3930··target="#idm7990 | ||
| 0003b940:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b940:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b950:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b950:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b960:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b960:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b970:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b970:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b980:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b980:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b990:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b990:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b9a0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b9b0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b9c0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b9d0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b9e0:·6522·2069·643d·2269·646d·3739·3930·223e··e"·id="idm7990"> | |||
| 0003b9f0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ba00:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003ba10:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ba20:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003ba30:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003ba40:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003ba50:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ba60:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003ba70:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ba80:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003ba90:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003baa0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003bab0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003bac0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003bad0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003bae0:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003baf0:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003bb00:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003bb10:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003bb20:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003bb30:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003bb40:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003bb50:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003bb60:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003bb70:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003bb80:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003bb90:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003bba0:·6d37·3939·3122·2074·6162·696e·6465·783d··m7991"·tabindex= | |||
| 0003bbb0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003bbc0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003bbd0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003bbe0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003bbf0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003bc00:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003bc10:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003bc20:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003bc30:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003bc40:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003bc50:·3739·3931·223e·3c74·6162·6c65·2063·6c61··7991"><table·cla | |||
| 0003bc60:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003bc70:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003bc80:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003bc90:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003bca0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003bcb0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003bcc0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003bcd0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003bce0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bcf0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003bd00:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003bd10:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003bd20:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003bd30:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003bd40:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003bd50:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003bd60:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003bd70:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003bd80:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003bd90:·6f0a·2020·7461·6773·3a0a·2020·2d20·4343··o.··tags:.··-·CC | |||
| 0003bda0:·452d·3830·3834·342d·340a·2020·2d20·434a··E-80844-4.··-·CJ | |||
| 0003bdb0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003bdc0:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003bdd0:·382d·3031·3033·3539·0a20·202d·204e·4953··8-010359.··-·NIS | |||
| 0003bde0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003bdf0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003be00:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003be10:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003be20:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003be30:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003be40:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003be50:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003be60:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003be70:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003be80:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003be90:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003bea0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003beb0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003bec0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003bed0:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003bee0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003bef0:·2722·6b65·726e·656c·2220·696e·2061·6e73··'"kernel"·in·ans | |||
| 0003bf00:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003bf10:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | |||
| 0003bf20:·2043·4345·2d38·3038·3434·2d34·0a20·202d···CCE-80844-4.··- | |||
| 0003bf30:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003bf40:·202d·2044·4953·412d·5354·4947·2d52·4845···-·DISA-STIG-RHE | |||
| 0003bf50:·4c2d·3038·2d30·3130·3335·390a·2020·2d20··L-08-010359.··-· | |||
| 0003bf60:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003bf70:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003bf80:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003bf90:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003bfa0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003bfb0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003bfc0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003bfd0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003bfe0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003bff0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003c000:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003c010:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003c020:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003c030:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003c040:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003c050:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003c060:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003c070:·646d·3739·3932·2220·7461·6269·6e64·6578··dm7992"·tabindex | |||
| 0003c080:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003c090:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003c0a0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003c0b0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003c0c0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003c0d0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003c0e0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003c0f0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003c100:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c110:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| Max diff block lines reached; 23230828/23268668 bytes (99.84%) of diff not shown. | |||
| Offset 15242, 285 lines modified | Offset 15242, 285 lines modified | ||
| 0003b890:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b890:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b8a0:·3d22·2369·646d·3739·3930·2220·7461·6269··="#idm7990"·tabi | 0003b8a0:·3d22·2369·646d·3739·3930·2220·7461·6269··="#idm7990"·tabi | ||
| 0003b8b0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b8b0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b8c0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b8c0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b8d0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b8d0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b8e0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b8e0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b8f0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b8f0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b900:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b900:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | ||
| 0003b910:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b920:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b930:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b940:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b950:·2269·646d·3739·3930·223e·3c74·6162·6c65··"idm7990"><table | |||
| 0003b960:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b970:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b980:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b990:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b9a0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b9b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b9c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b9d0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b9e0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b9f0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003ba00:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003ba10:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003ba20:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003ba30:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003ba40:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003ba50:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003ba60:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003ba70:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003ba80:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003ba90:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003baa0:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003bab0:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003bac0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003bad0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003bae0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003baf0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003bb00:·6172·6765·743d·2223·6964·6d37·3939·3122··arget="#idm7991" | |||
| 0003bb10:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003bb20:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bb30:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bb40:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bb50:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bb60:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003bb70:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b | 0003b910:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0003b | 0003b920:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b930:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b940:·7073·6522·2069·643d·2269·646d·3739·3930··pse"·id="idm7990 | |||
| 0003b950:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b960:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b970:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b980:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b990:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b9a0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b9b0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b9c0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b9d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b9e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b9f0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003ba00:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003ba10:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003ba20:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003ba30:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003ba40:·7072·653e·3c63·6f64·653e·0a64·6e66·2069··pre><code>.dnf·i | |||
| 0003ba50:·6e73·7461·6c6c·2061·6964·650a·3c2f·636f··nstall·aide.</co | |||
| 0003ba60:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003ba70:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003ba80:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003ba90:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003baa0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003bab0:·646d·3739·3931·2220·7461·6269·6e64·6578··dm7991"·tabindex | |||
| 0003bac0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003bad0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003bae0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003baf0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003bb00:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003bb10:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | |||
| 0003bb20:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bb30:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bb | 0003bb40:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003bb | 0003bb50:·2069·643d·2269·646d·3739·3931·223e·3c74···id="idm7991"><t | ||
| 0003bb | 0003bb60:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003bb | 0003bb70:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003bb | 0003bb80:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003bb | 0003bb90:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003b | 0003bba0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003b | 0003bbb0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003b | 0003bbc0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003bbd0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b | 0003bbe0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b | 0003bbf0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003bc | 0003bc00:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003bc | 0003bc10:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003bc | 0003bc20:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003bc | 0003bc30:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | ||
| 0003bc | 0003bc40:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003bc50:·3c63·6f64·653e·0a70·6163·6b61·6765·2069··<code>.package·i | |||
| 0003bc60:·6e73·7461·6c6c·2061·6964·650a·3c2f·636f··nstall·aide.</co | |||
| 0003bc70:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003bc80:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003bc90:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003bca0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003bcb0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003bcc0:·646d·3739·3932·2220·7461·6269·6e64·6578··dm7992"·tabindex | |||
| 0003bcd0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003bce0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003bcf0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003bd00:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003bd10:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003bd20:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003bd30:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003bd40:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003bd50:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003bd60:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003bd70:·7365·2220·6964·3d22·6964·6d37·3939·3222··se"·id="idm7992" | |||
| 0003bd80:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003bd90:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003bda0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003bdb0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003bcb0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003bcc0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003bcd0:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003bce0:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003bcf0:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| Max diff block lines reached; 9875693/9913671 bytes (99.62%) of diff not shown. | |||
| Offset 131, 26 lines modified | Offset 131, 48 lines modified | ||
| 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 132 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 134 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 134 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 135 | ·············_\x8c_\x8i_\x8s············5.3.1 | 135 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 137 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 137 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 143 | include·install_aide | ||
| 144 | class·install_aide·{ | ||
| 145 | ··package·{·'aide': | ||
| 146 | ····ensure·=>·'installed', | ||
| 147 | ··} | ||
| 148 | 143 | dnf·install·aide | |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | package·install·aide | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | [[packages]] | ||
| 152 | name·=·"aide" | ||
| 153 | version·=·"*" | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 160 | if·rpm·--quiet·-q·kernel;·then | ||
| 161 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 162 | ····yum·install·-y·"aide" | ||
| 163 | fi | ||
| 164 | else | ||
| 165 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 166 | fi | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 154 | -·name:·Gather·the·package·facts | 172 | -·name:·Gather·the·package·facts |
| 155 | ··package_facts: | 173 | ··package_facts: |
| Offset 183, 55 lines modified | Offset 205, 33 lines modified | ||
| 183 | ··-·PCI-DSSv4-11.5.2 | 205 | ··-·PCI-DSSv4-11.5.2 |
| 184 | ··-·enable_strategy | 206 | ··-·enable_strategy |
| 185 | ··-·low_complexity | 207 | ··-·low_complexity |
| 186 | ··-·low_disruption | 208 | ··-·low_disruption |
| 187 | ··-·medium_severity | 209 | ··-·medium_severity |
| 188 | ··-·no_reboot_needed | 210 | ··-·no_reboot_needed |
| 189 | ··-·package_aide_installed | 211 | ··-·package_aide_installed |
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 191 | [[packages]] | ||
| 192 | name·=·"aide" | ||
| 193 | version·=·"*" | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 199 | dnf·install·aide | ||
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 205 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 206 | if·rpm·--quiet·-q·kernel;·then | ||
| 207 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 208 | ····yum·install·-y·"aide" | ||
| 209 | fi | ||
| 210 | else | ||
| 211 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 212 | fi | ||
| 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 218 | package·--add=aide | 217 | package·--add=aide |
| 219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 220 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 221 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 222 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 223 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 223 | include·install_aide | ||
| 224 | 224 | class·install_aide·{ | |
| 225 | ··package·{·'aide': | ||
| 226 | ····ensure·=>·'installed', | ||
| 227 | ··} | ||
| 228 | } | ||
| 225 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 229 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 226 | Run·the·following·command·to·generate·a·new·database: | 230 | Run·the·following·command·to·generate·a·new·database: |
| 227 | $·sudo·/usr/sbin/aide·--init | 231 | $·sudo·/usr/sbin/aide·--init |
| 228 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 232 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 229 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 233 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 230 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 234 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 231 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 235 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 259, 14 lines modified | Offset 259, 28 lines modified | ||
| 259 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 259 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 260 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 260 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 261 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 261 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 262 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 262 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 263 | ·············_\x8c_\x8i_\x8s············5.3.1 | 263 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 264 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 264 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 265 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 265 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 266 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 267 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 268 | if·rpm·--quiet·-q·kernel;·then | ||
| 269 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| Max diff block lines reached; 1120584/1125757 bytes (99.54%) of diff not shown. | |||
| Offset 14908, 296 lines modified | Offset 14908, 296 lines modified | ||
| 0003a3b0:·7461·7267·6574·3d22·2369·646d·3133·3432··target="#idm1342 | 0003a3b0:·7461·7267·6574·3d22·2369·646d·3133·3432··target="#idm1342 | ||
| 0003a3c0:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | 0003a3c0:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 0003a3d0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003a3d0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003a3e0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003a3e0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003a3f0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003a3f0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003a400:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003a400:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003a410:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003a410:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003a420:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003a430:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003a440:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003a450:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003a460:·7365·2220·6964·3d22·6964·6d31·3334·3231··se"·id="idm13421 | |||
| 0003a470:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003a480:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003a490:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003a4a0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003a4b0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003a4c0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003a4d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003a4e0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003a4f0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003a500:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003a | 0003a420:·7469·6f6e·2073·6372·6970·7420·e287·b23c··tion·script·...< | ||
| 0003a430:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003a440:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003a450:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003a460:·6964·6d31·3334·3231·223e·3c74·6162·6c65··idm13421"><table | |||
| 0003a470:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003a480:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003a490:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003a4a0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003a4b0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003a4c0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003a4d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003a4e0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003a4f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003a500:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003a510:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003a520:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003a530:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003a5 | 0003a540:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003a530:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003a540:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003a550:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003a5 | 0003a550:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003a560:·653e·0a64·6e66·2069·6e73·7461·6c6c·2064··e>.dnf·install·d | |||
| 0003a570:·6e66·2d61·7574·6f6d·6174·6963·0a3c·2f63··nf-automatic.</c | |||
| 0003a580:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003a590:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003a5a0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003a5b0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003a5c0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003a5d0:·6964·6d31·3334·3232·2220·7461·6269·6e64··idm13422"·tabind | |||
| 0003a5e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003a5f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003a600:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003a610:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003a620:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003a630:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 0003a640:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003a650:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003a660:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003a670:·6522·2069·643d·2269·646d·3133·3432·3222··e"·id="idm13422" | |||
| 0003a680:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003a690:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003a6a0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003a6b0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003a6c0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003a6d0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003a6e0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003a6f0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003a700:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003a710:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003a720:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003a730:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003a740:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003a750:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003a760:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003a770:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 0003a | 0003a780:·6520·696e·7374·616c·6c20·646e·662d·6175··e·install·dnf-au | ||
| 0003a790:·746f·6d61·7469·630a·3c2f·636f·6465·3e3c··tomatic.</code>< | |||
| 0003a580:·746f·6d61·7469·630a·0a63·6c61·7373·2069··tomatic..class·i | |||
| 0003a590:·6e73·7461·6c6c·5f64·6e66·2d61·7574·6f6d··nstall_dnf-autom | |||
| 0003a5a0:·6174·6963·207b·0a20·2070·6163·6b61·6765··atic·{.··package | |||
| 0003a5b0:·207b·2027·646e·662d·6175·746f·6d61·7469···{·'dnf-automati | |||
| 0003a5c0:·6327·3a0a·2020·2020·656e·7375·7265·203d··c':.····ensure·= | |||
| 0003a5d0:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003a5e0:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003a | 0003a7a0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003a | 0003a7b0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003a | 0003a7c0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0003a | 0003a7d0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003a | 0003a7e0:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | ||
| 0003a | 0003a7f0:·3432·3322·2074·6162·696e·6465·783d·2230··423"·tabindex="0 | ||
| 0003a | 0003a800:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003a | 0003a810:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003a | 0003a820:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003a | 0003a830:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003a | 0003a840:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003a850:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003a860:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003a870:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003a880:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003a890:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003a8a0:·2069·643d·2269·646d·3133·3432·3322·3e3c···id="idm13423">< | |||
| 0003a8b0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003a8c0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003a6a0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003a6b0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003a6c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003a6d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003a6e0:·6c61·7073·6522·2069·643d·2269·646d·3133··lapse"·id="idm13 | |||
| 0003a6f0:·3432·3222·3e3c·7461·626c·6520·636c·6173··422"><table·clas | |||
| 0003a700:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003a710:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003a720:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003a730:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003a740:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003a750:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003a760:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003a770:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003a780:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003a790:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003a7a0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003a7b0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003a7c0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003a7d0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| Max diff block lines reached; 3397732/3437228 bytes (98.85%) of diff not shown. | |||
| Offset 95, 26 lines modified | Offset 95, 49 lines modified | ||
| 95 | ·············suitable·for·automatic,·regular·execution. | 95 | ·············suitable·for·automatic,·regular·execution. |
| 96 | Severity: ···medium | 96 | Severity: ···medium |
| 97 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 97 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 98 | Identifiers:·CCE-82985-3 | 98 | Identifiers:·CCE-82985-3 |
| 99 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 99 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 100 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 100 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 101 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 101 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 103 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 103 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 104 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 104 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 105 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 105 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 106 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 106 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 107 | include·install_dnf-automatic | ||
| 107 | dnf·install·dnf-automatic | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 108 | c | 113 | package·install·dnf-automatic |
| 109 | ··package·{·'dnf-automatic': | ||
| 110 | ····ensure·=>·'installed', | ||
| 111 | ··} | ||
| 112 | 114 | _.R_.e_.m_.e_.d_.i_.a_.t_.i_.o_.n_.·_.O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_.t_.·_.s_.n_.i_.p_.p_.e_.t_.·_.⇲ | |
| 115 | [[packages]] | ||
| 116 | name·=·"dnf-automatic" | ||
| 117 | version·=·"*" | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 123 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 124 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 125 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 126 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 127 | ····yum·install·-y·"dnf-automatic" | ||
| 128 | fi | ||
| 129 | else | ||
| 130 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 131 | fi | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 118 | -·name:·Gather·the·package·facts | 137 | -·name:·Gather·the·package·facts |
| 119 | ··package_facts: | 138 | ··package_facts: |
| Offset 140, 56 lines modified | Offset 163, 33 lines modified | ||
| 140 | ··-·CCE-82985-3 | 163 | ··-·CCE-82985-3 |
| 141 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 142 | ··-·low_complexity | 165 | ··-·low_complexity |
| 143 | ··-·low_disruption | 166 | ··-·low_disruption |
| 144 | ··-·medium_severity | 167 | ··-·medium_severity |
| 145 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 146 | ··-·package_dnf-automatic_installed | 169 | ··-·package_dnf-automatic_installed |
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 148 | [[packages]] | ||
| 149 | name·=·"dnf-automatic" | ||
| 150 | version·=·"*" | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 156 | dnf·install·dnf-automatic | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 163 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 164 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 165 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 166 | ····yum·install·-y·"dnf-automatic" | ||
| 167 | fi | ||
| 168 | else | ||
| 169 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 170 | fi | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | package·--add=dnf-automatic | 175 | package·--add=dnf-automatic |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 181 | include·install_dnf-automatic | ||
| 182 | class·install_dnf-automatic·{ | ||
| 182 | package· | 183 | ··package·{·'dnf-automatic': |
| 184 | ····ensure·=>·'installed', | ||
| 185 | ··} | ||
| 186 | } | ||
| 183 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 187 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 184 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 188 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 185 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 189 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 186 | automatic.conf. | 190 | automatic.conf. |
| 187 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 191 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 188 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 192 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 189 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 193 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 200, 14 lines modified | Offset 200, 56 lines modified | ||
| 200 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 200 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 201 | Identifiers:·CCE-82494-6 | 201 | Identifiers:·CCE-82494-6 |
| 202 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 202 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 203 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 203 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 204 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 204 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 205 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 | 205 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 |
| 206 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 206 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 208 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 209 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 210 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| Max diff block lines reached; 239992/246516 bytes (97.35%) of diff not shown. | |||
| Offset 15299, 285 lines modified | Offset 15299, 285 lines modified | ||
| 0003bc20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003bc20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003bc30:·2223·6964·6d37·3939·3022·2074·6162·696e··"#idm7990"·tabin | 0003bc30:·2223·6964·6d37·3939·3022·2074·6162·696e··"#idm7990"·tabin | ||
| 0003bc40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003bc40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003bc50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003bc50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003bc60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003bc60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003bc70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003bc70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003bc80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003bc80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003bc90:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003bca0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003bcb0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bcc0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bcd0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bce0:·6964·6d37·3939·3022·3e3c·7461·626c·6520··idm7990"><table· | |||
| 0003bcf0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003bd00:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003bd10:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003bd20:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003bd30:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003bd40:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bd50:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003bd60:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003bd70:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bd80:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003bd90:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003bda0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003bdb0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003bdc0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003bdd0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003bde0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003bdf0:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003be00:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003be10:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003be20:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003be30:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003be40:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003be50:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003be60:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003be70:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003be80:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003be90:·7267·6574·3d22·2369·646d·3739·3931·2220··rget="#idm7991"· | |||
| 0003bea0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003beb0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bec0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bed0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bee0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bef0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003bf00:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003bf10:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bf20:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bf30:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bf40:·2220·6964·3d22·6964·6d37·3939·3122·3e3c··"·id="idm7991">< | |||
| 0003bf50:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bf60:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bf70:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bf80:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bf90:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003bfa0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003bfb0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bfc0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003bfd0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bfe0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003bff0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003c000:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c010:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003c020:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003c030:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003c040:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | |||
| 0003c050:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | |||
| 0003c060:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | |||
| 0003c070:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | |||
| 0003c080:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | |||
| 0003c090:·733a·0a20·202d·2043·4345·2d38·3038·3434··s:.··-·CCE-80844 | |||
| 0003c0a0:·2d34·0a20·202d·2043·4a49·532d·352e·3130··-4.··-·CJIS-5.10 | |||
| 0003c0b0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003c0c0:·4947·2d52·4845·4c2d·3038·2d30·3130·3335··IG-RHEL-08-01035 | |||
| 0003c0d0:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003c0e0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003c0f0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003c100:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003c110:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003c120:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003c130:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003c140:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003c150:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003c160:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003c170:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003c180:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003c190:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003c1a0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003c1b0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003c1c0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003c1d0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003c1e0:·0a20·2077·6865·6e3a·2027·226b·6572·6e65··.··when:·'"kerne | |||
| 0003c1f0:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | |||
| 0003c200:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003c210:·7461·6773·3a0a·2020·2d20·4343·452d·3830··tags:.··-·CCE-80 | |||
| 0003c220:·3834·342d·340a·2020·2d20·434a·4953·2d35··844-4.··-·CJIS-5 | |||
| 0003c230:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003c240:·2d53·5449·472d·5248·454c·2d30·382d·3031··-STIG-RHEL-08-01 | |||
| 0003c250:·3033·3539·0a20·202d·204e·4953·542d·3830··0359.··-·NIST-80 | |||
| 0003c260:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003c270:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003c280:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003c290:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003c2a0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003c2b0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003c2c0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003c2d0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003c2e0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003c2f0:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003c300:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003c310:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003c320:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003c330:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003c340:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003c350:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003c360:·6172·6765·743d·2223·6964·6d37·3939·3222··arget="#idm7992" | |||
| 0003c370:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003c380:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003c390:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003c3a0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003c3b0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003c3c0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003c3d0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003c3e0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003c3f0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c400:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| Max diff block lines reached; 26259823/26297801 bytes (99.86%) of diff not shown. | |||
| Offset 15261, 285 lines modified | Offset 15261, 285 lines modified | ||
| 0003b9c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b9c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b9d0:·3739·3930·2220·7461·6269·6e64·6578·3d22··7990"·tabindex=" | 0003b9d0:·3739·3930·2220·7461·6269·6e64·6578·3d22··7990"·tabindex=" | ||
| 0003b9e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b9e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b9f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b9f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003ba00:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003ba00:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003ba10:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003ba10:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003ba20:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003ba20:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003ba30:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003ba40:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ba50:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ba60:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ba70:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003ba80:·3930·223e·3c74·6162·6c65·2063·6c61·7373··90"><table·class | |||
| 0003ba90:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003baa0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003bab0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003bac0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003bad0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003bae0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003baf0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003bb00:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003bb10:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bb20:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003bb30:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003bb40:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003bb50:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bb60:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bb70:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003bb80:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003bb90:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003bba0:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003bbb0:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003bbc0:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003bbd0:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003bbe0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003bbf0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003bc00:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003bc10:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003bc20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bc30:·2223·6964·6d37·3939·3122·2074·6162·696e··"#idm7991"·tabin | |||
| 0003bc40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bc50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bc60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bc70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bc80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003bc90:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003bca0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003bcb0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bcc0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bcd0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003bce0:·2269·646d·3739·3931·223e·3c74·6162·6c65··"idm7991"><table | |||
| 0003bcf0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003bd00:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003bd10:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003bd20:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003bd30:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003bd40:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bd50:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003bd60:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003bd70:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003bd80:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003bd90:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003bda0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003bdb0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003bdc0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003bdd0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003bde0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003bdf0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003be00:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003be10:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003be20:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003be30:·2d20·4343·452d·3830·3834·342d·340a·2020··-·CCE-80844-4.·· | |||
| 0003be40:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003be50:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003be60:·454c·2d30·382d·3031·3033·3539·0a20·202d··EL-08-010359.··- | |||
| 0003be70:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003be80:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003be90:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003bea0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003beb0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003bec0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003bed0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003bee0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003bef0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003bf00:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003bf10:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003bf20:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003bf30:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003bf40:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003bf50:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003bf60:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003bf70:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003bf80:·656e·3a20·2722·6b65·726e·656c·2220·696e··en:·'"kernel"·in | |||
| 0003bf90:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003bfa0:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003bfb0:·0a20·202d·2043·4345·2d38·3038·3434·2d34··.··-·CCE-80844-4 | |||
| 0003bfc0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003bfd0:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003bfe0:·2d52·4845·4c2d·3038·2d30·3130·3335·390a··-RHEL-08-010359. | |||
| 0003bff0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003c000:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003c010:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003c020:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003c030:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003c040:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003c050:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003c060:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003c070:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003c080:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003c090:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003c0a0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003c0b0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003c0c0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003c0d0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003c0e0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003c0f0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003c100:·3d22·2369·646d·3739·3932·2220·7461·6269··="#idm7992"·tabi | |||
| 0003c110:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003c120:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003c130:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003c140:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003c150:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003c160:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003c170:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003c180:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003c190:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c1a0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| Max diff block lines reached; 11568457/11606435 bytes (99.67%) of diff not shown. | |||
| Offset 117, 26 lines modified | Offset 117, 48 lines modified | ||
| 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ·············_\x8c_\x8i_\x8s············5.3.1 | 121 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | include·install_aide | ||
| 130 | class·install_aide·{ | ||
| 131 | ··package·{·'aide': | ||
| 132 | ····ensure·=>·'installed', | ||
| 133 | ··} | ||
| 134 | 129 | dnf·install·aide | |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | package·install·aide | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | [[packages]] | ||
| 138 | name·=·"aide" | ||
| 139 | version·=·"*" | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 146 | if·rpm·--quiet·-q·kernel;·then | ||
| 147 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 148 | ····yum·install·-y·"aide" | ||
| 149 | fi | ||
| 150 | else | ||
| 151 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 152 | fi | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | -·name:·Gather·the·package·facts | 158 | -·name:·Gather·the·package·facts |
| 141 | ··package_facts: | 159 | ··package_facts: |
| Offset 169, 55 lines modified | Offset 191, 33 lines modified | ||
| 169 | ··-·PCI-DSSv4-11.5.2 | 191 | ··-·PCI-DSSv4-11.5.2 |
| 170 | ··-·enable_strategy | 192 | ··-·enable_strategy |
| 171 | ··-·low_complexity | 193 | ··-·low_complexity |
| 172 | ··-·low_disruption | 194 | ··-·low_disruption |
| 173 | ··-·medium_severity | 195 | ··-·medium_severity |
| 174 | ··-·no_reboot_needed | 196 | ··-·no_reboot_needed |
| 175 | ··-·package_aide_installed | 197 | ··-·package_aide_installed |
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | [[packages]] | ||
| 178 | name·=·"aide" | ||
| 179 | version·=·"*" | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 185 | dnf·install·aide | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 192 | if·rpm·--quiet·-q·kernel;·then | ||
| 193 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 194 | ····yum·install·-y·"aide" | ||
| 195 | fi | ||
| 196 | else | ||
| 197 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 198 | fi | ||
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 204 | package·--add=aide | 203 | package·--add=aide |
| 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 209 | include·install_aide | ||
| 210 | 210 | class·install_aide·{ | |
| 211 | ··package·{·'aide': | ||
| 212 | ····ensure·=>·'installed', | ||
| 213 | ··} | ||
| 214 | } | ||
| 211 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 212 | Run·the·following·command·to·generate·a·new·database: | 216 | Run·the·following·command·to·generate·a·new·database: |
| 213 | $·sudo·/usr/sbin/aide·--init | 217 | $·sudo·/usr/sbin/aide·--init |
| 214 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 218 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 215 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 219 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 216 | To·initiate·a·manual·check,·run·the·following·command: | 220 | To·initiate·a·manual·check,·run·the·following·command: |
| 217 | $·sudo·/usr/sbin/aide·--check | 221 | $·sudo·/usr/sbin/aide·--check |
| Offset 238, 14 lines modified | Offset 238, 28 lines modified | ||
| 238 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 238 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 239 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 239 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 240 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 240 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 241 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 241 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 242 | ·············_\x8c_\x8i_\x8s············5.3.1 | 242 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 243 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 243 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 244 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 244 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 245 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 246 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 247 | if·rpm·--quiet·-q·kernel;·then | ||
| 248 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| Max diff block lines reached; 1352239/1357561 bytes (99.61%) of diff not shown. | |||
| Offset 15252, 285 lines modified | Offset 15252, 285 lines modified | ||
| 0003b930:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b930:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b940:·3d22·2369·646d·3739·3930·2220·7461·6269··="#idm7990"·tabi | 0003b940:·3d22·2369·646d·3739·3930·2220·7461·6269··="#idm7990"·tabi | ||
| 0003b950:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b950:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b960:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b960:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b970:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b970:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b980:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b980:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b990:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b990:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b9a0:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003b9b0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b9c0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b9d0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b9e0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b9f0:·2269·646d·3739·3930·223e·3c74·6162·6c65··"idm7990"><table | |||
| 0003ba00:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003ba10:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003ba20:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003ba30:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003ba40:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003ba50:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ba60:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003ba70:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003ba80:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003ba90:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003baa0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003bab0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003bac0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003bad0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003bae0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003baf0:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003bb00:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003bb10:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003bb20:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003bb30:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003bb40:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003bb50:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003bb60:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003bb70:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003bb80:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003bb90:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003bba0:·6172·6765·743d·2223·6964·6d37·3939·3122··arget="#idm7991" | |||
| 0003bbb0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003bbc0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bbd0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bbe0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bbf0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bc00:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003bc10:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003bc20:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bc30:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bc40:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bc50:·6522·2069·643d·2269·646d·3739·3931·223e··e"·id="idm7991"> | |||
| 0003bc60:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003bc70:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003bc80:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003bc90:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003bca0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003bcb0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003bcc0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003bcd0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003bce0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bcf0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003bd00:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003bd10:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003bd20:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003bd30:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003bd40:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003bd50:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003bd60:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003bd70:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003bd80:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003bd90:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003bda0:·6773·3a0a·2020·2d20·4343·452d·3830·3834··gs:.··-·CCE-8084 | |||
| 0003bdb0:·342d·340a·2020·2d20·434a·4953·2d35·2e31··4-4.··-·CJIS-5.1 | |||
| 0003bdc0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003bdd0:·5449·472d·5248·454c·2d30·382d·3031·3033··TIG-RHEL-08-0103 | |||
| 0003bde0:·3539·0a20·202d·204e·4953·542d·3830·302d··59.··-·NIST-800- | |||
| 0003bdf0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003be00:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003be10:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003be20:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003be30:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003be40:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003be50:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003be60:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003be70:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003be80:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003be90:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003bea0:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003beb0:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003bec0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003bed0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003bee0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003bef0:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003bf00:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003bf10:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003bf20:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | |||
| 0003bf30:·3038·3434·2d34·0a20·202d·2043·4a49·532d··0844-4.··-·CJIS- | |||
| 0003bf40:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003bf50:·412d·5354·4947·2d52·4845·4c2d·3038·2d30··A-STIG-RHEL-08-0 | |||
| 0003bf60:·3130·3335·390a·2020·2d20·4e49·5354·2d38··10359.··-·NIST-8 | |||
| 0003bf70:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003bf80:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003bf90:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003bfa0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003bfb0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003bfc0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003bfd0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003bfe0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003bff0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003c000:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003c010:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003c020:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003c030:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003c040:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003c050:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003c060:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003c070:·7461·7267·6574·3d22·2369·646d·3739·3932··target="#idm7992 | |||
| 0003c080:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003c090:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003c0a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003c0b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003c0c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003c0d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003c0e0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003c0f0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003c100:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003c110:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| Max diff block lines reached; 11257294/11295272 bytes (99.66%) of diff not shown. | |||
| Offset 116, 26 lines modified | Offset 116, 48 lines modified | ||
| 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ·············_\x8c_\x8i_\x8s············5.3.1 | 120 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | include·install_aide | ||
| 129 | class·install_aide·{ | ||
| 130 | ··package·{·'aide': | ||
| 131 | ····ensure·=>·'installed', | ||
| 132 | ··} | ||
| 133 | 128 | dnf·install·aide | |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | package·install·aide | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 136 | [[packages]] | ||
| 137 | name·=·"aide" | ||
| 138 | version·=·"*" | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 145 | if·rpm·--quiet·-q·kernel;·then | ||
| 146 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 147 | ····yum·install·-y·"aide" | ||
| 148 | fi | ||
| 149 | else | ||
| 150 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 151 | fi | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 139 | -·name:·Gather·the·package·facts | 157 | -·name:·Gather·the·package·facts |
| 140 | ··package_facts: | 158 | ··package_facts: |
| Offset 168, 55 lines modified | Offset 190, 33 lines modified | ||
| 168 | ··-·PCI-DSSv4-11.5.2 | 190 | ··-·PCI-DSSv4-11.5.2 |
| 169 | ··-·enable_strategy | 191 | ··-·enable_strategy |
| 170 | ··-·low_complexity | 192 | ··-·low_complexity |
| 171 | ··-·low_disruption | 193 | ··-·low_disruption |
| 172 | ··-·medium_severity | 194 | ··-·medium_severity |
| 173 | ··-·no_reboot_needed | 195 | ··-·no_reboot_needed |
| 174 | ··-·package_aide_installed | 196 | ··-·package_aide_installed |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | [[packages]] | ||
| 177 | name·=·"aide" | ||
| 178 | version·=·"*" | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | dnf·install·aide | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 190 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 191 | if·rpm·--quiet·-q·kernel;·then | ||
| 192 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 193 | ····yum·install·-y·"aide" | ||
| 194 | fi | ||
| 195 | else | ||
| 196 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 197 | fi | ||
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 203 | package·--add=aide | 202 | package·--add=aide |
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 208 | include·install_aide | ||
| 209 | 209 | class·install_aide·{ | |
| 210 | ··package·{·'aide': | ||
| 211 | ····ensure·=>·'installed', | ||
| 212 | ··} | ||
| 213 | } | ||
| 210 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 214 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 211 | Run·the·following·command·to·generate·a·new·database: | 215 | Run·the·following·command·to·generate·a·new·database: |
| 212 | $·sudo·/usr/sbin/aide·--init | 216 | $·sudo·/usr/sbin/aide·--init |
| 213 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 217 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 214 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 218 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 215 | To·initiate·a·manual·check,·run·the·following·command: | 219 | To·initiate·a·manual·check,·run·the·following·command: |
| 216 | $·sudo·/usr/sbin/aide·--check | 220 | $·sudo·/usr/sbin/aide·--check |
| Offset 237, 14 lines modified | Offset 237, 28 lines modified | ||
| 237 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 237 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 238 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 238 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 239 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 239 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 240 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 240 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 241 | ·············_\x8c_\x8i_\x8s············5.3.1 | 241 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 242 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 242 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 243 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 243 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 245 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 246 | if·rpm·--quiet·-q·kernel;·then | ||
| 247 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| Max diff block lines reached; 1315299/1320621 bytes (99.60%) of diff not shown. | |||
| Offset 15291, 284 lines modified | Offset 15291, 284 lines modified | ||
| 0003bba0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003bba0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003bbb0:·3939·3022·2074·6162·696e·6465·783d·2230··990"·tabindex="0 | 0003bbb0:·3939·3022·2074·6162·696e·6465·783d·2230··990"·tabindex="0 | ||
| 0003bbc0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003bbc0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003bbd0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003bbd0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003bbe0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003bbe0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003bbf0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003bbf0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003bc00:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003bc00:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003bc10:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003bc20:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003bc30:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bc40:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bc50:·6170·7365·2220·6964·3d22·6964·6d37·3939··apse"·id="idm799 | |||
| 0003bc60:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003bc70:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003bc80:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003bc90:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003bca0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003bcb0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003bcc0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003bcd0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003bce0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003bcf0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003bd00:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003bd10:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003bd20:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003bd30:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003bd40:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003bd50:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003bd60:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003bd70:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003bd80:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003bd90:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003bda0:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003bdb0:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003bdc0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003bdd0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003bde0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003bdf0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003be00:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003be10:·2369·646d·3739·3931·2220·7461·6269·6e64··#idm7991"·tabind | |||
| 0003be20:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003be30:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003be40:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003be50:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003be60:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003be70:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003be80:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003be90:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bea0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003beb0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bec0:·6964·6d37·3939·3122·3e3c·7461·626c·6520··idm7991"><table· | |||
| 0003bed0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003bee0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003bef0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003bf00:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003bf10:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003bf20:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bf30:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003bf40:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003bf50:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bf60:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003bf70:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003bf80:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003bf90:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003bfa0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003bfb0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003bfc0:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 0003bfd0:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 0003bfe0:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 0003bff0:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 0003c000:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 0003c010:·2043·4345·2d38·3038·3434·2d34·0a20·202d···CCE-80844-4.··- | |||
| 0003c020:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003c030:·202d·2044·4953·412d·5354·4947·2d52·4845···-·DISA-STIG-RHE | |||
| 0003c040:·4c2d·3038·2d30·3130·3335·390a·2020·2d20··L-08-010359.··-· | |||
| 0003c050:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003c060:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003c070:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003c080:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003c090:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003c0a0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003c0b0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003c0c0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003c0d0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003c0e0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003c0f0:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003c100:·655f·696e·7374·616c·6c65·640a·0a2d·206e··e_installed..-·n | |||
| 0003c110:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003c120:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003c130:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003c140:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003c150:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003c160:·6e3a·2027·226b·6572·6e65·6c22·2069·6e20··n:·'"kernel"·in· | |||
| 0003c170:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003c180:·636b·6167·6573·270a·2020·7461·6773·3a0a··ckages'.··tags:. | |||
| 0003c190:·2020·2d20·4343·452d·3830·3834·342d·340a····-·CCE-80844-4. | |||
| 0003c1a0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003c1b0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003c1c0:·5248·454c·2d30·382d·3031·3033·3539·0a20··RHEL-08-010359.· | |||
| 0003c1d0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003c1e0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003c1f0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003c200:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003c210:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003c220:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003c230:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003c240:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003c250:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003c260:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003c270:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003c280:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003c290:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c2a0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c2b0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c2c0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c2d0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c2e0:·2223·6964·6d37·3939·3222·2074·6162·696e··"#idm7992"·tabin | |||
| 0003c2f0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c300:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c310:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c320:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c330:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c340:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003c350:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003c360:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003c370:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c380:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| Max diff block lines reached; 26050368/26088208 bytes (99.85%) of diff not shown. | |||
| Offset 15283, 285 lines modified | Offset 15283, 285 lines modified | ||
| 0003bb20:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003bb20:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003bb30:·6d37·3939·3022·2074·6162·696e·6465·783d··m7990"·tabindex= | 0003bb30:·6d37·3939·3022·2074·6162·696e·6465·783d··m7990"·tabindex= | ||
| 0003bb40:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003bb40:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003bb50:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003bb50:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003bb60:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003bb60:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003bb70:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003bb70:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003bb80:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003bb80:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003bb90:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003bba0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003bbb0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003bbc0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003bbd0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003bbe0:·3939·3022·3e3c·7461·626c·6520·636c·6173··990"><table·clas | |||
| 0003bbf0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003bc00:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003bc10:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003bc20:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003bc30:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003bc40:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003bc50:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003bc60:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003bc70:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bc80:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003bc90:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003bca0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003bcb0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003bcc0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003bcd0:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003bce0:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003bcf0:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003bd00:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003bd10:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003bd20:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003bd30:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003bd40:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003bd50:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003bd60:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003bd70:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003bd80:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003bd90:·3d22·2369·646d·3739·3931·2220·7461·6269··="#idm7991"·tabi | |||
| 0003bda0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003bdb0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003bdc0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003bdd0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003bde0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003bdf0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003be00:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003be10:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003be20:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003be30:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003be40:·3d22·6964·6d37·3939·3122·3e3c·7461·626c··="idm7991"><tabl | |||
| 0003be50:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003be60:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003be70:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003be80:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003be90:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003bea0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003beb0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003bec0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003bed0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bee0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003bef0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003bf00:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003bf10:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003bf20:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003bf30:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003bf40:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003bf50:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003bf60:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003bf70:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003bf80:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003bf90:·202d·2043·4345·2d38·3038·3434·2d34·0a20···-·CCE-80844-4.· | |||
| 0003bfa0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003bfb0:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003bfc0:·4845·4c2d·3038·2d30·3130·3335·390a·2020··HEL-08-010359.·· | |||
| 0003bfd0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003bfe0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003bff0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003c000:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003c010:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003c020:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003c030:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003c040:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003c050:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003c060:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003c070:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003c080:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003c090:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003c0a0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003c0b0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003c0c0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003c0d0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003c0e0:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003c0f0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003c100:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003c110:·3a0a·2020·2d20·4343·452d·3830·3834·342d··:.··-·CCE-80844- | |||
| 0003c120:·340a·2020·2d20·434a·4953·2d35·2e31·302e··4.··-·CJIS-5.10. | |||
| 0003c130:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003c140:·472d·5248·454c·2d30·382d·3031·3033·3539··G-RHEL-08-010359 | |||
| 0003c150:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003c160:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003c170:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003c180:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003c190:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003c1a0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003c1b0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003c1c0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003c1d0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003c1e0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003c1f0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003c200:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003c210:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003c220:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003c230:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003c240:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003c250:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003c260:·743d·2223·6964·6d37·3939·3222·2074·6162··t="#idm7992"·tab | |||
| 0003c270:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003c280:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003c290:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003c2a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003c2b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003c2c0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003c2d0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003c2e0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003c2f0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c300:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| Max diff block lines reached; 10024771/10062749 bytes (99.62%) of diff not shown. | |||
| Offset 122, 26 lines modified | Offset 122, 48 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ·············_\x8c_\x8i_\x8s············5.3.1 | 126 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | include·install_aide | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | 134 | dnf·install·aide | |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | package·install·aide | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | [[packages]] | ||
| 143 | name·=·"aide" | ||
| 144 | version·=·"*" | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 151 | if·rpm·--quiet·-q·kernel;·then | ||
| 152 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 153 | ····yum·install·-y·"aide" | ||
| 154 | fi | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | -·name:·Gather·the·package·facts | 163 | -·name:·Gather·the·package·facts |
| 146 | ··package_facts: | 164 | ··package_facts: |
| Offset 174, 55 lines modified | Offset 196, 33 lines modified | ||
| 174 | ··-·PCI-DSSv4-11.5.2 | 196 | ··-·PCI-DSSv4-11.5.2 |
| 175 | ··-·enable_strategy | 197 | ··-·enable_strategy |
| 176 | ··-·low_complexity | 198 | ··-·low_complexity |
| 177 | ··-·low_disruption | 199 | ··-·low_disruption |
| 178 | ··-·medium_severity | 200 | ··-·medium_severity |
| 179 | ··-·no_reboot_needed | 201 | ··-·no_reboot_needed |
| 180 | ··-·package_aide_installed | 202 | ··-·package_aide_installed |
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | [[packages]] | ||
| 183 | name·=·"aide" | ||
| 184 | version·=·"*" | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 190 | dnf·install·aide | ||
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 196 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 197 | if·rpm·--quiet·-q·kernel;·then | ||
| 198 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 199 | ····yum·install·-y·"aide" | ||
| 200 | fi | ||
| 201 | else | ||
| 202 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 203 | fi | ||
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 209 | package·--add=aide | 208 | package·--add=aide |
| 210 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 211 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 212 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 213 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 214 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 214 | include·install_aide | ||
| 215 | 215 | class·install_aide·{ | |
| 216 | ··package·{·'aide': | ||
| 217 | ····ensure·=>·'installed', | ||
| 218 | ··} | ||
| 219 | } | ||
| 216 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 220 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 217 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 221 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 218 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 222 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 219 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 223 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 220 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 290, 90 lines modified | Offset 290, 110 lines modified | ||
| 290 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 290 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 291 | Severity: ···medium | 291 | Severity: ···medium |
| 292 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 292 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 293 | Identifiers:·CCE-82723-8 | 293 | Identifiers:·CCE-82723-8 |
| 294 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 294 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| 295 | References:··_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 295 | References:··_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 296 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 296 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 298 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 298 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 299 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 299 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 300 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 300 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 301 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 301 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 1319913/1325830 bytes (99.55%) of diff not shown. | |||
| Offset 15318, 414 lines modified | Offset 15318, 414 lines modified | ||
| 0003bd50:·7267·6574·3d22·2369·646d·3736·3437·2220··rget="#idm7647"· | 0003bd50:·7267·6574·3d22·2369·646d·3736·3437·2220··rget="#idm7647"· | ||
| 0003bd60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003bd60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003bd70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003bd70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bd80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bd80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003bd90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003bd90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bda0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bda0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003bdb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bdb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bdc0:·6e20· | 0003bdc0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | ||
| 0003bdd0:· | 0003bdd0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003bde0:· | 0003bde0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003bdf0:·6 | 0003bdf0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003be00:· | 0003be00:·643d·2269·646d·3736·3437·223e·3c70·7265··d="idm7647"><pre | ||
| 0003be10:· | 0003be10:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 0003be20:· | 0003be20:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 0003be30:· | 0003be30:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 0003be40:· | 0003be40:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 0003be50:· | 0003be50:·2120·2820·7b20·7270·6d20·2d2d·7175·6965··!·(·{·rpm·--quie | ||
| 0003be60:· | 0003be60:·7420·2d71·206b·6572·6e65·6c20·3b7d·2026··t·-q·kernel·;}·& | ||
| 0003be70:·6 | 0003be70:·616d·703b·2661·6d70·3b20·7b20·7270·6d20··amp;&·{·rpm· | ||
| 0003be80:· | 0003be80:·2d2d·7175·6965·7420·2d71·2072·706d·2d6f··--quiet·-q·rpm-o | ||
| 0003be90:·7 | 0003be90:·7374·7265·6520·3b7d·2026·616d·703b·2661··stree·;}·&&a | ||
| 0003bea0:·6 | 0003bea0:·6d70·3b20·7b20·7270·6d20·2d2d·7175·6965··mp;·{·rpm·--quie | ||
| 0003beb0:· | 0003beb0:·7420·2d71·2062·6f6f·7463·203b·7d20·2661··t·-q·bootc·;}·&a | ||
| 0003bec0:·6 | 0003bec0:·6d70·3b26·616d·703b·207b·2021·2072·706d··mp;&·{·!·rpm | ||
| 0003bed0:· | 0003bed0:·202d·2d71·7569·6574·202d·7120·6f70·656e···--quiet·-q·open | ||
| 0003bee0:· | 0003bee0:·7368·6966·742d·6b75·6265·6c65·7420·3b7d··shift-kubelet·;} | ||
| 0003bef0:· | 0003bef0:·2029·3b20·7468·656e·0a0a·2320·4669·6e64···);·then..#·Find | ||
| 0003bf00:· | 0003bf00:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | ||
| 0003bf10:·6 | 0003bf10:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | ||
| 0003bf20:· | 0003bf20:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | ||
| 0003bf30:· | 0003bf30:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | ||
| 0003bf40:· | 0003bf40:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | ||
| 0003bf50:· | 0003bf50:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | ||
| 0003bf60:· | 0003bf60:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | ||
| 0003bf70:· | 0003bf70:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | ||
| 0003bf80:· | 0003bf80:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | ||
| 0003bf90:· | 0003bf90:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | ||
| 0003bfa0:· | 0003bfa0:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | ||
| 0003bfb0:· | 0003bfb0:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | ||
| 0003bfc0:· | 0003bfc0:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | ||
| 0003bfd0:· | 0003bfd0:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | ||
| 0003bfe0:· | 0003bfe0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003bff0:· | 0003bff0:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | ||
| 0003c000:· | 0003c000:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | ||
| 0003c010:· | 0003c010:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | ||
| 0003c020:· | 0003c020:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | ||
| 0003c030:· | 0003c030:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | ||
| 0003c040:· | 0003c040:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | ||
| 0003c050:· | 0003c050:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | ||
| 0003c060:· | 0003c060:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | ||
| 0003c070:· | 0003c070:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | ||
| 0003c080:· | 0003c080:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | ||
| 0003c090:· | 0003c090:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | ||
| 0003c0a0:·6 | 0003c0a0:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | ||
| 0003c0b0:· | 0003c0b0:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | ||
| 0003c0c0:· | 0003c0c0:·200a·2020·2020·7975·6d20·7265·696e·7374···.····yum·reinst | ||
| 0003c0d0:·6 | 0003c0d0:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | ||
| 0003c0e0:· | 0003c0e0:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | ||
| 0003c0f0:·20 | 0003c0f0:·2020·0a66·690a·0a65·6c73·650a·2020·2020····.fi..else.···· | ||
| 0003c100:·2 | 0003c100:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | ||
| 0003c110:· | 0003c110:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | ||
| 0003c120:· | 0003c120:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | ||
| 0003c130:·6 | 0003c130:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | ||
| 0003c140:· | 0003c140:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | ||
| 0003c150:· | 0003c150:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | ||
| 0003c160:· | 0003c160:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | ||
| 0003c170:· | 0003c170:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003c180:· | 0003c180:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 0003c190:·6 | 0003c190:·6172·6765·743d·2223·6964·6d37·3634·3822··arget="#idm7648" | ||
| 0003c1a0:· | 0003c1a0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003c1b0:·6 | 0003c1b0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003c1c0:· | 0003c1c0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003c1d0:· | 0003c1d0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003c1e0:·6 | 0003c1e0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003c1f0:· | 0003c1f0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003c200:·6 | 0003c200:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003c210:·6 | 0003c210:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003c220:· | 0003c220:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003c230:·6 | 0003c230:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003c240:· | 0003c240:·6522·2069·643d·2269·646d·3736·3438·223e··e"·id="idm7648"> | ||
| 0003c250:· | 0003c250:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003c260:· | 0003c260:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003c270:· | 0003c270:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003c280:·2 | 0003c280:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003c290:·2 | 0003c290:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003c2a0:· | 0003c2a0:·7869·7479·3a3c·2f74·683e·3c74·643e·6869··xity:</th><td>hi | ||
| 0003c2b0:· | 0003c2b0:·6768·3c2f·7464·3e3c·2f74·723e·3c74·723e··gh</td></tr><tr> | ||
| 0003c2c0:· | 0003c2c0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003c2d0:·2 | 0003c2d0:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | ||
| 0003c2e0:· | 0003c2e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003c2f0:· | 0003c2f0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003c300:· | 0003c300:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003c310:· | 0003c310:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003c320:· | 0003c320:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | ||
| 0003c330:· | 0003c330:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | ||
| 0003c340:· | 0003c340:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | ||
| 0003c350:· | 0003c350:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | ||
| 0003c360:·20 | 0003c360:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | ||
| 0003c370:·2 | 0003c370:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | ||
| 0003c380:· | 0003c380:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | ||
| 0003c390:·6 | 0003c390:·6f0a·2020·7461·6773·3a0a·2020·2d20·4343··o.··tags:.··-·CC | ||
| 0003c3a0:· | 0003c3a0:·452d·3830·3835·372d·360a·2020·2d20·434a··E-80857-6.··-·CJ | ||
| 0003c3b0:· | 0003c3b0:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | ||
| 0003c3c0:· | 0003c3c0:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | ||
| 0003c3d0:· | 0003c3d0:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | ||
| 0003c3e0:· | 0003c3e0:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | ||
| 0003c3f0:· | 0003c3f0:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | ||
| 0003c400:· | 0003c400:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c410:· | 0003c410:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | ||
| 0003c420:· | 0003c420:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | ||
| 0003c430:·2 | 0003c430:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c440:· | 0003c440:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | ||
| 0003c450:· | 0003c450:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | ||
| 0003c460:·20 | 0003c460:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003c470:· | 0003c470:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | ||
| 0003c480:· | 0003c480:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003c490:· | 0003c490:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003c4a0:· | 0003c4a0:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | ||
| 0003c4b0:·7 | 0003c4b0:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | ||
| 0003c4c0:·6 | 0003c4c0:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | ||
| 0003c4d0:· | 0003c4d0:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0003c4e0:·206 | 0003c4e0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| 0003c4f0:· | 0003c4f0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 0003c500:· | 0003c500:·7472·6174·6567·790a·2020·2d20·7270·6d5f··trategy.··-·rpm_ | ||
| 0003c510:· | 0003c510:·7665·7269·6679·5f68·6173·6865·730a·0a2d··verify_hashes..- | ||
| 0003c520:· | 0003c520:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| Max diff block lines reached; 6785976/6841756 bytes (99.18%) of diff not shown. | |||
| Offset 115, 14 lines modified | Offset 115, 33 lines modified | ||
| 115 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 115 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 116 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 116 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 117 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 117 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 118 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 118 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 123 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 124 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 125 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 126 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 127 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 128 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 129 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 130 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 131 | fi | ||
| 132 | else | ||
| 133 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 134 | fi | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 127 | -·name:·Gather·the·package·facts | 140 | -·name:·Gather·the·package·facts |
| 128 | ··package_facts: | 141 | ··package_facts: |
| Offset 295, 33 lines modified | Offset 314, 14 lines modified | ||
| 295 | ··-·PCI-DSSv4-11.5.2 | 314 | ··-·PCI-DSSv4-11.5.2 |
| 296 | ··-·high_complexity | 315 | ··-·high_complexity |
| 297 | ··-·high_severity | 316 | ··-·high_severity |
| 298 | ··-·medium_disruption | 317 | ··-·medium_disruption |
| 299 | ··-·no_reboot_needed | 318 | ··-·no_reboot_needed |
| 300 | ··-·restrict_strategy | 319 | ··-·restrict_strategy |
| 301 | ··-·rpm_verify_hashes | 320 | ··-·rpm_verify_hashes |
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 303 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 304 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 305 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 306 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 307 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 308 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 309 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 310 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 311 | fi | ||
| 312 | else | ||
| 313 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 314 | fi | ||
| 315 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 321 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 316 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 322 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 317 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 323 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 318 | run·the·following·command·to·determine·which·package·owns·it: | 324 | run·the·following·command·to·determine·which·package·owns·it: |
| 319 | $·rpm·-qf·FILENAME | 325 | $·rpm·-qf·FILENAME |
| 320 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 326 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 321 | $·sudo·rpm·--restore·PACKAGENAME | 327 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 341, 14 lines modified | Offset 341, 46 lines modified | ||
| 341 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 341 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 342 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 342 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 343 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 343 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 344 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 344 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 345 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 345 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 346 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 346 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 347 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 347 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 348 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 349 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 350 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 351 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 352 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 353 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 354 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 355 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 356 | declare·-A·SETPERMS_RPM_DICT | ||
| 357 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 358 | #·is·expected·by·the·RPM·database | ||
| 359 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 360 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 361 | do | ||
| 362 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 363 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 364 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 365 | done | ||
| 366 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 367 | #·correct·values | ||
| 368 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 369 | do | ||
| 370 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 371 | done | ||
| 372 | else | ||
| 373 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 374 | fi | ||
| 348 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 375 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 349 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 376 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 350 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 377 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 351 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 378 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 352 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 379 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 353 | -·name:·Gather·the·package·facts | 380 | -·name:·Gather·the·package·facts |
| 354 | ··package_facts: | 381 | ··package_facts: |
| Offset 460, 46 lines modified | Offset 492, 14 lines modified | ||
| 460 | ··-·PCI-DSSv4-11.5.2 | 492 | ··-·PCI-DSSv4-11.5.2 |
| 461 | ··-·high_complexity | 493 | ··-·high_complexity |
| 462 | ··-·high_severity | 494 | ··-·high_severity |
| 463 | ··-·medium_disruption | 495 | ··-·medium_disruption |
| 464 | ··-·no_reboot_needed | 496 | ··-·no_reboot_needed |
| 465 | ··-·restrict_strategy | 497 | ··-·restrict_strategy |
| 466 | ··-·rpm_verify_ownership | 498 | ··-·rpm_verify_ownership |
| 467 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 468 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 469 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 470 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 471 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 731307/739032 bytes (98.95%) of diff not shown. | |||
| Offset 15344, 414 lines modified | Offset 15344, 414 lines modified | ||
| 0003bef0:·7461·7267·6574·3d22·2369·646d·3736·3437··target="#idm7647 | 0003bef0:·7461·7267·6574·3d22·2369·646d·3736·3437··target="#idm7647 | ||
| 0003bf00:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003bf00:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003bf10:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003bf10:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003bf20:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003bf20:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003bf30:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003bf30:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003bf40:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003bf40:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003bf50:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003bf50:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003bf60:·696f·6e20· | 0003bf60:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | ||
| 0003bf70:· | 0003bf70:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003bf80:· | 0003bf80:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003bf90:· | 0003bf90:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003bfa0:· | 0003bfa0:·2069·643d·2269·646d·3736·3437·223e·3c70···id="idm7647"><p | ||
| 0003bfb0:· | 0003bfb0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0003bfc0:·6 | 0003bfc0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | ||
| 0003bfd0:·6 | 0003bfd0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | ||
| 0003bfe0:· | 0003bfe0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | ||
| 0003bff0:·6 | 0003bff0:·6620·2120·2820·7b20·7270·6d20·2d2d·7175··f·!·(·{·rpm·--qu | ||
| 0003c000:·6 | 0003c000:·6965·7420·2d71·206b·6572·6e65·6c20·3b7d··iet·-q·kernel·;} | ||
| 0003c010:·6 | 0003c010:·2026·616d·703b·2661·6d70·3b20·7b20·7270···&&·{·rp | ||
| 0003c020:· | 0003c020:·6d20·2d2d·7175·6965·7420·2d71·2072·706d··m·--quiet·-q·rpm | ||
| 0003c030:· | 0003c030:·2d6f·7374·7265·6520·3b7d·2026·616d·703b··-ostree·;}·& | ||
| 0003c040:·2 | 0003c040:·2661·6d70·3b20·7b20·7270·6d20·2d2d·7175··&·{·rpm·--qu | ||
| 0003c050:· | 0003c050:·6965·7420·2d71·2062·6f6f·7463·203b·7d20··iet·-q·bootc·;}· | ||
| 0003c060:· | 0003c060:·2661·6d70·3b26·616d·703b·207b·2021·2072··&&·{·!·r | ||
| 0003c070:· | 0003c070:·706d·202d·2d71·7569·6574·202d·7120·6f70··pm·--quiet·-q·op | ||
| 0003c080:· | 0003c080:·656e·7368·6966·742d·6b75·6265·6c65·7420··enshift-kubelet· | ||
| 0003c090:· | 0003c090:·3b7d·2029·3b20·7468·656e·0a0a·2320·4669··;}·);·then..#·Fi | ||
| 0003c0a0:·6 | 0003c0a0:·6e64·2077·6869·6368·2066·696c·6573·2068··nd·which·files·h | ||
| 0003c0b0:· | 0003c0b0:·6176·6520·696e·636f·7272·6563·7420·6861··ave·incorrect·ha | ||
| 0003c0c0:· | 0003c0c0:·7368·2028·6e6f·7420·696e·202f·6574·632c··sh·(not·in·/etc, | ||
| 0003c0d0:·20 | 0003c0d0:·2062·6563·6175·7365·206f·6620·7468·6520···because·of·the· | ||
| 0003c0e0:· | 0003c0e0:·7379·7374·656d·2072·656c·6174·6564·2063··system·related·c | ||
| 0003c0f0:· | 0003c0f0:·6f6e·6669·6720·6669·6c65·7329·2061·6e64··onfig·files)·and | ||
| 0003c100:· | 0003c100:·2074·6865·6e20·6765·7420·6669·6c65·7320···then·get·files· | ||
| 0003c110:· | 0003c110:·6e61·6d65·730a·6669·6c65·735f·7769·7468··names.files_with | ||
| 0003c120:· | 0003c120:·5f69·6e63·6f72·7265·6374·5f68·6173·683d··_incorrect_hash= | ||
| 0003c130:· | 0003c130:·2224·2872·706d·202d·5661·202d·2d6e·6f63··"$(rpm·-Va·--noc | ||
| 0003c140:· | 0003c140:·6f6e·6669·6720·7c20·6772·6570·202d·4520··onfig·|·grep·-E· | ||
| 0003c150:· | 0003c150:·275e·2e2e·3527·207c·2061·776b·2027·7b70··'^..5'·|·awk·'{p | ||
| 0003c160:· | 0003c160:·7269·6e74·2024·4e46·7d27·2029·220a·0a69··rint·$NF}'·)"..i | ||
| 0003c170:· | 0003c170:·6620·5b20·2d6e·2022·2466·696c·6573·5f77··f·[·-n·"$files_w | ||
| 0003c180:· | 0003c180:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003c190:· | 0003c190:·7368·2220·5d3b·2074·6865·6e0a·2020·2020··sh"·];·then.···· | ||
| 0003c1a0:· | 0003c1a0:·2320·4672·6f6d·2066·696c·6573·206e·616d··#·From·files·nam | ||
| 0003c1b0:· | 0003c1b0:·6573·2067·6574·2070·6163·6b61·6765·206e··es·get·package·n | ||
| 0003c1c0:· | 0003c1c0:·616d·6573·2061·6e64·2063·6861·6e67·6520··ames·and·change· | ||
| 0003c1d0:· | 0003c1d0:·6e65·776c·696e·6520·746f·2073·7061·6365··newline·to·space | ||
| 0003c1e0:· | 0003c1e0:·2c20·6265·6361·7573·6520·7270·6d20·7772··,·because·rpm·wr | ||
| 0003c1f0:· | 0003c1f0:·6974·6573·2065·6163·6820·7061·636b·6167··ites·each·packag | ||
| 0003c200:· | 0003c200:·6520·746f·206e·6577·206c·696e·650a·2020··e·to·new·line.·· | ||
| 0003c210:· | 0003c210:·2020·7061·636b·6167·6573·5f74·6f5f·7265····packages_to_re | ||
| 0003c220:·6 | 0003c220:·696e·7374·616c·6c3d·2224·2872·706d·202d··install="$(rpm·- | ||
| 0003c230:·7 | 0003c230:·7166·2024·6669·6c65·735f·7769·7468·5f69··qf·$files_with_i | ||
| 0003c240:· | 0003c240:·6e63·6f72·7265·6374·5f68·6173·6820·7c20··ncorrect_hash·|· | ||
| 0003c250:· | 0003c250:·7472·2027·5c6e·2720·2720·2729·220a·0a20··tr·'\n'·'·')"..· | ||
| 0003c260:· | 0003c260:·2020·200a·2020·2020·7975·6d20·7265·696e·····.····yum·rein | ||
| 0003c270:· | 0003c270:·7374·616c·6c20·2d79·2024·7061·636b·6167··stall·-y·$packag | ||
| 0003c280:· | 0003c280:·6573·5f74·6f5f·7265·696e·7374·616c·6c0a··es_to_reinstall. | ||
| 0003c290:· | 0003c290:·2020·2020·0a66·690a·0a65·6c73·650a·2020······.fi..else.·· | ||
| 0003c2a0:· | 0003c2a0:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | ||
| 0003c2b0:·6 | 0003c2b0:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | ||
| 0003c2c0:·3 | 0003c2c0:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | ||
| 0003c2d0:· | 0003c2d0:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | ||
| 0003c2e0:·6 | 0003c2e0:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | ||
| 0003c2f0:· | 0003c2f0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | ||
| 0003c300:· | 0003c300:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | ||
| 0003c310:· | 0003c310:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | ||
| 0003c320:· | 0003c320:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | ||
| 0003c330:· | 0003c330:·2d74·6172·6765·743d·2223·6964·6d37·3634··-target="#idm764 | ||
| 0003c340:· | 0003c340:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | ||
| 0003c350:· | 0003c350:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003c360:·6 | 0003c360:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003c370:· | 0003c370:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003c380:·61 | 0003c380:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003c390:·66 | 0003c390:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003c3a0:· | 0003c3a0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003c3b0:· | 0003c3b0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003c3c0:· | 0003c3c0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003c3d0:· | 0003c3d0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003c3e0:· | 0003c3e0:·7073·6522·2069·643d·2269·646d·3736·3438··pse"·id="idm7648 | ||
| 0003c3f0:· | 0003c3f0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003c400:· | 0003c400:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003c410:· | 0003c410:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003c420:· | 0003c420:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003c430:· | 0003c430:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003c440:· | 0003c440:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003c450:· | 0003c450:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | ||
| 0003c460:· | 0003c460:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003c470:· | 0003c470:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | ||
| 0003c480:· | 0003c480:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003c490:· | 0003c490:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003c4a0:·43 | 0003c4a0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003c4b0:· | 0003c4b0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003c4c0:· | 0003c4c0:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003c4d0:· | 0003c4d0:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003c4e0:· | 0003c4e0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003c4f0:·2 | 0003c4f0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | ||
| 0003c500:· | 0003c500:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | ||
| 0003c510:· | 0003c510:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | ||
| 0003c520:· | 0003c520:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | ||
| 0003c530:· | 0003c530:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | ||
| 0003c540:· | 0003c540:·4343·452d·3830·3835·372d·360a·2020·2d20··CCE-80857-6.··-· | ||
| 0003c550:· | 0003c550:·434a·4953·2d35·2e31·302e·342e·310a·2020··CJIS-5.10.4.1.·· | ||
| 0003c560:· | 0003c560:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003c570:· | 0003c570:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003c580:· | 0003c580:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003c590:· | 0003c590:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003c5a0:· | 0003c5a0:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003c5b0:· | 0003c5b0:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003c5c0:· | 0003c5c0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003c5d0:· | 0003c5d0:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003c5e0:·2 | 0003c5e0:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003c5f0:· | 0003c5f0:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003c600:· | 0003c600:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c610:·2d | 0003c610:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003c620:· | 0003c620:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003c630:·2 | 0003c630:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003c640:· | 0003c640:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003c650:· | 0003c650:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003c660:· | 0003c660:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003c670:·6 | 0003c670:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003c680:· | 0003c680:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003c690:·6 | 0003c690:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003c6a0:· | 0003c6a0:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003c6b0:·6 | 0003c6b0:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| 0003c6c0:· | 0003c6c0:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | ||
| Max diff block lines reached; 17464393/17520173 bytes (99.68%) of diff not shown. | |||
| Offset 121, 14 lines modified | Offset 121, 33 lines modified | ||
| 121 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 121 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 122 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 122 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 123 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 123 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 124 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 124 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 130 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 131 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 132 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 133 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 134 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 135 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 136 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 137 | fi | ||
| 138 | else | ||
| 139 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 140 | fi | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 133 | -·name:·Gather·the·package·facts | 146 | -·name:·Gather·the·package·facts |
| 134 | ··package_facts: | 147 | ··package_facts: |
| Offset 301, 33 lines modified | Offset 320, 14 lines modified | ||
| 301 | ··-·PCI-DSSv4-11.5.2 | 320 | ··-·PCI-DSSv4-11.5.2 |
| 302 | ··-·high_complexity | 321 | ··-·high_complexity |
| 303 | ··-·high_severity | 322 | ··-·high_severity |
| 304 | ··-·medium_disruption | 323 | ··-·medium_disruption |
| 305 | ··-·no_reboot_needed | 324 | ··-·no_reboot_needed |
| 306 | ··-·restrict_strategy | 325 | ··-·restrict_strategy |
| 307 | ··-·rpm_verify_hashes | 326 | ··-·rpm_verify_hashes |
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 309 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 310 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 311 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 312 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 313 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 314 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 315 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 316 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 317 | fi | ||
| 318 | else | ||
| 319 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 320 | fi | ||
| 321 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 327 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 322 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 328 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 323 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 329 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 324 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 330 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 325 | $·rpm·-qf·FILENAME | 331 | $·rpm·-qf·FILENAME |
| 326 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 332 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 349, 14 lines modified | Offset 349, 50 lines modified | ||
| 349 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 349 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 350 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 350 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 351 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 351 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 352 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 352 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 353 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 353 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 354 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 354 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 355 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 355 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 361 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 362 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 363 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 364 | declare·-A·SETPERMS_RPM_DICT | ||
| 365 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 366 | #·is·expected·by·the·RPM·database | ||
| 367 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 368 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 369 | do | ||
| 370 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 371 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 372 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 373 | ········do | ||
| 374 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 375 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 376 | ········done | ||
| 377 | done | ||
| 378 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 379 | #·correct·values | ||
| 380 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 381 | do | ||
| 382 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 383 | done | ||
| 384 | else | ||
| 385 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 386 | fi | ||
| 356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 387 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 388 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 389 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 390 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 391 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 361 | -·name:·Gather·the·package·facts | 392 | -·name:·Gather·the·package·facts |
| 362 | ··package_facts: | 393 | ··package_facts: |
| Offset 472, 50 lines modified | Offset 508, 14 lines modified | ||
| 472 | ··-·PCI-DSSv4-11.5.2 | 508 | ··-·PCI-DSSv4-11.5.2 |
| 473 | ··-·high_complexity | 509 | ··-·high_complexity |
| 474 | ··-·high_severity | 510 | ··-·high_severity |
| 475 | ··-·medium_disruption | 511 | ··-·medium_disruption |
| 476 | ··-·no_reboot_needed | 512 | ··-·no_reboot_needed |
| 477 | ··-·restrict_strategy | 513 | ··-·restrict_strategy |
| 478 | ··-·rpm_verify_permissions | 514 | ··-·rpm_verify_permissions |
| 479 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1374363/1382461 bytes (99.41%) of diff not shown. | |||
| Offset 15352, 414 lines modified | Offset 15352, 414 lines modified | ||
| 0003bf70:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003bf70:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003bf80:·3634·3722·2074·6162·696e·6465·783d·2230··647"·tabindex="0 | 0003bf80:·3634·3722·2074·6162·696e·6465·783d·2230··647"·tabindex="0 | ||
| 0003bf90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003bf90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003bfa0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003bfa0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003bfb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003bfb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003bfc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003bfc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003bfd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003bfd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003bfe0:·6961·7469·6f6e·20 | 0003bfe0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 0003bff0:·6 | 0003bff0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003c000:· | 0003c000:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003c010:· | 0003c010:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003c020:· | 0003c020:·7365·2220·6964·3d22·6964·6d37·3634·3722··se"·id="idm7647" | ||
| 0003c030:·3 | 0003c030:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | ||
| 0003c040:· | 0003c040:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | ||
| 0003c050:· | 0003c050:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | ||
| 0003c060:·6 | 0003c060:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | ||
| 0003c070:· | 0003c070:·730a·6966·2021·2028·207b·2072·706d·202d··s.if·!·(·{·rpm·- | ||
| 0003c080:· | 0003c080:·2d71·7569·6574·202d·7120·6b65·726e·656c··-quiet·-q·kernel | ||
| 0003c090:· | 0003c090:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003c0a0:· | 0003c0a0:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003c0b0:· | 0003c0b0:·7270·6d2d·6f73·7472·6565·203b·7d20·2661··rpm-ostree·;}·&a | ||
| 0003c0c0:· | 0003c0c0:·6d70·3b26·616d·703b·207b·2072·706d·202d··mp;&·{·rpm·- | ||
| 0003c0d0:· | 0003c0d0:·2d71·7569·6574·202d·7120·626f·6f74·6320··-quiet·-q·bootc· | ||
| 0003c0e0:·3 | 0003c0e0:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003c0f0:· | 0003c0f0:·2120·7270·6d20·2d2d·7175·6965·7420·2d71··!·rpm·--quiet·-q | ||
| 0003c100:· | 0003c100:·206f·7065·6e73·6869·6674·2d6b·7562·656c···openshift-kubel | ||
| 0003c110:·74 | 0003c110:·6574·203b·7d20·293b·2074·6865·6e0a·0a23··et·;}·);·then..# | ||
| 0003c120:·2 | 0003c120:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | ||
| 0003c130:· | 0003c130:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | ||
| 0003c140:·20 | 0003c140:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | ||
| 0003c150:·74 | 0003c150:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | ||
| 0003c160:· | 0003c160:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | ||
| 0003c170:·206 | 0003c170:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | ||
| 0003c180:· | 0003c180:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | ||
| 0003c190:· | 0003c190:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | ||
| 0003c1a0:· | 0003c1a0:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003c1b0:· | 0003c1b0:·7368·3d22·2428·7270·6d20·2d56·6120·2d2d··sh="$(rpm·-Va·-- | ||
| 0003c1c0:· | 0003c1c0:·6e6f·636f·6e66·6967·207c·2067·7265·7020··noconfig·|·grep· | ||
| 0003c1d0:·2d | 0003c1d0:·2d45·2027·5e2e·2e35·2720·7c20·6177·6b20··-E·'^..5'·|·awk· | ||
| 0003c1e0:·2 | 0003c1e0:·277b·7072·696e·7420·244e·467d·2720·2922··'{print·$NF}'·)" | ||
| 0003c1f0:· | 0003c1f0:·0a0a·6966·205b·202d·6e20·2224·6669·6c65··..if·[·-n·"$file | ||
| 0003c200:· | 0003c200:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003c210:· | 0003c210:·5f68·6173·6822·205d·3b20·7468·656e·0a20··_hash"·];·then.· | ||
| 0003c220:· | 0003c220:·2020·2023·2046·726f·6d20·6669·6c65·7320·····#·From·files· | ||
| 0003c230:· | 0003c230:·6e61·6d65·7320·6765·7420·7061·636b·6167··names·get·packag | ||
| 0003c240:· | 0003c240:·6520·6e61·6d65·7320·616e·6420·6368·616e··e·names·and·chan | ||
| 0003c250:· | 0003c250:·6765·206e·6577·6c69·6e65·2074·6f20·7370··ge·newline·to·sp | ||
| 0003c260:· | 0003c260:·6163·652c·2062·6563·6175·7365·2072·706d··ace,·because·rpm | ||
| 0003c270:·20 | 0003c270:·2077·7269·7465·7320·6561·6368·2070·6163···writes·each·pac | ||
| 0003c280:· | 0003c280:·6b61·6765·2074·6f20·6e65·7720·6c69·6e65··kage·to·new·line | ||
| 0003c290:· | 0003c290:·0a20·2020·2070·6163·6b61·6765·735f·746f··.····packages_to | ||
| 0003c2a0:· | 0003c2a0:·5f72·6569·6e73·7461·6c6c·3d22·2428·7270··_reinstall="$(rp | ||
| 0003c2b0:·6 | 0003c2b0:·6d20·2d71·6620·2466·696c·6573·5f77·6974··m·-qf·$files_wit | ||
| 0003c2c0:· | 0003c2c0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003c2d0:· | 0003c2d0:·207c·2074·7220·275c·6e27·2027·2027·2922···|·tr·'\n'·'·')" | ||
| 0003c2e0:· | 0003c2e0:·0a0a·2020·2020·0a20·2020·2079·756d·2072··..····.····yum·r | ||
| 0003c2f0:· | 0003c2f0:·6569·6e73·7461·6c6c·202d·7920·2470·6163··einstall·-y·$pac | ||
| 0003c300:· | 0003c300:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | ||
| 0003c310:·6 | 0003c310:·6c6c·0a20·2020·200a·6669·0a0a·656c·7365··ll.····.fi..else | ||
| 0003c320:· | 0003c320:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | ||
| 0003c330:·6 | 0003c330:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | ||
| 0003c340:·6 | 0003c340:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | ||
| 0003c350:· | 0003c350:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | ||
| 0003c360:· | 0003c360:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | ||
| 0003c370:· | 0003c370:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003c380:· | 0003c380:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003c390:· | 0003c390:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003c3a0:·6 | 0003c3a0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003c3b0:·6 | 0003c3b0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003c3c0:· | 0003c3c0:·3736·3438·2220·7461·6269·6e64·6578·3d22··7648"·tabindex=" | ||
| 0003c3d0:· | 0003c3d0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003c3e0:·20 | 0003c3e0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003c3f0:·6 | 0003c3f0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003c400:· | 0003c400:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003c410:· | 0003c410:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003c420:·6 | 0003c420:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003c430:·7 | 0003c430:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003c440:·2 | 0003c440:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003c450:·6 | 0003c450:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003c460:·6 | 0003c460:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | ||
| 0003c470:· | 0003c470:·3634·3822·3e3c·7461·626c·6520·636c·6173··648"><table·clas | ||
| 0003c480:· | 0003c480:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003c490:·7 | 0003c490:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003c4a0:· | 0003c4a0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003c4b0:· | 0003c4b0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003c4c0:· | 0003c4c0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003c4d0:·4 | 0003c4d0:·7464·3e68·6967·683c·2f74·643e·3c2f·7472··td>high</td></tr | ||
| 0003c4e0:· | 0003c4e0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003c4f0:· | 0003c4f0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 0003c500:· | 0003c500:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0003c510:· | 0003c510:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003c520:·3 | 0003c520:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003c530:· | 0003c530:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003c540:· | 0003c540:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 0003c550:· | 0003c550:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 0003c560:· | 0003c560:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003c570:· | 0003c570:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | ||
| 0003c580:· | 0003c580:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | ||
| 0003c590:· | 0003c590:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | ||
| 0003c5a0:·6 | 0003c5a0:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | ||
| 0003c5b0:· | 0003c5b0:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | ||
| 0003c5c0:·202 | 0003c5c0:·202d·2043·4345·2d38·3038·3537·2d36·0a20···-·CCE-80857-6.· | ||
| 0003c5d0:· | 0003c5d0:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003c5e0:· | 0003c5e0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003c5f0:· | 0003c5f0:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | ||
| 0003c600:· | 0003c600:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | ||
| 0003c610:· | 0003c610:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 0003c620:· | 0003c620:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | ||
| 0003c630:· | 0003c630:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | ||
| 0003c640:· | 0003c640:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003c650:· | 0003c650:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | ||
| 0003c660:· | 0003c660:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | ||
| 0003c670:· | 0003c670:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003c680:· | 0003c680:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | ||
| 0003c690:·2d | 0003c690:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | ||
| 0003c6a0:· | 0003c6a0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | ||
| 0003c6b0:· | 0003c6b0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 0003c6c0:· | 0003c6c0:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | ||
| 0003c6d0:· | 0003c6d0:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | ||
| 0003c6e0:·6 | 0003c6e0:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | ||
| 0003c6f0:·6 | 0003c6f0:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | ||
| 0003c700:·6 | 0003c700:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | ||
| 0003c710:· | 0003c710:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | ||
| 0003c720:·6 | 0003c720:·6963·745f·7374·7261·7465·6779·0a20·202d··ict_strategy.··- | ||
| 0003c730:· | 0003c730:·2072·706d·5f76·6572·6966·795f·6861·7368···rpm_verify_hash | ||
| 0003c740:·6 | 0003c740:·6573·0a0a·2d20·6e61·6d65·3a20·2753·6574··es..-·name:·'Set | ||
| Max diff block lines reached; 10179125/10234905 bytes (99.46%) of diff not shown. | |||
| Offset 122, 14 lines modified | Offset 122, 33 lines modified | ||
| 122 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 122 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 123 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 123 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 124 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 124 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 125 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 125 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 130 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 131 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 132 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 133 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 134 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 135 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 136 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 137 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 138 | fi | ||
| 139 | else | ||
| 140 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 141 | fi | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 134 | -·name:·Gather·the·package·facts | 147 | -·name:·Gather·the·package·facts |
| 135 | ··package_facts: | 148 | ··package_facts: |
| Offset 302, 33 lines modified | Offset 321, 14 lines modified | ||
| 302 | ··-·PCI-DSSv4-11.5.2 | 321 | ··-·PCI-DSSv4-11.5.2 |
| 303 | ··-·high_complexity | 322 | ··-·high_complexity |
| 304 | ··-·high_severity | 323 | ··-·high_severity |
| 305 | ··-·medium_disruption | 324 | ··-·medium_disruption |
| 306 | ··-·no_reboot_needed | 325 | ··-·no_reboot_needed |
| 307 | ··-·restrict_strategy | 326 | ··-·restrict_strategy |
| 308 | ··-·rpm_verify_hashes | 327 | ··-·rpm_verify_hashes |
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 310 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 311 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 312 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 313 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 314 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 315 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 316 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 317 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 318 | fi | ||
| 319 | else | ||
| 320 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 321 | fi | ||
| 322 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 328 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 323 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 329 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 324 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 330 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 325 | run·the·following·command·to·determine·which·package·owns·it: | 331 | run·the·following·command·to·determine·which·package·owns·it: |
| 326 | $·rpm·-qf·FILENAME | 332 | $·rpm·-qf·FILENAME |
| 327 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 333 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 328 | $·sudo·rpm·--restore·PACKAGENAME | 334 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 348, 14 lines modified | Offset 348, 46 lines modified | ||
| 348 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 348 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 349 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 349 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 350 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 350 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 351 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 351 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 352 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 352 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 353 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 353 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 354 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 354 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 356 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 357 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 358 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 359 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 360 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 361 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 362 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 363 | declare·-A·SETPERMS_RPM_DICT | ||
| 364 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 365 | #·is·expected·by·the·RPM·database | ||
| 366 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 367 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 368 | do | ||
| 369 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 370 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 371 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 372 | done | ||
| 373 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 374 | #·correct·values | ||
| 375 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 376 | do | ||
| 377 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 378 | done | ||
| 379 | else | ||
| 380 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 381 | fi | ||
| 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 382 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 356 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 383 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 357 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 384 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 358 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 385 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 359 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 386 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 360 | -·name:·Gather·the·package·facts | 387 | -·name:·Gather·the·package·facts |
| 361 | ··package_facts: | 388 | ··package_facts: |
| Offset 467, 46 lines modified | Offset 499, 14 lines modified | ||
| 467 | ··-·PCI-DSSv4-11.5.2 | 499 | ··-·PCI-DSSv4-11.5.2 |
| 468 | ··-·high_complexity | 500 | ··-·high_complexity |
| 469 | ··-·high_severity | 501 | ··-·high_severity |
| 470 | ··-·medium_disruption | 502 | ··-·medium_disruption |
| 471 | ··-·no_reboot_needed | 503 | ··-·no_reboot_needed |
| 472 | ··-·restrict_strategy | 504 | ··-·restrict_strategy |
| 473 | ··-·rpm_verify_ownership | 505 | ··-·rpm_verify_ownership |
| 474 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 475 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 476 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 477 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 478 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1062356/1070081 bytes (99.28%) of diff not shown. | |||
| Offset 15256, 285 lines modified | Offset 15256, 285 lines modified | ||
| 0003b970:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b970:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b980:·2223·6964·6d37·3939·3022·2074·6162·696e··"#idm7990"·tabin | 0003b980:·2223·6964·6d37·3939·3022·2074·6162·696e··"#idm7990"·tabin | ||
| 0003b990:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b990:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b9a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b9a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b9b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b9b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b9c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b9c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b9d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b9d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b9e0:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b9f0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003ba00:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003ba10:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003ba20:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003ba30:·6964·6d37·3939·3022·3e3c·7461·626c·6520··idm7990"><table· | |||
| 0003ba40:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003ba50:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003ba60:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003ba70:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003ba80:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003ba90:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003baa0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003bab0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003bac0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bad0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003bae0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003baf0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003bb00:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003bb10:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003bb20:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003bb30:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003bb40:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003bb50:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003bb60:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003bb70:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003bb80:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003bb90:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003bba0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003bbb0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003bbc0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003bbd0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003bbe0:·7267·6574·3d22·2369·646d·3739·3931·2220··rget="#idm7991"· | |||
| 0003bbf0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003bc00:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bc10:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bc20:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bc30:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bc40:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003bc50:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003bc60:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bc70:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bc80:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bc90:·2220·6964·3d22·6964·6d37·3939·3122·3e3c··"·id="idm7991">< | |||
| 0003bca0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bcb0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bcc0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bcd0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bce0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003bcf0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003bd00:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bd10:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003bd20:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bd30:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003bd40:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003bd50:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bd60:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003bd70:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003bd80:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003bd90:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | |||
| 0003bda0:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | |||
| 0003bdb0:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | |||
| 0003bdc0:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | |||
| 0003bdd0:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | |||
| 0003bde0:·733a·0a20·202d·2043·4345·2d38·3038·3434··s:.··-·CCE-80844 | |||
| 0003bdf0:·2d34·0a20·202d·2043·4a49·532d·352e·3130··-4.··-·CJIS-5.10 | |||
| 0003be00:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003be10:·4947·2d52·4845·4c2d·3038·2d30·3130·3335··IG-RHEL-08-01035 | |||
| 0003be20:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003be30:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003be40:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003be50:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003be60:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003be70:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003be80:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003be90:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003bea0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003beb0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003bec0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003bed0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003bee0:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003bef0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003bf00:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003bf10:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003bf20:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003bf30:·0a20·2077·6865·6e3a·2027·226b·6572·6e65··.··when:·'"kerne | |||
| 0003bf40:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | |||
| 0003bf50:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003bf60:·7461·6773·3a0a·2020·2d20·4343·452d·3830··tags:.··-·CCE-80 | |||
| 0003bf70:·3834·342d·340a·2020·2d20·434a·4953·2d35··844-4.··-·CJIS-5 | |||
| 0003bf80:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003bf90:·2d53·5449·472d·5248·454c·2d30·382d·3031··-STIG-RHEL-08-01 | |||
| 0003bfa0:·3033·3539·0a20·202d·204e·4953·542d·3830··0359.··-·NIST-80 | |||
| 0003bfb0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003bfc0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003bfd0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003bfe0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003bff0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003c000:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003c010:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003c020:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003c030:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003c040:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003c050:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003c060:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003c070:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003c080:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003c090:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003c0a0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003c0b0:·6172·6765·743d·2223·6964·6d37·3939·3222··arget="#idm7992" | |||
| 0003c0c0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003c0d0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003c0e0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003c0f0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003c100:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003c110:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003c120:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003c130:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003c140:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c150:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| Max diff block lines reached; 10026496/10064474 bytes (99.62%) of diff not shown. | |||
| Offset 114, 26 lines modified | Offset 114, 48 lines modified | ||
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ·············_\x8c_\x8i_\x8s············5.3.1 | 118 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | include·install_aide | ||
| 127 | class·install_aide·{ | ||
| 128 | ··package·{·'aide': | ||
| 129 | ····ensure·=>·'installed', | ||
| 130 | ··} | ||
| 131 | 126 | dnf·install·aide | |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | package·install·aide | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | [[packages]] | ||
| 135 | name·=·"aide" | ||
| 136 | version·=·"*" | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 143 | if·rpm·--quiet·-q·kernel;·then | ||
| 144 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 145 | ····yum·install·-y·"aide" | ||
| 146 | fi | ||
| 147 | else | ||
| 148 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 149 | fi | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Gather·the·package·facts | 155 | -·name:·Gather·the·package·facts |
| 138 | ··package_facts: | 156 | ··package_facts: |
| Offset 166, 55 lines modified | Offset 188, 33 lines modified | ||
| 166 | ··-·PCI-DSSv4-11.5.2 | 188 | ··-·PCI-DSSv4-11.5.2 |
| 167 | ··-·enable_strategy | 189 | ··-·enable_strategy |
| 168 | ··-·low_complexity | 190 | ··-·low_complexity |
| 169 | ··-·low_disruption | 191 | ··-·low_disruption |
| 170 | ··-·medium_severity | 192 | ··-·medium_severity |
| 171 | ··-·no_reboot_needed | 193 | ··-·no_reboot_needed |
| 172 | ··-·package_aide_installed | 194 | ··-·package_aide_installed |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | [[packages]] | ||
| 175 | name·=·"aide" | ||
| 176 | version·=·"*" | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 182 | dnf·install·aide | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 188 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 189 | if·rpm·--quiet·-q·kernel;·then | ||
| 190 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 191 | ····yum·install·-y·"aide" | ||
| 192 | fi | ||
| 193 | else | ||
| 194 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 195 | fi | ||
| 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 197 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 198 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 199 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 200 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 201 | package·--add=aide | 200 | package·--add=aide |
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 206 | include·install_aide | ||
| 207 | 207 | class·install_aide·{ | |
| 208 | ··package·{·'aide': | ||
| 209 | ····ensure·=>·'installed', | ||
| 210 | ··} | ||
| 211 | } | ||
| 208 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 212 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 209 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 213 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 210 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 214 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 211 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 215 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 212 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 282, 90 lines modified | Offset 282, 110 lines modified | ||
| 282 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 282 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 283 | Severity: ···medium | 283 | Severity: ···medium |
| 284 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 284 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 285 | Identifiers:·CCE-82723-8 | 285 | Identifiers:·CCE-82723-8 |
| 286 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 286 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| 287 | References:··_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 287 | References:··_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 288 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 288 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 290 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 290 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 291 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 291 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 292 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 292 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 293 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 293 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 1319932/1325849 bytes (99.55%) of diff not shown. | |||
| Offset 15345, 414 lines modified | Offset 15345, 414 lines modified | ||
| 0003bf00:·6765·743d·2223·6964·6d37·3634·3722·2074··get="#idm7647"·t | 0003bf00:·6765·743d·2223·6964·6d37·3634·3722·2074··get="#idm7647"·t | ||
| 0003bf10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003bf10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003bf20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003bf20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003bf30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003bf30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003bf40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003bf40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003bf50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003bf50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003bf60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003bf60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003bf70:·20 | 0003bf70:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | ||
| 0003bf80:· | 0003bf80:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003bf90:· | 0003bf90:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003bfa0:· | 0003bfa0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003bfb0:· | 0003bfb0:·3d22·6964·6d37·3634·3722·3e3c·7072·653e··="idm7647"><pre> | ||
| 0003bfc0:· | 0003bfc0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | ||
| 0003bfd0:·6 | 0003bfd0:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | ||
| 0003bfe0:· | 0003bfe0:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | ||
| 0003bff0:·6 | 0003bff0:·6e20·706c·6174·666f·726d·730a·6966·2021··n·platforms.if·! | ||
| 0003c000:· | 0003c000:·2028·207b·2072·706d·202d·2d71·7569·6574···(·{·rpm·--quiet | ||
| 0003c010:· | 0003c010:·202d·7120·6b65·726e·656c·203b·7d20·2661···-q·kernel·;}·&a | ||
| 0003c020:·3 | 0003c020:·6d70·3b26·616d·703b·207b·2072·706d·202d··mp;&·{·rpm·- | ||
| 0003c030:· | 0003c030:·2d71·7569·6574·202d·7120·7270·6d2d·6f73··-quiet·-q·rpm-os | ||
| 0003c040:· | 0003c040:·7472·6565·203b·7d20·2661·6d70·3b26·616d··tree·;}·&&am | ||
| 0003c050:· | 0003c050:·703b·207b·2072·706d·202d·2d71·7569·6574··p;·{·rpm·--quiet | ||
| 0003c060:· | 0003c060:·202d·7120·626f·6f74·6320·3b7d·2026·616d···-q·bootc·;}·&am | ||
| 0003c070:· | 0003c070:·703b·2661·6d70·3b20·7b20·2120·7270·6d20··p;&·{·!·rpm· | ||
| 0003c080:· | 0003c080:·2d2d·7175·6965·7420·2d71·206f·7065·6e73··--quiet·-q·opens | ||
| 0003c090:· | 0003c090:·6869·6674·2d6b·7562·656c·6574·203b·7d20··hift-kubelet·;}· | ||
| 0003c0a0:·2 | 0003c0a0:·293b·2074·6865·6e0a·0a23·2046·696e·6420··);·then..#·Find· | ||
| 0003c0b0:· | 0003c0b0:·7768·6963·6820·6669·6c65·7320·6861·7665··which·files·have | ||
| 0003c0c0:· | 0003c0c0:·2069·6e63·6f72·7265·6374·2068·6173·6820···incorrect·hash· | ||
| 0003c0d0:· | 0003c0d0:·286e·6f74·2069·6e20·2f65·7463·2c20·6265··(not·in·/etc,·be | ||
| 0003c0e0:·6 | 0003c0e0:·6361·7573·6520·6f66·2074·6865·2073·7973··cause·of·the·sys | ||
| 0003c0f0:· | 0003c0f0:·7465·6d20·7265·6c61·7465·6420·636f·6e66··tem·related·conf | ||
| 0003c100:· | 0003c100:·6967·2066·696c·6573·2920·616e·6420·7468··ig·files)·and·th | ||
| 0003c110:· | 0003c110:·656e·2067·6574·2066·696c·6573·206e·616d··en·get·files·nam | ||
| 0003c120:· | 0003c120:·6573·0a66·696c·6573·5f77·6974·685f·696e··es.files_with_in | ||
| 0003c130:· | 0003c130:·636f·7272·6563·745f·6861·7368·3d22·2428··correct_hash="$( | ||
| 0003c140:· | 0003c140:·7270·6d20·2d56·6120·2d2d·6e6f·636f·6e66··rpm·-Va·--noconf | ||
| 0003c150:· | 0003c150:·6967·207c·2067·7265·7020·2d45·2027·5e2e··ig·|·grep·-E·'^. | ||
| 0003c160:·2 | 0003c160:·2e35·2720·7c20·6177·6b20·277b·7072·696e··.5'·|·awk·'{prin | ||
| 0003c170:· | 0003c170:·7420·244e·467d·2720·2922·0a0a·6966·205b··t·$NF}'·)"..if·[ | ||
| 0003c180:· | 0003c180:·202d·6e20·2224·6669·6c65·735f·7769·7468···-n·"$files_with | ||
| 0003c190:· | 0003c190:·5f69·6e63·6f72·7265·6374·5f68·6173·6822··_incorrect_hash" | ||
| 0003c1a0:·20 | 0003c1a0:·205d·3b20·7468·656e·0a20·2020·2023·2046···];·then.····#·F | ||
| 0003c1b0:· | 0003c1b0:·726f·6d20·6669·6c65·7320·6e61·6d65·7320··rom·files·names· | ||
| 0003c1c0:· | 0003c1c0:·6765·7420·7061·636b·6167·6520·6e61·6d65··get·package·name | ||
| 0003c1d0:· | 0003c1d0:·7320·616e·6420·6368·616e·6765·206e·6577··s·and·change·new | ||
| 0003c1e0:· | 0003c1e0:·6c69·6e65·2074·6f20·7370·6163·652c·2062··line·to·space,·b | ||
| 0003c1f0:· | 0003c1f0:·6563·6175·7365·2072·706d·2077·7269·7465··ecause·rpm·write | ||
| 0003c200:· | 0003c200:·7320·6561·6368·2070·6163·6b61·6765·2074··s·each·package·t | ||
| 0003c210:· | 0003c210:·6f20·6e65·7720·6c69·6e65·0a20·2020·2070··o·new·line.····p | ||
| 0003c220:· | 0003c220:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | ||
| 0003c230:·7 | 0003c230:·7461·6c6c·3d22·2428·7270·6d20·2d71·6620··tall="$(rpm·-qf· | ||
| 0003c240:· | 0003c240:·2466·696c·6573·5f77·6974·685f·696e·636f··$files_with_inco | ||
| 0003c250:· | 0003c250:·7272·6563·745f·6861·7368·207c·2074·7220··rrect_hash·|·tr· | ||
| 0003c260:·2 | 0003c260:·275c·6e27·2027·2027·2922·0a0a·2020·2020··'\n'·'·')"..···· | ||
| 0003c270:· | 0003c270:·0a20·2020·2079·756d·2072·6569·6e73·7461··.····yum·reinsta | ||
| 0003c280:· | 0003c280:·6c6c·202d·7920·2470·6163·6b61·6765·735f··ll·-y·$packages_ | ||
| 0003c290:· | 0003c290:·746f·5f72·6569·6e73·7461·6c6c·0a20·2020··to_reinstall.··· | ||
| 0003c2a0:· | 0003c2a0:·200a·6669·0a0a·656c·7365·0a20·2020·2026···.fi..else.····& | ||
| 0003c2b0:· | 0003c2b0:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | ||
| 0003c2c0:· | 0003c2c0:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | ||
| 0003c2d0:·20 | 0003c2d0:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | ||
| 0003c2e0:·6 | 0003c2e0:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | ||
| 0003c2f0:· | 0003c2f0:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | ||
| 0003c300:· | 0003c300:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003c310:· | 0003c310:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003c320:·2 | 0003c320:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003c330:·6 | 0003c330:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003c340:· | 0003c340:·7267·6574·3d22·2369·646d·3736·3438·2220··rget="#idm7648"· | ||
| 0003c350:· | 0003c350:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003c360:·65 | 0003c360:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003c370:·6 | 0003c370:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003c380:· | 0003c380:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003c390:·20 | 0003c390:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003c3a0:· | 0003c3a0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003c3b0:·6 | 0003c3b0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003c3c0:· | 0003c3c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003c3d0:· | 0003c3d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003c3e0:·6 | 0003c3e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003c3f0:·2 | 0003c3f0:·2220·6964·3d22·6964·6d37·3634·3822·3e3c··"·id="idm7648">< | ||
| 0003c400:· | 0003c400:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003c410:· | 0003c410:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003c420:·20 | 0003c420:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003c430:· | 0003c430:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003c440:· | 0003c440:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003c450:· | 0003c450:·6974·793a·3c2f·7468·3e3c·7464·3e68·6967··ity:</th><td>hig | ||
| 0003c460:· | 0003c460:·683c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··h</td></tr><tr>< | ||
| 0003c470:· | 0003c470:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003c480:· | 0003c480:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | ||
| 0003c490:· | 0003c490:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003c4a0:· | 0003c4a0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003c4b0:· | 0003c4b0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003c4c0:· | 0003c4c0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003c4d0:· | 0003c4d0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 0003c4e0:· | 0003c4e0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003c4f0:· | 0003c4f0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003c500:· | 0003c500:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | ||
| 0003c510:· | 0003c510:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | ||
| 0003c520:· | 0003c520:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | ||
| 0003c530:· | 0003c530:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | ||
| 0003c540:· | 0003c540:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | ||
| 0003c550:· | 0003c550:·2d38·3038·3537·2d36·0a20·202d·2043·4a49··-80857-6.··-·CJI | ||
| 0003c560:· | 0003c560:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003c570:· | 0003c570:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003c580:· | 0003c580:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003c590:· | 0003c590:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003c5a0:· | 0003c5a0:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003c5b0:· | 0003c5b0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c5c0:· | 0003c5c0:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003c5d0:· | 0003c5d0:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003c5e0:·0a20·20 | 0003c5e0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c5f0:·2 | 0003c5f0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003c600:· | 0003c600:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003c610:· | 0003c610:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003c620:·2 | 0003c620:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003c630:· | 0003c630:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003c640:· | 0003c640:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003c650:· | 0003c650:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003c660:·747 | 0003c660:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003c670:· | 0003c670:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003c680:· | 0003c680:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003c690:·6 | 0003c690:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003c6a0:· | 0003c6a0:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003c6b0:·7 | 0003c6b0:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003c6c0:·65 | 0003c6c0:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| 0003c6d0:· | 0003c6d0:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | ||
| Max diff block lines reached; 17820846/17876626 bytes (99.69%) of diff not shown. | |||
| Offset 15289, 284 lines modified | Offset 15289, 284 lines modified | ||
| 0003bb80:·2d74·6172·6765·743d·2223·6964·6d37·3939··-target="#idm799 | 0003bb80:·2d74·6172·6765·743d·2223·6964·6d37·3939··-target="#idm799 | ||
| 0003bb90:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 0003bb90:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 0003bba0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003bba0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003bbb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003bbb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003bbc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003bbc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003bbd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003bbd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003bbe0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003bbe0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003bbf0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003bc00:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003bc10:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003bc20:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003bc30:·7365·2220·6964·3d22·6964·6d37·3939·3022··se"·id="idm7990" | |||
| 0003bc40:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003bc50:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003bc60:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003bc70:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003bc80:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003bc90:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003bca0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bcb0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003bcc0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bcd0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003bce0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003bcf0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003bd00:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003bd10:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003bd20:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003bd30:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003bd40:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003bd50:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003bd60:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003bd70:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003bd80:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003bd90:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003bda0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003bdb0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003bdc0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003bdd0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003bde0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003bdf0:·646d·3739·3931·2220·7461·6269·6e64·6578··dm7991"·tabindex | |||
| 0003be00:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003be10:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003be20:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003be30:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003be40:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003be50:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003be60:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003be70:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003be80:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003be90:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003bea0:·6d37·3939·3122·3e3c·7461·626c·6520·636c··m7991"><table·cl | |||
| 0003beb0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003bec0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003bed0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003bee0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003bef0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003bf00:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003bf10:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003bf20:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003bf30:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003bf40:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003bf50:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003bf60:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003bf70:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003bf80:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003bf90:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003bfa0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003bfb0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003bfc0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003bfd0:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003bfe0:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003bff0:·4345·2d38·3038·3434·2d34·0a20·202d·2043··CE-80844-4.··-·C | |||
| 0003c000:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003c010:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003c020:·3038·2d30·3130·3335·390a·2020·2d20·4e49··08-010359.··-·NI | |||
| 0003c030:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003c040:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003c050:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003c060:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003c070:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003c080:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003c090:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003c0a0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003c0b0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003c0c0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003c0d0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003c0e0:·696e·7374·616c·6c65·640a·0a2d·206e·616d··installed..-·nam | |||
| 0003c0f0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003c100:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003c110:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003c120:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003c130:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003c140:·2027·226b·6572·6e65·6c22·2069·6e20·616e···'"kernel"·in·an | |||
| 0003c150:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003c160:·6167·6573·270a·2020·7461·6773·3a0a·2020··ages'.··tags:.·· | |||
| 0003c170:·2d20·4343·452d·3830·3834·342d·340a·2020··-·CCE-80844-4.·· | |||
| 0003c180:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003c190:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003c1a0:·454c·2d30·382d·3031·3033·3539·0a20·202d··EL-08-010359.··- | |||
| 0003c1b0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003c1c0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003c1d0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003c1e0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003c1f0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003c200:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003c210:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003c220:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003c230:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003c240:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003c250:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003c260:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003c270:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003c280:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003c290:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003c2a0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003c2b0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003c2c0:·6964·6d37·3939·3222·2074·6162·696e·6465··idm7992"·tabinde | |||
| 0003c2d0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003c2e0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003c2f0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003c300:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003c310:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003c320:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| 0003c330:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003c340:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003c350:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003c360:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| Max diff block lines reached; 28871144/28908984 bytes (99.87%) of diff not shown. | |||
| Offset 15308, 284 lines modified | Offset 15308, 284 lines modified | ||
| 0003bcb0:·612d·7461·7267·6574·3d22·2369·646d·3739··a-target="#idm79 | 0003bcb0:·612d·7461·7267·6574·3d22·2369·646d·3739··a-target="#idm79 | ||
| 0003bcc0:·3930·2220·7461·6269·6e64·6578·3d22·3022··90"·tabindex="0" | 0003bcc0:·3930·2220·7461·6269·6e64·6578·3d22·3022··90"·tabindex="0" | ||
| 0003bcd0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003bcd0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003bce0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003bce0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003bcf0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003bcf0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003bd00:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003bd00:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003bd10:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003bd10:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003bd20:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003bd30:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003bd40:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bd50:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bd60:·7073·6522·2069·643d·2269·646d·3739·3930··pse"·id="idm7990 | |||
| 0003bd70:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bd80:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bd90:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bda0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bdb0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003bdc0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003bdd0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bde0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003bdf0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003be00:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003be10:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003be20:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003be30:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003be40:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003be50:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003be60:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003be70:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003be80:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003be90:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003bea0:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003beb0:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003bec0:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003bed0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003bee0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003bef0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003bf00:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003bf10:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003bf20:·6964·6d37·3939·3122·2074·6162·696e·6465··idm7991"·tabinde | |||
| 0003bf30:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003bf40:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003bf50:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003bf60:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003bf70:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003bf80:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003bf90:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003bfa0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bfb0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bfc0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bfd0:·646d·3739·3931·223e·3c74·6162·6c65·2063··dm7991"><table·c | |||
| 0003bfe0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003bff0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003c000:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003c010:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003c020:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003c030:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c040:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003c050:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003c060:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003c070:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003c080:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003c090:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003c0a0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003c0b0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003c0c0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003c0d0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003c0e0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003c0f0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003c100:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003c110:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003c120:·4343·452d·3830·3834·342d·340a·2020·2d20··CCE-80844-4.··-· | |||
| 0003c130:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003c140:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003c150:·2d30·382d·3031·3033·3539·0a20·202d·204e··-08-010359.··-·N | |||
| 0003c160:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003c170:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003c180:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003c190:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003c1a0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003c1b0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003c1c0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003c1d0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003c1e0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003c1f0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003c200:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003c210:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003c220:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003c230:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003c240:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003c250:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003c260:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003c270:·3a20·2722·6b65·726e·656c·2220·696e·2061··:·'"kernel"·in·a | |||
| 0003c280:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003c290:·6b61·6765·7327·0a20·2074·6167·733a·0a20··kages'.··tags:.· | |||
| 0003c2a0:·202d·2043·4345·2d38·3038·3434·2d34·0a20···-·CCE-80844-4.· | |||
| 0003c2b0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003c2c0:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003c2d0:·4845·4c2d·3038·2d30·3130·3335·390a·2020··HEL-08-010359.·· | |||
| 0003c2e0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003c2f0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003c300:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003c310:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003c320:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003c330:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003c340:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003c350:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003c360:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003c370:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003c380:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003c390:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003c3a0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003c3b0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003c3c0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003c3d0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003c3e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003c3f0:·2369·646d·3739·3932·2220·7461·6269·6e64··#idm7992"·tabind | |||
| 0003c400:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003c410:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003c420:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003c430:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003c440:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003c450:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003c460:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003c470:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003c480:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003c490:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| Max diff block lines reached; 28714157/28751997 bytes (99.87%) of diff not shown. | |||
| Offset 15108, 284 lines modified | Offset 15108, 284 lines modified | ||
| 0003b030:·6574·3d22·2369·646d·3834·3538·2220·7461··et="#idm8458"·ta | 0003b030:·6574·3d22·2369·646d·3834·3538·2220·7461··et="#idm8458"·ta | ||
| 0003b040:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b040:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b050:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b050:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b060:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b060:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b070:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b070:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b080:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b080:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b090:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b090:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b0a0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b0b0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b0c0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b0d0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b0e0:·643d·2269·646d·3834·3538·223e·3c74·6162··d="idm8458"><tab | |||
| 0003b0f0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b100:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b110:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b120:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b130:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b140:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b150:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b160:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b170:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b180:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b190:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b1a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b1b0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b1c0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b1d0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b1e0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b1f0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b200:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b210:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b220:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b230:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b240:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003b250:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b260:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b270:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b280:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b290:·2d74·6172·6765·743d·2223·6964·6d38·3435··-target="#idm845 | |||
| 0003b2a0:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | |||
| 0003b2b0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b2c0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b2d0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b2e0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b2f0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b300:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b310:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b320:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b330:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b340:·7073·6522·2069·643d·2269·646d·3834·3539··pse"·id="idm8459 | |||
| 0003b350:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b360:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b370:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b380:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b390:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b3a0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b3b0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b3c0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b3d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b3e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b3f0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b400:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b410:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b420:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b430:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b440:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b450:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003b460:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003b470:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003b480:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003b490:·7461·6773·3a0a·2020·2d20·4343·452d·3930··tags:.··-·CCE-90 | |||
| 0003b4a0:·3834·332d·340a·2020·2d20·434a·4953·2d35··843-4.··-·CJIS-5 | |||
| 0003b4b0:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003b4c0:·2d53·5449·472d·5248·454c·2d30·392d·3635··-STIG-RHEL-09-65 | |||
| 0003b4d0:·3130·3130·0a20·202d·204e·4953·542d·3830··1010.··-·NIST-80 | |||
| 0003b4e0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b4f0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b500:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b510:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b520:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b530:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b540:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b550:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b560:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b570:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b580:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b590:·6c6c·6564·0a0a·2d20·6e61·6d65·3a20·456e··lled..-·name:·En | |||
| 0003b5a0:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b5b0:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b5c0:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b5d0:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b5e0:·656e·740a·2020·7768·656e·3a20·2722·6b65··ent.··when:·'"ke | |||
| 0003b5f0:·726e·656c·2220·696e·2061·6e73·6962·6c65··rnel"·in·ansible | |||
| 0003b600:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0003b610:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b620:·2d39·3038·3433·2d34·0a20·202d·2043·4a49··-90843-4.··-·CJI | |||
| 0003b630:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b640:·4953·412d·5354·4947·2d52·4845·4c2d·3039··ISA-STIG-RHEL-09 | |||
| 0003b650:·2d36·3531·3031·300a·2020·2d20·4e49·5354··-651010.··-·NIST | |||
| 0003b660:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b670:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b680:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b690:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b6a0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b6b0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b6c0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b6d0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b6e0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b6f0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b700:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b710:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b720:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b730:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b740:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b750:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b760:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 0003b770:·3630·2220·7461·6269·6e64·6578·3d22·3022··60"·tabindex="0" | |||
| 0003b780:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b790:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b7a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b7b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b7c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b7d0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b7e0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b7f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b800:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b810:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| Max diff block lines reached; 22850145/22887985 bytes (99.83%) of diff not shown. | |||
| Offset 15113, 284 lines modified | Offset 15113, 284 lines modified | ||
| 0003b080:·6172·6765·743d·2223·6964·6d38·3435·3822··arget="#idm8458" | 0003b080:·6172·6765·743d·2223·6964·6d38·3435·3822··arget="#idm8458" | ||
| 0003b090:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003b090:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b0a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003b0a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b0b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003b0b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b0c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003b0c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b0d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003b0d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b0e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003b0e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b0f0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b100:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b110:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b120:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b130:·2220·6964·3d22·6964·6d38·3435·3822·3e3c··"·id="idm8458">< | |||
| 0003b140:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b150:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b160:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b170:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b180:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b190:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b1a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b1b0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b1c0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b1d0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b1e0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b1f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b200:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b210:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b220:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b230:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003b240:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003b250:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003b260:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003b270:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003b280:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b290:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003b2a0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b2b0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b2c0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b2d0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b2e0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b2f0:·3834·3539·2220·7461·6269·6e64·6578·3d22··8459"·tabindex=" | |||
| 0003b300:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b310:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b320:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b330:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b340:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b350:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003b360:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b370:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b380:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b390:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b3a0:·3435·3922·3e3c·7461·626c·6520·636c·6173··459"><table·clas | |||
| 0003b3b0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b3c0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b3d0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b3e0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b3f0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b400:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b410:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b420:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b430:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b440:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b450:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b460:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b470:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b480:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b490:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b4a0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003b4b0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003b4c0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003b4d0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003b4e0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b4f0:·2d39·3038·3433·2d34·0a20·202d·2043·4a49··-90843-4.··-·CJI | |||
| 0003b500:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b510:·4953·412d·5354·4947·2d52·4845·4c2d·3039··ISA-STIG-RHEL-09 | |||
| 0003b520:·2d36·3531·3031·300a·2020·2d20·4e49·5354··-651010.··-·NIST | |||
| 0003b530:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b540:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b550:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b560:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b570:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b580:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b590:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b5a0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b5b0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b5c0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b5d0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b5e0:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003b5f0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b600:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b610:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b620:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b630:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003b640:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003b650:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003b660:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003b670:·4343·452d·3930·3834·332d·340a·2020·2d20··CCE-90843-4.··-· | |||
| 0003b680:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b690:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003b6a0:·2d30·392d·3635·3130·3130·0a20·202d·204e··-09-651010.··-·N | |||
| 0003b6b0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b6c0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b6d0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b6e0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b6f0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b700:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b710:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b720:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b730:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b740:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b750:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b760:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b770:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b780:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b790:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b7a0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b7b0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b7c0:·6d38·3436·3022·2074·6162·696e·6465·783d··m8460"·tabindex= | |||
| 0003b7d0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b7e0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b7f0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b800:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b810:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b820:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 0003b830:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b840:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b850:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b860:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| Max diff block lines reached; 23287774/23325614 bytes (99.84%) of diff not shown. | |||
| Offset 15103, 285 lines modified | Offset 15103, 285 lines modified | ||
| 0003afe0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003afe0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003aff0:·2223·6964·6d38·3435·3822·2074·6162·696e··"#idm8458"·tabin | 0003aff0:·2223·6964·6d38·3435·3822·2074·6162·696e··"#idm8458"·tabin | ||
| 0003b000:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b000:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b010:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b010:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b020:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b020:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b030:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b030:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b040:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b040:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b050:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b060:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b070:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b080:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b090:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b0a0:·6964·6d38·3435·3822·3e3c·7461·626c·6520··idm8458"><table· | |||
| 0003b0b0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b0c0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b0d0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b0e0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b0f0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b100:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b110:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b120:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b130:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b140:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b150:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b160:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b170:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b180:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b190:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b1a0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b1b0:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b1c0:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b1d0:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b1e0:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b1f0:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b200:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003b210:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b220:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b230:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b240:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b250:·7267·6574·3d22·2369·646d·3834·3539·2220··rget="#idm8459"· | |||
| 0003b260:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b270:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b280:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b290:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b2a0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b2b0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b2c0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b2d0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b2e0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b2f0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b300:·2220·6964·3d22·6964·6d38·3435·3922·3e3c··"·id="idm8459">< | |||
| 0003b310:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b320:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b330:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b340:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b350:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b360:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b370:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b380:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b390:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b3a0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b3b0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b3c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b3d0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b3e0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b3f0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b400:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | |||
| 0003b410:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | |||
| 0003b420:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | |||
| 0003b430:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | |||
| 0003b440:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | |||
| 0003b450:·733a·0a20·202d·2043·4345·2d39·3038·3433··s:.··-·CCE-90843 | |||
| 0003b460:·2d34·0a20·202d·2043·4a49·532d·352e·3130··-4.··-·CJIS-5.10 | |||
| 0003b470:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b480:·4947·2d52·4845·4c2d·3039·2d36·3531·3031··IG-RHEL-09-65101 | |||
| 0003b490:·300a·2020·2d20·4e49·5354·2d38·3030·2d35··0.··-·NIST-800-5 | |||
| 0003b4a0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b4b0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b4c0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b4d0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b4e0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b4f0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b500:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b510:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b520:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b530:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b540:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b550:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003b560:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b570:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b580:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b590:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b5a0:·0a20·2077·6865·6e3a·2027·226b·6572·6e65··.··when:·'"kerne | |||
| 0003b5b0:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | |||
| 0003b5c0:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003b5d0:·7461·6773·3a0a·2020·2d20·4343·452d·3930··tags:.··-·CCE-90 | |||
| 0003b5e0:·3834·332d·340a·2020·2d20·434a·4953·2d35··843-4.··-·CJIS-5 | |||
| 0003b5f0:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003b600:·2d53·5449·472d·5248·454c·2d30·392d·3635··-STIG-RHEL-09-65 | |||
| 0003b610:·3130·3130·0a20·202d·204e·4953·542d·3830··1010.··-·NIST-80 | |||
| 0003b620:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b630:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b640:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b650:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b660:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b670:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b680:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b690:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b6a0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b6b0:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b6c0:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b6d0:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003b6e0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b6f0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b700:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b710:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b720:·6172·6765·743d·2223·6964·6d38·3436·3022··arget="#idm8460" | |||
| 0003b730:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b740:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b750:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b760:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b770:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b780:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b790:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003b7a0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b7b0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b7c0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| Max diff block lines reached; 9949197/9987175 bytes (99.62%) of diff not shown. | |||
| Offset 119, 26 lines modified | Offset 119, 48 lines modified | ||
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 121 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 121 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 122 | ·············_\x8c_\x8i_\x8s············6.1.1 | 122 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | include·install_aide | ||
| 132 | class·install_aide·{ | ||
| 133 | ··package·{·'aide': | ||
| 134 | ····ensure·=>·'installed', | ||
| 135 | ··} | ||
| 136 | 131 | dnf·install·aide | |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | package·install·aide | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | [[packages]] | ||
| 140 | name·=·"aide" | ||
| 141 | version·=·"*" | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 148 | if·rpm·--quiet·-q·kernel;·then | ||
| 149 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 150 | ····dnf·install·-y·"aide" | ||
| 151 | fi | ||
| 152 | else | ||
| 153 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 154 | fi | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 142 | -·name:·Gather·the·package·facts | 160 | -·name:·Gather·the·package·facts |
| 143 | ··package_facts: | 161 | ··package_facts: |
| Offset 171, 55 lines modified | Offset 193, 33 lines modified | ||
| 171 | ··-·PCI-DSSv4-11.5.2 | 193 | ··-·PCI-DSSv4-11.5.2 |
| 172 | ··-·enable_strategy | 194 | ··-·enable_strategy |
| 173 | ··-·low_complexity | 195 | ··-·low_complexity |
| 174 | ··-·low_disruption | 196 | ··-·low_disruption |
| 175 | ··-·medium_severity | 197 | ··-·medium_severity |
| 176 | ··-·no_reboot_needed | 198 | ··-·no_reboot_needed |
| 177 | ··-·package_aide_installed | 199 | ··-·package_aide_installed |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 179 | [[packages]] | ||
| 180 | name·=·"aide" | ||
| 181 | version·=·"*" | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 187 | dnf·install·aide | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 194 | if·rpm·--quiet·-q·kernel;·then | ||
| 195 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 196 | ····dnf·install·-y·"aide" | ||
| 197 | fi | ||
| 198 | else | ||
| 199 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 200 | fi | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 206 | package·--add=aide | 205 | package·--add=aide |
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 211 | include·install_aide | ||
| 212 | 212 | class·install_aide·{ | |
| 213 | ··package·{·'aide': | ||
| 214 | ····ensure·=>·'installed', | ||
| 215 | ··} | ||
| 216 | } | ||
| 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 217 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 214 | Run·the·following·command·to·generate·a·new·database: | 218 | Run·the·following·command·to·generate·a·new·database: |
| 215 | $·sudo·/usr/sbin/aide·--init | 219 | $·sudo·/usr/sbin/aide·--init |
| 216 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 220 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 217 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 221 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 218 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 222 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 219 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 223 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 247, 14 lines modified | Offset 247, 28 lines modified | ||
| 247 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 247 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 248 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 248 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 249 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 249 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 250 | ·············_\x8c_\x8i_\x8s············6.1.1 | 250 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 251 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 251 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 252 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 252 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 253 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 253 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 254 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 255 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 256 | if·rpm·--quiet·-q·kernel;·then | ||
| 257 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| Max diff block lines reached; 1129580/1134755 bytes (99.54%) of diff not shown. | |||
| Offset 14773, 297 lines modified | Offset 14773, 297 lines modified | ||
| 00039b40:·612d·7461·7267·6574·3d22·2369·646d·3132··a-target="#idm12 | 00039b40:·612d·7461·7267·6574·3d22·2369·646d·3132··a-target="#idm12 | ||
| 00039b50:·3833·3922·2074·6162·696e·6465·783d·2230··839"·tabindex="0 | 00039b50:·3833·3922·2074·6162·696e·6465·783d·2230··839"·tabindex="0 | ||
| 00039b60:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00039b60:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00039b70:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00039b70:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00039b80:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00039b80:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00039b90:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00039b90:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00039ba0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00039ba0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00039bb0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 00039bc0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00039bd0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00039be0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00039bf0:·6170·7365·2220·6964·3d22·6964·6d31·3238··apse"·id="idm128 | |||
| 00039c00:·3339·223e·3c74·6162·6c65·2063·6c61·7373··39"><table·class | |||
| 00039c10:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00039 | 00039bb0:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | ||
| 00039bc0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00039bd0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00039be0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00039bf0:·3d22·6964·6d31·3238·3339·223e·3c74·6162··="idm12839"><tab | |||
| 00039c00:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00039c10:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00039c20:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00039c30:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00039c40:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00039c50:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00039c60:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00039c70:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00039c80:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039c90:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00039ca0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00039cb0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00039cc0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00039cd0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 00039ce0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00039cf0:·6f64·653e·0a64·6e66·2069·6e73·7461·6c6c··ode>.dnf·install | |||
| 00039d00:·2064·6e66·2d61·7574·6f6d·6174·6963·0a3c···dnf-automatic.< | |||
| 00039d10:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 00039d20:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 00039d30:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 00039d40:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 00039d50:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 00039d60:·2223·6964·6d31·3238·3430·2220·7461·6269··"#idm12840"·tabi | |||
| 00039d70:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 00039d80:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 00039d90:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 00039da0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 00039db0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 00039dc0:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 00039dd0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 00039de0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00039df0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00039e00:·7073·6522·2069·643d·2269·646d·3132·3834··pse"·id="idm1284 | |||
| 00039e10:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 00039e20:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00039 | 00039e30:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 00039c40:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00039c50:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00039c60:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00039c70:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00039c80:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00039c90:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039ca0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00039cb0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00039cc0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00039cd0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00039ce0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00039 | 00039e40:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 00039e50:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00039e60:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00039e70:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00039e80:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00039e90:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00039ea0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00039eb0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00039ec0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00039ed0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00039ee0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 00039ef0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00039f00:·3c70·7265·3e3c·636f·6465·3e0a·7061·636b··<pre><code>.pack | |||
| 00039 | 00039f10:·6167·6520·696e·7374·616c·6c20·646e·662d··age·install·dnf- | ||
| 00039 | 00039f20:·6175·746f·6d61·7469·630a·3c2f·636f·6465··automatic.</code | ||
| 00039d20:·2069·6e73·7461·6c6c·5f64·6e66·2d61·7574···install_dnf-aut | |||
| 00039d30:·6f6d·6174·6963·207b·0a20·2070·6163·6b61··omatic·{.··packa | |||
| 00039d40:·6765·207b·2027·646e·662d·6175·746f·6d61··ge·{·'dnf-automa | |||
| 00039d50:·7469·6327·3a0a·2020·2020·656e·7375·7265··tic':.····ensure | |||
| 00039d60:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 00039d70:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 00039 | 00039f30:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 00039 | 00039f40:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 00039 | 00039f50:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 00039 | 00039f60:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 00039 | 00039f70:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 00039 | 00039f80:·3132·3834·3122·2074·6162·696e·6465·783d··12841"·tabindex= | ||
| 00039 | 00039f90:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 00039 | 00039fa0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 00039 | 00039fb0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 00039 | 00039fc0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 00039 | 00039fd0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 00039 | 00039fe0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 00039ff0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003a000:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003a010:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003a020:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003a030:·6522·2069·643d·2269·646d·3132·3834·3122··e"·id="idm12841" | |||
| 0003a040:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003a050:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 00039e40:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00039e50:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00039e60:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00039e70:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00039e80:·3132·3834·3022·3e3c·7461·626c·6520·636c··12840"><table·cl | |||
| 00039e90:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00039ea0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00039eb0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00039ec0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00039ed0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00039ee0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00039ef0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00039f00:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00039f10:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00039f20:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00039f30:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00039f40:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00039f50:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 00039f60:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 00039f70:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 00039f80:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| Max diff block lines reached; 3395662/3435296 bytes (98.85%) of diff not shown. | |||
| Offset 84, 26 lines modified | Offset 84, 49 lines modified | ||
| 84 | ·············suitable·for·automatic,·regular·execution. | 84 | ·············suitable·for·automatic,·regular·execution. |
| 85 | Severity: ···medium | 85 | Severity: ···medium |
| 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 87 | Identifiers:·CCE-83454-9 | 87 | Identifiers:·CCE-83454-9 |
| 88 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 88 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 96 | include·install_dnf-automatic | ||
| 96 | dnf·install·dnf-automatic | ||
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 97 | c | 102 | package·install·dnf-automatic |
| 98 | ··package·{·'dnf-automatic': | ||
| 99 | ····ensure·=>·'installed', | ||
| 100 | ··} | ||
| 101 | 103 | _.R_.e_.m_.e_.d_.i_.a_.t_.i_.o_.n_.·_.O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_.t_.·_.s_.n_.i_.p_.p_.e_.t_.·_.⇲ | |
| 104 | [[packages]] | ||
| 105 | name·=·"dnf-automatic" | ||
| 106 | version·=·"*" | ||
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 112 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 113 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 114 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 115 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 116 | ····dnf·install·-y·"dnf-automatic" | ||
| 117 | fi | ||
| 118 | else | ||
| 119 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 120 | fi | ||
| 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 103 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 104 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 105 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 106 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 107 | -·name:·Gather·the·package·facts | 126 | -·name:·Gather·the·package·facts |
| 108 | ··package_facts: | 127 | ··package_facts: |
| Offset 129, 56 lines modified | Offset 152, 33 lines modified | ||
| 129 | ··-·CCE-83454-9 | 152 | ··-·CCE-83454-9 |
| 130 | ··-·enable_strategy | 153 | ··-·enable_strategy |
| 131 | ··-·low_complexity | 154 | ··-·low_complexity |
| 132 | ··-·low_disruption | 155 | ··-·low_disruption |
| 133 | ··-·medium_severity | 156 | ··-·medium_severity |
| 134 | ··-·no_reboot_needed | 157 | ··-·no_reboot_needed |
| 135 | ··-·package_dnf-automatic_installed | 158 | ··-·package_dnf-automatic_installed |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | [[packages]] | ||
| 138 | name·=·"dnf-automatic" | ||
| 139 | version·=·"*" | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | dnf·install·dnf-automatic | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 152 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 153 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 154 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 155 | ····dnf·install·-y·"dnf-automatic" | ||
| 156 | fi | ||
| 157 | else | ||
| 158 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 159 | fi | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | package·--add=dnf-automatic | 164 | package·--add=dnf-automatic |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | include·install_dnf-automatic | ||
| 171 | class·install_dnf-automatic·{ | ||
| 171 | package· | 172 | ··package·{·'dnf-automatic': |
| 173 | ····ensure·=>·'installed', | ||
| 174 | ··} | ||
| 175 | } | ||
| 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 173 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 177 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 174 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 178 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 175 | automatic.conf. | 179 | automatic.conf. |
| 176 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 180 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 177 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 181 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 178 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 182 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 189, 14 lines modified | Offset 189, 56 lines modified | ||
| 189 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 189 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 190 | Identifiers:·CCE-83456-4 | 190 | Identifiers:·CCE-83456-4 |
| 191 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 191 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 192 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 192 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 193 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 193 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 194 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 | 194 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 |
| 195 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 195 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 197 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 198 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 199 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| Max diff block lines reached; 240736/247260 bytes (97.36%) of diff not shown. | |||
| Offset 15176, 254 lines modified | Offset 15176, 254 lines modified | ||
| 0003b470:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b470:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b480:·2369·646d·3932·3633·2220·7461·6269·6e64··#idm9263"·tabind | 0003b480:·2369·646d·3932·3633·2220·7461·6269·6e64··#idm9263"·tabind | ||
| 0003b490:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b490:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b4a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b4a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b4b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b4b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b4c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b4c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b4d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b4d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b4e0:·5265·6d65·6469·6174·696f·6e20· | 0003b4e0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003b4f0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b500:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b510:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b520:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b530:·3932·3633·223e·3c70·7265·3e3c·636f·6465··9263"><pre><code | |||
| 0003b540:·3e0a·7661·725f·7379·7374·656d·5f63·7279··>.var_system_cry | |||
| 0003b550:·7074·6f5f·706f·6c69·6379·3d27·3c61·6262··pto_policy='<abb | |||
| 0003b560:·7220·7469·746c·653d·2266·726f·6d20·5072··r·title="from·Pr | |||
| 0003b570:·6f66·696c·652f·7265·6669·6e65·2d76·616c··ofile/refine-val | |||
| 0003b580:·7565·3a20·7863·6364·665f·6f72·672e·7373··ue:·xccdf_org.ss | |||
| 0003b590:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | |||
| 0003b4f0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b500:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b510:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b520:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b530:·6964·6d39·3236·3322·3e3c·7461·626c·6520··idm9263"><table· | |||
| 0003b540:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b550:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b560:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b570:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b580:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b590:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b5a0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b5b0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b5c0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b5d0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b5e0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b5f0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b600:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 0003b610:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 0003b620:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b630:·6465·3e2d·206e·616d·653a·2058·4343·4446··de>-·name:·XCCDF | |||
| 0003b | 0003b5a0:·5f76·616c·7565·5f76·6172·5f73·7973·7465··_value_var_syste | ||
| 0003b | 0003b5b0:·6d5f·6372·7970·746f·5f70·6f6c·6963·7922··m_crypto_policy" | ||
| 0003b5c0:·3e44·4546·4155·4c54·3c2f·6162·6272·3e27··>DEFAULT</abbr>' | |||
| 0003b5d0:·0a0a·0a73·7464·6572·725f·6f66·5f63·616c··...stderr_of_cal | |||
| 0003b5e0:·6c3d·2428·7570·6461·7465·2d63·7279·7074··l=$(update-crypt | |||
| 0003b5f0:·6f2d·706f·6c69·6369·6573·202d·2d73·6574··o-policies·--set | |||
| 0003b660:·2320·7072·6f6d·6f74·6520·746f·2076·6172··#·promote·to·var | |||
| 0003b670:·6961·626c·650a·2020·7365·745f·6661·6374··iable.··set_fact | |||
| 0003b680:·3a0a·2020·2020·7661·725f·7379·7374·656d··:.····var_system | |||
| 0003b690:·5f63·7279·7074·6f5f·706f·6c69·6379·3a20··_crypto_policy:· | |||
| 0003b6a0:·2121·7374·7220·3c61·6262·7220·7469·746c··!!str·<abbr·titl | |||
| 0003b6b0:·653d·2266·726f·6d20·5072·6f66·696c·652f··e="from·Profile/ | |||
| 0003b6c0:·7265·6669·6e65·2d76·616c·7565·3a20·7863··refine-value:·xc | |||
| 0003b6d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | |||
| 0003b6e0:·6374·2e63·6f6e·7465·6e74·5f76·616c·7565··ct.content_value | |||
| 0003b6 | 0003b600:·2024·7b76·6172·5f73·7973·7465·6d5f·6372···${var_system_cr | ||
| 0003b610:·7970·746f·5f70·6f6c·6963·797d·2032·2667··ypto_policy}·2&g | |||
| 0003b620:·743b·2661·6d70·3b31·2026·6774·3b20·2f64··t;&1·>·/d | |||
| 0003b630:·6576·2f6e·756c·6c29·0a72·633d·243f·0a0a··ev/null).rc=$?.. | |||
| 0003b640:·6966·2074·6573·7420·2224·7263·2220·3d20··if·test·"$rc"·=· | |||
| 0003b650:·3132·373b·2074·6865·6e0a·0965·6368·6f20··127;·then..echo· | |||
| 0003b660:·2224·7374·6465·7272·5f6f·665f·6361·6c6c··"$stderr_of_call | |||
| 0003b670:·2220·2667·743b·2661·6d70·3b32·0a09·6563··"·>&2..ec | |||
| 0003b680:·686f·2022·4d61·6b65·2073·7572·6520·7468··ho·"Make·sure·th | |||
| 0003b690:·6174·2074·6865·2073·6372·6970·7420·6973··at·the·script·is | |||
| 0003b6a0:·2069·6e73·7461·6c6c·6564·206f·6e20·7468···installed·on·th | |||
| 0003b6b0:·6520·7265·6d65·6469·6174·6564·2073·7973··e·remediated·sys | |||
| 0003b6c0:·7465·6d2e·2220·2667·743b·2661·6d70·3b32··tem."·>&2 | |||
| 0003b6d0:·0a09·6563·686f·2022·5365·6520·6f75·7470··..echo·"See·outp | |||
| 0003b6e0:·7574·206f·6620·7468·6520·2764·6e66·2070··ut·of·the·'dnf·p | |||
| 0003b6f0:·726f·7669·6465·7320·7570·6461·7465·2d63··rovides·update-c | |||
| 0003b700:·746f·5f70·6f6c·6963·7922·3e44·4546·4155··to_policy">DEFAU | |||
| 0003b710:·4c54·3c2f·6162·6272·3e0a·2020·7461·6773··LT</abbr>.··tags | |||
| 0003b720:·3a0a·2020·2020·2d20·616c·7761·7973·0a0a··:.····-·always.. | |||
| 0003b730:·2d20·6e61·6d65·3a20·436f·6e66·6967·7572··-·name:·Configur | |||
| 0003b740:·6520·5379·7374·656d·2043·7279·7074·6f67··e·System·Cryptog | |||
| 0003b750:·7261·7068·7920·506f·6c69·6379·0a20·206c··raphy·Policy.··l | |||
| 0003b760:·696e·6569·6e66·696c·653a·0a20·2020·2070··ineinfile:.····p | |||
| 0003b770:·6174·683a·202f·6574·632f·6372·7970·746f··ath:·/etc/crypto | |||
| 0003b780:·2d70·6f6c·6963·6965·732f·636f·6e66·6967··-policies/config | |||
| 0003b790:·0a20·2020·2072·6567·6578·703a·205e·283f··.····regexp:·^(? | |||
| 0003b7a0:·2123·2928·5c53·2b29·240a·2020·2020·6c69··!#)(\S+)$.····li | |||
| 0003b7b0:·6e65·3a20·277b·7b20·7661·725f·7379·7374··ne:·'{{·var_syst | |||
| 0003b7c0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | |||
| 0003b7d0:·207d·7d27·0a20·2020·2063·7265·6174·653a···}}'.····create: | |||
| 0003b7e0:·2074·7275·650a·2020·7461·6773·3a0a·2020···true.··tags:.·· | |||
| 0003b7f0:·2d20·4343·452d·3833·3435·302d·370a·2020··-·CCE-83450-7.·· | |||
| 0003b800:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003b810:·2d30·392d·3231·3531·3035·0a20·202d·2044··-09-215105.··-·D | |||
| 0003b820:·4953·412d·5354·4947·2d52·4845·4c2d·3039··ISA-STIG-RHEL-09 | |||
| 0003b830:·2d36·3731·3031·300a·2020·2d20·4449·5341··-671010.··-·DISA | |||
| 0003b840:·2d53·5449·472d·5248·454c·2d30·392d·3637··-STIG-RHEL-09-67 | |||
| 0003b850:·3230·3330·0a20·202d·204e·4953·542d·3830··2030.··-·NIST-80 | |||
| 0003b860:·302d·3533·2d41·432d·3137·2832·290a·2020··0-53-AC-17(2).·· | |||
| 0003b870:·2d20·4e49·5354·2d38·3030·2d35·332d·4143··-·NIST-800-53-AC | |||
| 0003b880:·2d31·3728·6129·0a20·202d·204e·4953·542d··-17(a).··-·NIST- | |||
| 0003b890:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b8a0:·202d·204e·4953·542d·3830·302d·3533·2d4d···-·NIST-800-53-M | |||
| 0003b8b0:·412d·3428·3629·0a20·202d·204e·4953·542d··A-4(6).··-·NIST- | |||
| 0003b8c0:·3830·302d·3533·2d53·432d·3132·2832·290a··800-53-SC-12(2). | |||
| 0003b8d0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b8e0:·5343·2d31·3228·3329·0a20·202d·204e·4953··SC-12(3).··-·NIS | |||
| 0003b8f0:·542d·3830·302d·3533·2d53·432d·3133·0a20··T-800-53-SC-13.· | |||
| 0003b900:·202d·2050·4349·2d44·5353·7634·2d32·2e32···-·PCI-DSSv4-2.2 | |||
| 0003b910:·0a20·202d·2050·4349·2d44·5353·7634·2d32··.··-·PCI-DSSv4-2 | |||
| 0003b920:·2e32·2e37·0a20·202d·2063·6f6e·6669·6775··.2.7.··-·configu | |||
| 0003b930:·7265·5f63·7279·7074·6f5f·706f·6c69·6379··re_crypto_policy | |||
| 0003b940:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | |||
| 0003b950:·7479·0a20·202d·206c·6f77·5f63·6f6d·706c··ty.··-·low_compl | |||
| 0003b960:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b970:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | |||
| 0003b980:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b990:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | |||
| 0003b9a0:·6567·790a·0a2d·206e·616d·653a·2056·6572··egy..-·name:·Ver | |||
| 0003b9b0:·6966·7920·7468·6174·2043·7279·7074·6f20··ify·that·Crypto· | |||
| 0003b9c0:·506f·6c69·6379·2069·7320·5365·7420·2872··Policy·is·Set·(r | |||
| 0003b9d0:·756e·7469·6d65·290a·2020·636f·6d6d·616e··untime).··comman | |||
| 0003b9e0:·643a·202f·7573·722f·6269·6e2f·7570·6461··d:·/usr/bin/upda | |||
| 0003b | 0003b700:·7279·7074·6f2d·706f·6c69·6369·6573·2720··rypto-policies'· | ||
| 0003b710:·636f·6d6d·616e·6422·2026·6774·3b26·616d··command"·>&am | |||
| 0003b720:·703b·320a·0965·6368·6f20·2274·6f20·7365··p;2..echo·"to·se | |||
| 0003b730:·6520·7768·6174·2070·6163·6b61·6765·2074··e·what·package·t | |||
| 0003b740:·6f20·2872·6529·696e·7374·616c·6c22·2026··o·(re)install"·& | |||
| 0003b750:·6774·3b26·616d·703b·320a·0a09·6661·6c73··gt;&2...fals | |||
| 0003b760:·6520·2023·2065·6e64·2077·6974·6820·616e··e··#·end·with·an | |||
| 0003b770:·2065·7272·6f72·2063·6f64·650a·656c·6966···error·code.elif | |||
| 0003b780:·2074·6573·7420·2224·7263·2220·213d·2030···test·"$rc"·!=·0 | |||
| Max diff block lines reached; 13212683/13246383 bytes (99.75%) of diff not shown. | |||
| Offset 105, 14 lines modified | Offset 105, 58 lines modified | ||
| 105 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 105 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 107 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 107 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 108 | ·············_\x8c_\x8i_\x8s······1.6.1 | 108 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 113 | var_system_crypto_policy='DEFAULT' | ||
| 114 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 115 | rc=$? | ||
| 116 | if·test·"$rc"·=·127;·then | ||
| 117 | » echo·"$stderr_of_call"·>&2 | ||
| 118 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 119 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 120 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 121 | » false··#·end·with·an·error·code | ||
| 122 | elif·test·"$rc"·!=·0;·then | ||
| 123 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 124 | » false··#·end·with·an·error·code | ||
| 125 | fi | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 131 | --- | ||
| 132 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 133 | kind:·MachineConfig | ||
| 134 | spec: | ||
| 135 | ··config: | ||
| 136 | ····ignition: | ||
| 137 | ······version:·3.1.0 | ||
| 138 | ····systemd: | ||
| 139 | ······units: | ||
| 140 | ········-·name:·configure-crypto-policy.service | ||
| 141 | ··········enabled:·true | ||
| 142 | ··········contents:·| | ||
| 143 | ············[Unit] | ||
| 144 | ············Before=kubelet.service | ||
| 145 | ············[Service] | ||
| 146 | ············Type=oneshot | ||
| 147 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 148 | ············RemainAfterExit=yes | ||
| 149 | ············[Install] | ||
| 150 | ············WantedBy=multi-user.target | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 117 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 156 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 118 | ··set_fact: | 157 | ··set_fact: |
| Offset 165, 58 lines modified | Offset 209, 14 lines modified | ||
| 165 | ··-·PCI-DSSv4-2.2.7 | 209 | ··-·PCI-DSSv4-2.2.7 |
| 166 | ··-·configure_crypto_policy | 210 | ··-·configure_crypto_policy |
| 167 | ··-·high_severity | 211 | ··-·high_severity |
| 168 | ··-·low_complexity | 212 | ··-·low_complexity |
| 169 | ··-·low_disruption | 213 | ··-·low_disruption |
| 170 | ··-·no_reboot_needed | 214 | ··-·no_reboot_needed |
| 171 | ··-·restrict_strategy | 215 | ··-·restrict_strategy |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 177 | --- | ||
| 178 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 179 | kind:·MachineConfig | ||
| 180 | spec: | ||
| 181 | ··config: | ||
| 182 | ····ignition: | ||
| 183 | ······version:·3.1.0 | ||
| 184 | ····systemd: | ||
| 185 | ······units: | ||
| 186 | ········-·name:·configure-crypto-policy.service | ||
| 187 | ··········enabled:·true | ||
| 188 | ··········contents:·| | ||
| 189 | ············[Unit] | ||
| 190 | ············Before=kubelet.service | ||
| 191 | ············[Service] | ||
| 192 | ············Type=oneshot | ||
| 193 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 194 | ············RemainAfterExit=yes | ||
| 195 | ············[Install] | ||
| 196 | ············WantedBy=multi-user.target | ||
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 198 | var_system_crypto_policy='DEFAULT' | ||
| 199 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 200 | rc=$? | ||
| 201 | if·test·"$rc"·=·127;·then | ||
| 202 | » echo·"$stderr_of_call"·>&2 | ||
| 203 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 204 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 205 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 206 | » false··#·end·with·an·error·code | ||
| 207 | elif·test·"$rc"·!=·0;·then | ||
| 208 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 209 | » false··#·end·with·an·error·code | ||
| 210 | fi | ||
| 211 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 212 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 217 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 213 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 218 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 214 | Severity: ···medium | 219 | Severity: ···medium |
| 215 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 220 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 216 | Identifiers:·CCE-83445-7 | 221 | Identifiers:·CCE-83445-7 |
| 217 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 222 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 227, 14 lines modified | Offset 227, 19 lines modified | ||
| 227 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 227 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 229 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL6 | 229 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL6 |
| 230 | ·············_\x8c_\x8i_\x8s······1.6.2 | 230 | ·············_\x8c_\x8i_\x8s······1.6.2 |
| 231 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 231 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-255075 | 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-255075 |
| 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule | 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1170681/1176100 bytes (99.54%) of diff not shown. | |||
| Offset 15136, 254 lines modified | Offset 15136, 254 lines modified | ||
| 0003b1f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b1f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b200:·2223·6964·6d39·3236·3322·2074·6162·696e··"#idm9263"·tabin | 0003b200:·2223·6964·6d39·3236·3322·2074·6162·696e··"#idm9263"·tabin | ||
| 0003b210:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b210:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b220:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b220:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b230:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b230:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b240:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b240:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b250:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b250:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b260:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b260:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b270:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b280:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b290:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b2a0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b2b0:·6d39·3236·3322·3e3c·7072·653e·3c63·6f64··m9263"><pre><cod | |||
| 0003b2c0:·653e·0a76·6172·5f73·7973·7465·6d5f·6372··e>.var_system_cr | |||
| 0003b2d0:·7970·746f·5f70·6f6c·6963·793d·273c·6162··ypto_policy='<ab | |||
| 0003b2e0:·6272·2074·6974·6c65·3d22·6672·6f6d·2050··br·title="from·P | |||
| 0003b2f0:·726f·6669·6c65·2f72·6566·696e·652d·7661··rofile/refine-va | |||
| 0003b300:·6c75·653a·2078·6363·6466·5f6f·7267·2e73··lue:·xccdf_org.s | |||
| 0003b310:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | |||
| 0003b270:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b280:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b290:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b2a0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b2b0:·2269·646d·3932·3633·223e·3c74·6162·6c65··"idm9263"><table | |||
| 0003b2c0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b2d0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b2e0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b2f0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b300:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b310:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b320:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b330:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b340:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b350:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b360:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b370:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b380:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003b390:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003b3a0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b3b0:·6f64·653e·2d20·6e61·6d65·3a20·5843·4344··ode>-·name:·XCCD | |||
| 0003b3 | 0003b320:·745f·7661·6c75·655f·7661·725f·7379·7374··t_value_var_syst | ||
| 0003b3 | 0003b330:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| 0003b340:·223e·4445·4641·554c·543c·2f61·6262·723e··">DEFAULT</abbr> | |||
| 0003b350:·270a·0a0a·7374·6465·7272·5f6f·665f·6361··'...stderr_of_ca | |||
| 0003b360:·6c6c·3d24·2875·7064·6174·652d·6372·7970··ll=$(update-cryp | |||
| 0003b370:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 0003b380:·7420·247b·7661·725f·7379·7374·656d·5f63··t·${var_system_c | |||
| 0003b390:·7279·7074·6f5f·706f·6c69·6379·7d20·3226··rypto_policy}·2& | |||
| 0003b3a0:·6774·3b26·616d·703b·3120·2667·743b·202f··gt;&1·>·/ | |||
| 0003b3b0:·6465·762f·6e75·6c6c·290a·7263·3d24·3f0a··dev/null).rc=$?. | |||
| 0003b3c0:·0a69·6620·7465·7374·2022·2472·6322·203d··.if·test·"$rc"·= | |||
| 0003b3d0:·2031·3237·3b20·7468·656e·0a09·6563·686f···127;·then..echo | |||
| 0003b3e0:·2022·2473·7464·6572·725f·6f66·5f63·616c···"$stderr_of_cal | |||
| 0003b3f0:·6c22·2026·6774·3b26·616d·703b·320a·0965··l"·>&2..e | |||
| 0003b400:·6368·6f20·224d·616b·6520·7375·7265·2074··cho·"Make·sure·t | |||
| 0003b410:·6861·7420·7468·6520·7363·7269·7074·2069··hat·the·script·i | |||
| 0003b420:·7320·696e·7374·616c·6c65·6420·6f6e·2074··s·installed·on·t | |||
| 0003b430:·6865·2072·656d·6564·6961·7465·6420·7379··he·remediated·sy | |||
| 0003b440:·7374·656d·2e22·2026·6774·3b26·616d·703b··stem."·>& | |||
| 0003b450:·320a·0965·6368·6f20·2253·6565·206f·7574··2..echo·"See·out | |||
| 0003b460:·7075·7420·6f66·2074·6865·2027·646e·6620··put·of·the·'dnf· | |||
| 0003b470:·7072·6f76·6964·6573·2075·7064·6174·652d··provides·update- | |||
| 0003b480:·6372·7970·746f·2d70·6f6c·6963·6965·7327··crypto-policies' | |||
| 0003b490:·2063·6f6d·6d61·6e64·2220·2667·743b·2661···command"·>&a | |||
| 0003b4a0:·6d70·3b32·0a09·6563·686f·2022·746f·2073··mp;2..echo·"to·s | |||
| 0003b4b0:·6565·2077·6861·7420·7061·636b·6167·6520··ee·what·package· | |||
| 0003b4c0:·746f·2028·7265·2969·6e73·7461·6c6c·2220··to·(re)install"· | |||
| 0003b4d0:·2667·743b·2661·6d70·3b32·0a0a·0966·616c··>&2...fal | |||
| 0003b4e0:·7365·2020·2320·656e·6420·7769·7468·2061··se··#·end·with·a | |||
| 0003b4f0:·6e20·6572·726f·7220·636f·6465·0a65·6c69··n·error·code.eli | |||
| 0003b500:·6620·7465·7374·2022·2472·6322·2021·3d20··f·test·"$rc"·!=· | |||
| 0003b510:·303b·2074·6865·6e0a·0965·6368·6f20·2245··0;·then..echo·"E | |||
| 0003b520:·7272·6f72·2069·6e76·6f6b·696e·6720·7468··rror·invoking·th | |||
| 0003b530:·6520·7570·6461·7465·2d63·7279·7074·6f2d··e·update-crypto- | |||
| 0003b540:·706f·6c69·6369·6573·2073·6372·6970·743a··policies·script: | |||
| 0003b550:·2024·7374·6465·7272·5f6f·665f·6361·6c6c···$stderr_of_call | |||
| 0003b560:·2220·2667·743b·2661·6d70·3b32·0a09·6661··"·>&2..fa | |||
| 0003b570:·6c73·6520·2023·2065·6e64·2077·6974·6820··lse··#·end·with· | |||
| 0003b580:·616e·2065·7272·6f72·2063·6f64·650a·6669··an·error·code.fi | |||
| 0003b590:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b5a0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b5b0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b5c0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b5d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b5e0:·743d·2223·6964·6d39·3236·3522·2074·6162··t="#idm9265"·tab | |||
| 0003b5f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b600:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b610:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b620:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b630:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b640:·2122·3e52·656d·6564·6961·7469·6f6e·204b··!">Remediation·K | |||
| 0003b650:·7562·6572·6e65·7465·7320·736e·6970·7065··ubernetes·snippe | |||
| 0003b660:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b670:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b680:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b690:·2220·6964·3d22·6964·6d39·3236·3522·3e3c··"·id="idm9265">< | |||
| 0003b6a0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b6b0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b6c0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b6d0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b6e0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b6f0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b700:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b710:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b720:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b730:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b740:·743a·3c2f·7468·3e3c·7464·3e74·7275·653c··t:</th><td>true< | |||
| 0003b750:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b760:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b770:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003b780:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b790:·653e·3c63·6f64·653e·2d2d·2d0a·6170·6956··e><code>---.apiV | |||
| 0003b7a0:·6572·7369·6f6e·3a20·6d61·6368·696e·6563··ersion:·machinec | |||
| 0003b7b0:·6f6e·6669·6775·7261·7469·6f6e·2e6f·7065··onfiguration.ope | |||
| 0003b7c0:·6e73·6869·6674·2e69·6f2f·7631·0a6b·696e··nshift.io/v1.kin | |||
| 0003b7d0:·643a·204d·6163·6869·6e65·436f·6e66·6967··d:·MachineConfig | |||
| 0003b7e0:·0a73·7065·633a·0a20·2063·6f6e·6669·673a··.spec:.··config: | |||
| 0003b7f0:·0a20·2020·2069·676e·6974·696f·6e3a·0a20··.····ignition:.· | |||
| 0003b800:·2020·2020·2076·6572·7369·6f6e·3a20·332e·······version:·3. | |||
| 0003b810:·312e·300a·2020·2020·7379·7374·656d·643a··1.0.····systemd: | |||
| 0003b820:·0a20·2020·2020·2075·6e69·7473·3a0a·2020··.······units:.·· | |||
| 0003b830:·2020·2020·2020·2d20·6e61·6d65·3a20·636f········-·name:·co | |||
| 0003b840:·6e66·6967·7572·652d·6372·7970·746f·2d70··nfigure-crypto-p | |||
| 0003b850:·6f6c·6963·792e·7365·7276·6963·650a·2020··olicy.service.·· | |||
| 0003b860:·2020·2020·2020·2020·656e·6162·6c65·643a··········enabled: | |||
| 0003b870:·2074·7275·650a·2020·2020·2020·2020·2020···true.·········· | |||
| 0003b880:·636f·6e74·656e·7473·3a20·7c0a·2020·2020··contents:·|.···· | |||
| Max diff block lines reached; 9026905/9060605 bytes (99.63%) of diff not shown. | |||
| Offset 97, 14 lines modified | Offset 97, 58 lines modified | ||
| 97 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 97 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 98 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 98 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 99 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 99 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 100 | ·············_\x8c_\x8i_\x8s······1.6.1 | 100 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 101 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 101 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 102 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 | 102 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 |
| 103 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 103 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 105 | var_system_crypto_policy='DEFAULT' | ||
| 106 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 107 | rc=$? | ||
| 108 | if·test·"$rc"·=·127;·then | ||
| 109 | » echo·"$stderr_of_call"·>&2 | ||
| 110 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 111 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 112 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 113 | » false··#·end·with·an·error·code | ||
| 114 | elif·test·"$rc"·!=·0;·then | ||
| 115 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 116 | » false··#·end·with·an·error·code | ||
| 117 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 123 | --- | ||
| 124 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 125 | kind:·MachineConfig | ||
| 126 | spec: | ||
| 127 | ··config: | ||
| 128 | ····ignition: | ||
| 129 | ······version:·3.1.0 | ||
| 130 | ····systemd: | ||
| 131 | ······units: | ||
| 132 | ········-·name:·configure-crypto-policy.service | ||
| 133 | ··········enabled:·true | ||
| 134 | ··········contents:·| | ||
| 135 | ············[Unit] | ||
| 136 | ············Before=kubelet.service | ||
| 137 | ············[Service] | ||
| 138 | ············Type=oneshot | ||
| 139 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 140 | ············RemainAfterExit=yes | ||
| 141 | ············[Install] | ||
| 142 | ············WantedBy=multi-user.target | ||
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 109 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 148 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 110 | ··set_fact: | 149 | ··set_fact: |
| Offset 157, 58 lines modified | Offset 201, 14 lines modified | ||
| 157 | ··-·PCI-DSSv4-2.2.7 | 201 | ··-·PCI-DSSv4-2.2.7 |
| 158 | ··-·configure_crypto_policy | 202 | ··-·configure_crypto_policy |
| 159 | ··-·high_severity | 203 | ··-·high_severity |
| 160 | ··-·low_complexity | 204 | ··-·low_complexity |
| 161 | ··-·low_disruption | 205 | ··-·low_disruption |
| 162 | ··-·no_reboot_needed | 206 | ··-·no_reboot_needed |
| 163 | ··-·restrict_strategy | 207 | ··-·restrict_strategy |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 169 | --- | ||
| 170 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 171 | kind:·MachineConfig | ||
| 172 | spec: | ||
| 173 | ··config: | ||
| 174 | ····ignition: | ||
| 175 | ······version:·3.1.0 | ||
| 176 | ····systemd: | ||
| 177 | ······units: | ||
| 178 | ········-·name:·configure-crypto-policy.service | ||
| 179 | ··········enabled:·true | ||
| 180 | ··········contents:·| | ||
| 181 | ············[Unit] | ||
| 182 | ············Before=kubelet.service | ||
| 183 | ············[Service] | ||
| 184 | ············Type=oneshot | ||
| 185 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 186 | ············RemainAfterExit=yes | ||
| 187 | ············[Install] | ||
| 188 | ············WantedBy=multi-user.target | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 190 | var_system_crypto_policy='DEFAULT' | ||
| 191 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 192 | rc=$? | ||
| 193 | if·test·"$rc"·=·127;·then | ||
| 194 | » echo·"$stderr_of_call"·>&2 | ||
| 195 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 196 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 197 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 198 | » false··#·end·with·an·error·code | ||
| 199 | elif·test·"$rc"·!=·0;·then | ||
| 200 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 201 | » false··#·end·with·an·error·code | ||
| 202 | fi | ||
| 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 204 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 209 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 205 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 210 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 206 | Severity: ···medium | 211 | Severity: ···medium |
| 207 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 212 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 208 | Identifiers:·CCE-83445-7 | 213 | Identifiers:·CCE-83445-7 |
| 209 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 214 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 219, 14 lines modified | Offset 219, 19 lines modified | ||
| 219 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 219 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 220 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 220 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 221 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL6 | 221 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL6 |
| 222 | ·············_\x8c_\x8i_\x8s······1.6.2 | 222 | ·············_\x8c_\x8i_\x8s······1.6.2 |
| 223 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 223 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 224 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-255075 | 224 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-255075 |
| 225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule | 225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule |
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 878297/883714 bytes (99.39%) of diff not shown. | |||
| Offset 15177, 254 lines modified | Offset 15177, 254 lines modified | ||
| 0003b480:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b480:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b490:·2369·646d·3932·3633·2220·7461·6269·6e64··#idm9263"·tabind | 0003b490:·2369·646d·3932·3633·2220·7461·6269·6e64··#idm9263"·tabind | ||
| 0003b4a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b4a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b4b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b4b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b4c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b4c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b4d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b4d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b4e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b4e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b4f0:·5265·6d65·6469·6174·696f·6e20· | 0003b4f0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003b500:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b510:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b520:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b530:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b540:·3932·3633·223e·3c70·7265·3e3c·636f·6465··9263"><pre><code | |||
| 0003b550:·3e0a·7661·725f·7379·7374·656d·5f63·7279··>.var_system_cry | |||
| 0003b560:·7074·6f5f·706f·6c69·6379·3d27·3c61·6262··pto_policy='<abb | |||
| 0003b570:·7220·7469·746c·653d·2266·726f·6d20·5072··r·title="from·Pr | |||
| 0003b580:·6f66·696c·652f·7265·6669·6e65·2d76·616c··ofile/refine-val | |||
| 0003b590:·7565·3a20·7863·6364·665f·6f72·672e·7373··ue:·xccdf_org.ss | |||
| 0003b5a0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | |||
| 0003b500:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b510:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b520:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b530:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b540:·6964·6d39·3236·3322·3e3c·7461·626c·6520··idm9263"><table· | |||
| 0003b550:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b560:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b570:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b580:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b590:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b5a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b5b0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b5c0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b5d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b5e0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b5f0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b600:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b610:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 0003b620:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 0003b630:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b640:·6465·3e2d·206e·616d·653a·2058·4343·4446··de>-·name:·XCCDF | |||
| 0003b | 0003b5b0:·5f76·616c·7565·5f76·6172·5f73·7973·7465··_value_var_syste | ||
| 0003b | 0003b5c0:·6d5f·6372·7970·746f·5f70·6f6c·6963·7922··m_crypto_policy" | ||
| 0003b5d0:·3e44·4546·4155·4c54·3c2f·6162·6272·3e27··>DEFAULT</abbr>' | |||
| 0003b5e0:·0a0a·0a73·7464·6572·725f·6f66·5f63·616c··...stderr_of_cal | |||
| 0003b5f0:·6c3d·2428·7570·6461·7465·2d63·7279·7074··l=$(update-crypt | |||
| 0003b600:·6f2d·706f·6c69·6369·6573·202d·2d73·6574··o-policies·--set | |||
| 0003b670:·2320·7072·6f6d·6f74·6520·746f·2076·6172··#·promote·to·var | |||
| 0003b680:·6961·626c·650a·2020·7365·745f·6661·6374··iable.··set_fact | |||
| 0003b690:·3a0a·2020·2020·7661·725f·7379·7374·656d··:.····var_system | |||
| 0003b6a0:·5f63·7279·7074·6f5f·706f·6c69·6379·3a20··_crypto_policy:· | |||
| 0003b6b0:·2121·7374·7220·3c61·6262·7220·7469·746c··!!str·<abbr·titl | |||
| 0003b6c0:·653d·2266·726f·6d20·5072·6f66·696c·652f··e="from·Profile/ | |||
| 0003b6d0:·7265·6669·6e65·2d76·616c·7565·3a20·7863··refine-value:·xc | |||
| 0003b6e0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | |||
| 0003b6f0:·6374·2e63·6f6e·7465·6e74·5f76·616c·7565··ct.content_value | |||
| 0003b | 0003b610:·2024·7b76·6172·5f73·7973·7465·6d5f·6372···${var_system_cr | ||
| 0003b620:·7970·746f·5f70·6f6c·6963·797d·2032·2667··ypto_policy}·2&g | |||
| 0003b630:·743b·2661·6d70·3b31·2026·6774·3b20·2f64··t;&1·>·/d | |||
| 0003b640:·6576·2f6e·756c·6c29·0a72·633d·243f·0a0a··ev/null).rc=$?.. | |||
| 0003b650:·6966·2074·6573·7420·2224·7263·2220·3d20··if·test·"$rc"·=· | |||
| 0003b660:·3132·373b·2074·6865·6e0a·0965·6368·6f20··127;·then..echo· | |||
| 0003b670:·2224·7374·6465·7272·5f6f·665f·6361·6c6c··"$stderr_of_call | |||
| 0003b680:·2220·2667·743b·2661·6d70·3b32·0a09·6563··"·>&2..ec | |||
| 0003b690:·686f·2022·4d61·6b65·2073·7572·6520·7468··ho·"Make·sure·th | |||
| 0003b6a0:·6174·2074·6865·2073·6372·6970·7420·6973··at·the·script·is | |||
| 0003b6b0:·2069·6e73·7461·6c6c·6564·206f·6e20·7468···installed·on·th | |||
| 0003b6c0:·6520·7265·6d65·6469·6174·6564·2073·7973··e·remediated·sys | |||
| 0003b6d0:·7465·6d2e·2220·2667·743b·2661·6d70·3b32··tem."·>&2 | |||
| 0003b6e0:·0a09·6563·686f·2022·5365·6520·6f75·7470··..echo·"See·outp | |||
| 0003b6f0:·7574·206f·6620·7468·6520·2764·6e66·2070··ut·of·the·'dnf·p | |||
| 0003b700:·726f·7669·6465·7320·7570·6461·7465·2d63··rovides·update-c | |||
| 0003b710:·746f·5f70·6f6c·6963·7922·3e44·4546·4155··to_policy">DEFAU | |||
| 0003b720:·4c54·3c2f·6162·6272·3e0a·2020·7461·6773··LT</abbr>.··tags | |||
| 0003b730:·3a0a·2020·2020·2d20·616c·7761·7973·0a0a··:.····-·always.. | |||
| 0003b740:·2d20·6e61·6d65·3a20·436f·6e66·6967·7572··-·name:·Configur | |||
| 0003b750:·6520·5379·7374·656d·2043·7279·7074·6f67··e·System·Cryptog | |||
| 0003b760:·7261·7068·7920·506f·6c69·6379·0a20·206c··raphy·Policy.··l | |||
| 0003b770:·696e·6569·6e66·696c·653a·0a20·2020·2070··ineinfile:.····p | |||
| 0003b780:·6174·683a·202f·6574·632f·6372·7970·746f··ath:·/etc/crypto | |||
| 0003b790:·2d70·6f6c·6963·6965·732f·636f·6e66·6967··-policies/config | |||
| 0003b7a0:·0a20·2020·2072·6567·6578·703a·205e·283f··.····regexp:·^(? | |||
| 0003b7b0:·2123·2928·5c53·2b29·240a·2020·2020·6c69··!#)(\S+)$.····li | |||
| 0003b7c0:·6e65·3a20·277b·7b20·7661·725f·7379·7374··ne:·'{{·var_syst | |||
| 0003b7d0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | |||
| 0003b7e0:·207d·7d27·0a20·2020·2063·7265·6174·653a···}}'.····create: | |||
| 0003b7f0:·2074·7275·650a·2020·7461·6773·3a0a·2020···true.··tags:.·· | |||
| 0003b800:·2d20·4343·452d·3833·3435·302d·370a·2020··-·CCE-83450-7.·· | |||
| 0003b810:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003b820:·2d30·392d·3231·3531·3035·0a20·202d·2044··-09-215105.··-·D | |||
| 0003b830:·4953·412d·5354·4947·2d52·4845·4c2d·3039··ISA-STIG-RHEL-09 | |||
| 0003b840:·2d36·3731·3031·300a·2020·2d20·4449·5341··-671010.··-·DISA | |||
| 0003b850:·2d53·5449·472d·5248·454c·2d30·392d·3637··-STIG-RHEL-09-67 | |||
| 0003b860:·3230·3330·0a20·202d·204e·4953·542d·3830··2030.··-·NIST-80 | |||
| 0003b870:·302d·3533·2d41·432d·3137·2832·290a·2020··0-53-AC-17(2).·· | |||
| 0003b880:·2d20·4e49·5354·2d38·3030·2d35·332d·4143··-·NIST-800-53-AC | |||
| 0003b890:·2d31·3728·6129·0a20·202d·204e·4953·542d··-17(a).··-·NIST- | |||
| 0003b8a0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b8b0:·202d·204e·4953·542d·3830·302d·3533·2d4d···-·NIST-800-53-M | |||
| 0003b8c0:·412d·3428·3629·0a20·202d·204e·4953·542d··A-4(6).··-·NIST- | |||
| 0003b8d0:·3830·302d·3533·2d53·432d·3132·2832·290a··800-53-SC-12(2). | |||
| 0003b8e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b8f0:·5343·2d31·3228·3329·0a20·202d·204e·4953··SC-12(3).··-·NIS | |||
| 0003b900:·542d·3830·302d·3533·2d53·432d·3133·0a20··T-800-53-SC-13.· | |||
| 0003b910:·202d·2050·4349·2d44·5353·7634·2d32·2e32···-·PCI-DSSv4-2.2 | |||
| 0003b920:·0a20·202d·2050·4349·2d44·5353·7634·2d32··.··-·PCI-DSSv4-2 | |||
| 0003b930:·2e32·2e37·0a20·202d·2063·6f6e·6669·6775··.2.7.··-·configu | |||
| 0003b940:·7265·5f63·7279·7074·6f5f·706f·6c69·6379··re_crypto_policy | |||
| 0003b950:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | |||
| 0003b960:·7479·0a20·202d·206c·6f77·5f63·6f6d·706c··ty.··-·low_compl | |||
| 0003b970:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b980:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | |||
| 0003b990:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b9a0:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | |||
| 0003b9b0:·6567·790a·0a2d·206e·616d·653a·2056·6572··egy..-·name:·Ver | |||
| 0003b9c0:·6966·7920·7468·6174·2043·7279·7074·6f20··ify·that·Crypto· | |||
| 0003b9d0:·506f·6c69·6379·2069·7320·5365·7420·2872··Policy·is·Set·(r | |||
| 0003b9e0:·756e·7469·6d65·290a·2020·636f·6d6d·616e··untime).··comman | |||
| 0003b9f0:·643a·202f·7573·722f·6269·6e2f·7570·6461··d:·/usr/bin/upda | |||
| 0003b | 0003b710:·7279·7074·6f2d·706f·6c69·6369·6573·2720··rypto-policies'· | ||
| 0003b720:·636f·6d6d·616e·6422·2026·6774·3b26·616d··command"·>&am | |||
| 0003b730:·703b·320a·0965·6368·6f20·2274·6f20·7365··p;2..echo·"to·se | |||
| 0003b740:·6520·7768·6174·2070·6163·6b61·6765·2074··e·what·package·t | |||
| 0003b750:·6f20·2872·6529·696e·7374·616c·6c22·2026··o·(re)install"·& | |||
| 0003b760:·6774·3b26·616d·703b·320a·0a09·6661·6c73··gt;&2...fals | |||
| 0003b770:·6520·2023·2065·6e64·2077·6974·6820·616e··e··#·end·with·an | |||
| 0003b780:·2065·7272·6f72·2063·6f64·650a·656c·6966···error·code.elif | |||
| 0003b790:·2074·6573·7420·2224·7263·2220·213d·2030···test·"$rc"·!=·0 | |||
| Max diff block lines reached; 10345227/10378927 bytes (99.68%) of diff not shown. | |||
| Offset 105, 14 lines modified | Offset 105, 58 lines modified | ||
| 105 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 105 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 107 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 107 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 108 | ·············_\x8c_\x8i_\x8s······1.6.1 | 108 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 113 | var_system_crypto_policy='DEFAULT' | ||
| 114 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 115 | rc=$? | ||
| 116 | if·test·"$rc"·=·127;·then | ||
| 117 | » echo·"$stderr_of_call"·>&2 | ||
| 118 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 119 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 120 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 121 | » false··#·end·with·an·error·code | ||
| 122 | elif·test·"$rc"·!=·0;·then | ||
| 123 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 124 | » false··#·end·with·an·error·code | ||
| 125 | fi | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 131 | --- | ||
| 132 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 133 | kind:·MachineConfig | ||
| 134 | spec: | ||
| 135 | ··config: | ||
| 136 | ····ignition: | ||
| 137 | ······version:·3.1.0 | ||
| 138 | ····systemd: | ||
| 139 | ······units: | ||
| 140 | ········-·name:·configure-crypto-policy.service | ||
| 141 | ··········enabled:·true | ||
| 142 | ··········contents:·| | ||
| 143 | ············[Unit] | ||
| 144 | ············Before=kubelet.service | ||
| 145 | ············[Service] | ||
| 146 | ············Type=oneshot | ||
| 147 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 148 | ············RemainAfterExit=yes | ||
| 149 | ············[Install] | ||
| 150 | ············WantedBy=multi-user.target | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 117 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 156 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 118 | ··set_fact: | 157 | ··set_fact: |
| Offset 165, 58 lines modified | Offset 209, 14 lines modified | ||
| 165 | ··-·PCI-DSSv4-2.2.7 | 209 | ··-·PCI-DSSv4-2.2.7 |
| 166 | ··-·configure_crypto_policy | 210 | ··-·configure_crypto_policy |
| 167 | ··-·high_severity | 211 | ··-·high_severity |
| 168 | ··-·low_complexity | 212 | ··-·low_complexity |
| 169 | ··-·low_disruption | 213 | ··-·low_disruption |
| 170 | ··-·no_reboot_needed | 214 | ··-·no_reboot_needed |
| 171 | ··-·restrict_strategy | 215 | ··-·restrict_strategy |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 177 | --- | ||
| 178 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 179 | kind:·MachineConfig | ||
| 180 | spec: | ||
| 181 | ··config: | ||
| 182 | ····ignition: | ||
| 183 | ······version:·3.1.0 | ||
| 184 | ····systemd: | ||
| 185 | ······units: | ||
| 186 | ········-·name:·configure-crypto-policy.service | ||
| 187 | ··········enabled:·true | ||
| 188 | ··········contents:·| | ||
| 189 | ············[Unit] | ||
| 190 | ············Before=kubelet.service | ||
| 191 | ············[Service] | ||
| 192 | ············Type=oneshot | ||
| 193 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 194 | ············RemainAfterExit=yes | ||
| 195 | ············[Install] | ||
| 196 | ············WantedBy=multi-user.target | ||
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 198 | var_system_crypto_policy='DEFAULT' | ||
| 199 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 200 | rc=$? | ||
| 201 | if·test·"$rc"·=·127;·then | ||
| 202 | » echo·"$stderr_of_call"·>&2 | ||
| 203 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 204 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 205 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 206 | » false··#·end·with·an·error·code | ||
| 207 | elif·test·"$rc"·!=·0;·then | ||
| 208 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 209 | » false··#·end·with·an·error·code | ||
| 210 | fi | ||
| 211 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 212 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 217 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 213 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 218 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 214 | Severity: ···medium | 219 | Severity: ···medium |
| 215 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 220 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 216 | Identifiers:·CCE-83445-7 | 221 | Identifiers:·CCE-83445-7 |
| 217 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 222 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 227, 14 lines modified | Offset 227, 19 lines modified | ||
| 227 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 227 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 229 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL6 | 229 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL6 |
| 230 | ·············_\x8c_\x8i_\x8s······1.6.2 | 230 | ·············_\x8c_\x8i_\x8s······1.6.2 |
| 231 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 231 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-255075 | 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-255075 |
| 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule | 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1071644/1077063 bytes (99.50%) of diff not shown. | |||
| Offset 15165, 284 lines modified | Offset 15165, 284 lines modified | ||
| 0003b3c0:·6574·3d22·2369·646d·3834·3538·2220·7461··et="#idm8458"·ta | 0003b3c0:·6574·3d22·2369·646d·3834·3538·2220·7461··et="#idm8458"·ta | ||
| 0003b3d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b3d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b3e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b3e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b3f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b3f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b400:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b400:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b410:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b410:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b420:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b420:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b430:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b440:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b450:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b460:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b470:·643d·2269·646d·3834·3538·223e·3c74·6162··d="idm8458"><tab | |||
| 0003b480:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b490:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b4a0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b4b0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b4c0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b4d0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b4e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b4f0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b500:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b510:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b520:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b530:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b540:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b550:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b560:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b570:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b580:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b590:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b5a0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b5b0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b5c0:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b5d0:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003b5e0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b5f0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b600:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b610:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b620:·2d74·6172·6765·743d·2223·6964·6d38·3435··-target="#idm845 | |||
| 0003b630:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | |||
| 0003b640:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b650:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b660:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b670:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b680:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b690:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b6a0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b6b0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b6c0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b6d0:·7073·6522·2069·643d·2269·646d·3834·3539··pse"·id="idm8459 | |||
| 0003b6e0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b6f0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b700:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b710:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b720:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b730:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b740:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b750:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b760:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b770:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b780:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b790:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b7a0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b7b0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b7c0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b7d0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b7e0:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003b7f0:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003b800:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003b810:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003b820:·7461·6773·3a0a·2020·2d20·4343·452d·3930··tags:.··-·CCE-90 | |||
| 0003b830:·3834·332d·340a·2020·2d20·434a·4953·2d35··843-4.··-·CJIS-5 | |||
| 0003b840:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003b850:·2d53·5449·472d·5248·454c·2d30·392d·3635··-STIG-RHEL-09-65 | |||
| 0003b860:·3130·3130·0a20·202d·204e·4953·542d·3830··1010.··-·NIST-80 | |||
| 0003b870:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b880:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b890:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b8a0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b8b0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b8c0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b8d0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b8e0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b8f0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b900:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b910:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b920:·6c6c·6564·0a0a·2d20·6e61·6d65·3a20·456e··lled..-·name:·En | |||
| 0003b930:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b940:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b950:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b960:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b970:·656e·740a·2020·7768·656e·3a20·2722·6b65··ent.··when:·'"ke | |||
| 0003b980:·726e·656c·2220·696e·2061·6e73·6962·6c65··rnel"·in·ansible | |||
| 0003b990:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0003b9a0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b9b0:·2d39·3038·3433·2d34·0a20·202d·2043·4a49··-90843-4.··-·CJI | |||
| 0003b9c0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b9d0:·4953·412d·5354·4947·2d52·4845·4c2d·3039··ISA-STIG-RHEL-09 | |||
| 0003b9e0:·2d36·3531·3031·300a·2020·2d20·4e49·5354··-651010.··-·NIST | |||
| 0003b9f0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003ba00:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003ba10:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003ba20:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003ba30:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003ba40:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003ba50:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003ba60:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003ba70:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003ba80:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003ba90:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003baa0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003bab0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003bac0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003bad0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003bae0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003baf0:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 0003bb00:·3630·2220·7461·6269·6e64·6578·3d22·3022··60"·tabindex="0" | |||
| 0003bb10:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003bb20:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003bb30:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003bb40:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003bb50:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003bb60:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003bb70:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003bb80:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003bb90:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003bba0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| Max diff block lines reached; 26160438/26198278 bytes (99.86%) of diff not shown. | |||
| Offset 15126, 285 lines modified | Offset 15126, 285 lines modified | ||
| 0003b150:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b150:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b160:·6964·6d38·3435·3822·2074·6162·696e·6465··idm8458"·tabinde | 0003b160:·6964·6d38·3435·3822·2074·6162·696e·6465··idm8458"·tabinde | ||
| 0003b170:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b170:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b180:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b180:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b190:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b190:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b1a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b1a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b1b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b1b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b1c0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b1d0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b1e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b1f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b200:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b210:·6d38·3435·3822·3e3c·7461·626c·6520·636c··m8458"><table·cl | |||
| 0003b220:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b230:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b240:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b250:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b260:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b270:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b280:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b290:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b2a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b2b0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b2c0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b2d0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b2e0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b2f0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b300:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b310:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b320:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b330:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b340:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b350:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b360:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b370:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003b380:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b390:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b3a0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b3b0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b3c0:·6574·3d22·2369·646d·3834·3539·2220·7461··et="#idm8459"·ta | |||
| 0003b3d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b3e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b3f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b400:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b410:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b420:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b430:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b440:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b450:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b460:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b470:·6964·3d22·6964·6d38·3435·3922·3e3c·7461··id="idm8459"><ta | |||
| 0003b480:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b490:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b4a0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b4b0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b4c0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b4d0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b4e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b4f0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b500:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b510:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b520:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b530:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b540:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b550:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b560:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b570:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b580:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b590:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b5a0:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b5b0:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b5c0:·0a20·202d·2043·4345·2d39·3038·3433·2d34··.··-·CCE-90843-4 | |||
| 0003b5d0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b5e0:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b5f0:·2d52·4845·4c2d·3039·2d36·3531·3031·300a··-RHEL-09-651010. | |||
| 0003b600:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b610:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b620:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b630:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b640:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b650:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b660:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b670:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b680:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b690:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b6a0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b6b0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b6c0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003b6d0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b6e0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b6f0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b700:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b710:·2077·6865·6e3a·2027·226b·6572·6e65·6c22···when:·'"kernel" | |||
| 0003b720:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003b730:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 0003b740:·6773·3a0a·2020·2d20·4343·452d·3930·3834··gs:.··-·CCE-9084 | |||
| 0003b750:·332d·340a·2020·2d20·434a·4953·2d35·2e31··3-4.··-·CJIS-5.1 | |||
| 0003b760:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b770:·5449·472d·5248·454c·2d30·392d·3635·3130··TIG-RHEL-09-6510 | |||
| 0003b780:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b790:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b7a0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b7b0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b7c0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b7d0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b7e0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b7f0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b800:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b810:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b820:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b830:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b840:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b850:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b860:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b870:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b880:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b890:·6765·743d·2223·6964·6d38·3436·3022·2074··get="#idm8460"·t | |||
| 0003b8a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b8b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b8c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b8d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b8e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b8f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b900:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b910:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b920:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b930:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| Max diff block lines reached; 11655751/11693729 bytes (99.68%) of diff not shown. | |||
| Offset 106, 26 lines modified | Offset 106, 48 lines modified | ||
| 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 108 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 108 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 109 | ·············_\x8c_\x8i_\x8s············6.1.1 | 109 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 118 | include·install_aide | ||
| 119 | class·install_aide·{ | ||
| 120 | ··package·{·'aide': | ||
| 121 | ····ensure·=>·'installed', | ||
| 122 | ··} | ||
| 123 | 118 | dnf·install·aide | |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 124 | package·install·aide | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 135 | if·rpm·--quiet·-q·kernel;·then | ||
| 136 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 137 | ····dnf·install·-y·"aide" | ||
| 138 | fi | ||
| 139 | else | ||
| 140 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 141 | fi | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | -·name:·Gather·the·package·facts | 147 | -·name:·Gather·the·package·facts |
| 130 | ··package_facts: | 148 | ··package_facts: |
| Offset 158, 55 lines modified | Offset 180, 33 lines modified | ||
| 158 | ··-·PCI-DSSv4-11.5.2 | 180 | ··-·PCI-DSSv4-11.5.2 |
| 159 | ··-·enable_strategy | 181 | ··-·enable_strategy |
| 160 | ··-·low_complexity | 182 | ··-·low_complexity |
| 161 | ··-·low_disruption | 183 | ··-·low_disruption |
| 162 | ··-·medium_severity | 184 | ··-·medium_severity |
| 163 | ··-·no_reboot_needed | 185 | ··-·no_reboot_needed |
| 164 | ··-·package_aide_installed | 186 | ··-·package_aide_installed |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | dnf·install·aide | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 181 | if·rpm·--quiet·-q·kernel;·then | ||
| 182 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 183 | ····dnf·install·-y·"aide" | ||
| 184 | fi | ||
| 185 | else | ||
| 186 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 187 | fi | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 193 | package·--add=aide | 192 | package·--add=aide |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 198 | include·install_aide | ||
| 199 | 199 | class·install_aide·{ | |
| 200 | ··package·{·'aide': | ||
| 201 | ····ensure·=>·'installed', | ||
| 202 | ··} | ||
| 203 | } | ||
| 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 201 | Run·the·following·command·to·generate·a·new·database: | 205 | Run·the·following·command·to·generate·a·new·database: |
| 202 | $·sudo·/usr/sbin/aide·--init | 206 | $·sudo·/usr/sbin/aide·--init |
| 203 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 204 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 208 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 205 | To·initiate·a·manual·check,·run·the·following·command: | 209 | To·initiate·a·manual·check,·run·the·following·command: |
| 206 | $·sudo·/usr/sbin/aide·--check | 210 | $·sudo·/usr/sbin/aide·--check |
| Offset 227, 14 lines modified | Offset 227, 28 lines modified | ||
| 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 229 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 229 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 230 | ·············_\x8c_\x8i_\x8s············6.1.1 | 230 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 231 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 231 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 236 | if·rpm·--quiet·-q·kernel;·then | ||
| 237 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| Max diff block lines reached; 1360631/1365955 bytes (99.61%) of diff not shown. | |||
| Offset 15118, 284 lines modified | Offset 15118, 284 lines modified | ||
| 0003b0d0:·6765·743d·2223·6964·6d38·3435·3822·2074··get="#idm8458"·t | 0003b0d0:·6765·743d·2223·6964·6d38·3435·3822·2074··get="#idm8458"·t | ||
| 0003b0e0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b0e0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b0f0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b0f0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b100:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b100:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b110:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b110:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b120:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b120:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b130:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b130:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b140:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003b150:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b160:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b170:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b180:·6964·3d22·6964·6d38·3435·3822·3e3c·7461··id="idm8458"><ta | |||
| 0003b190:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b1a0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b1b0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b1c0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b1d0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b1e0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b1f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b200:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b210:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b220:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b230:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b240:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b250:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b260:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b270:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b280:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b290:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b2a0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b2b0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b2c0:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b2d0:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b2e0:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003b2f0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b300:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b310:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b320:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b330:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 0003b340:·3539·2220·7461·6269·6e64·6578·3d22·3022··59"·tabindex="0" | |||
| 0003b350:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b360:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b370:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b380:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b390:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b3a0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b3b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b3c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b3d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b3e0:·6170·7365·2220·6964·3d22·6964·6d38·3435··apse"·id="idm845 | |||
| 0003b3f0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b400:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b410:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b420:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b430:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b440:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b450:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b460:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b470:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b480:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b490:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b4a0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b4b0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b4c0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b4d0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b4e0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b4f0:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b500:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b510:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b520:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b530:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | |||
| 0003b540:·3038·3433·2d34·0a20·202d·2043·4a49·532d··0843-4.··-·CJIS- | |||
| 0003b550:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b560:·412d·5354·4947·2d52·4845·4c2d·3039·2d36··A-STIG-RHEL-09-6 | |||
| 0003b570:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b580:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b590:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b5a0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b5b0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b5c0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b5d0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b5e0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b5f0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b600:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b610:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b620:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b630:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003b640:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b650:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b660:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b670:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b680:·7365·6e74·0a20·2077·6865·6e3a·2027·226b··sent.··when:·'"k | |||
| 0003b690:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | |||
| 0003b6a0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003b6b0:·270a·2020·7461·6773·3a0a·2020·2d20·4343··'.··tags:.··-·CC | |||
| 0003b6c0:·452d·3930·3834·332d·340a·2020·2d20·434a··E-90843-4.··-·CJ | |||
| 0003b6d0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b6e0:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003b6f0:·392d·3635·3130·3130·0a20·202d·204e·4953··9-651010.··-·NIS | |||
| 0003b700:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b710:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b720:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b730:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b740:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b750:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b760:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b770:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b780:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b790:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b7a0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b7b0:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003b7c0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b7d0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b7e0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b7f0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b800:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003b810:·3436·3022·2074·6162·696e·6465·783d·2230··460"·tabindex="0 | |||
| 0003b820:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b830:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b840:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b850:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b860:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b870:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003b880:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003b890:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b8a0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b8b0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| Max diff block lines reached; 11262487/11300327 bytes (99.67%) of diff not shown. | |||
| Offset 105, 26 lines modified | Offset 105, 48 lines modified | ||
| 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ·············_\x8c_\x8i_\x8s············6.1.1 | 108 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 117 | include·install_aide | ||
| 118 | class·install_aide·{ | ||
| 119 | ··package·{·'aide': | ||
| 120 | ····ensure·=>·'installed', | ||
| 121 | ··} | ||
| 122 | 117 | dnf·install·aide | |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 123 | package·install·aide | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | [[packages]] | ||
| 126 | name·=·"aide" | ||
| 127 | version·=·"*" | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 134 | if·rpm·--quiet·-q·kernel;·then | ||
| 135 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 136 | ····dnf·install·-y·"aide" | ||
| 137 | fi | ||
| 138 | else | ||
| 139 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 140 | fi | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | -·name:·Gather·the·package·facts | 146 | -·name:·Gather·the·package·facts |
| 129 | ··package_facts: | 147 | ··package_facts: |
| Offset 157, 55 lines modified | Offset 179, 33 lines modified | ||
| 157 | ··-·PCI-DSSv4-11.5.2 | 179 | ··-·PCI-DSSv4-11.5.2 |
| 158 | ··-·enable_strategy | 180 | ··-·enable_strategy |
| 159 | ··-·low_complexity | 181 | ··-·low_complexity |
| 160 | ··-·low_disruption | 182 | ··-·low_disruption |
| 161 | ··-·medium_severity | 183 | ··-·medium_severity |
| 162 | ··-·no_reboot_needed | 184 | ··-·no_reboot_needed |
| 163 | ··-·package_aide_installed | 185 | ··-·package_aide_installed |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | [[packages]] | ||
| 166 | name·=·"aide" | ||
| 167 | version·=·"*" | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | dnf·install·aide | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 180 | if·rpm·--quiet·-q·kernel;·then | ||
| 181 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 182 | ····dnf·install·-y·"aide" | ||
| 183 | fi | ||
| 184 | else | ||
| 185 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 186 | fi | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 192 | package·--add=aide | 191 | package·--add=aide |
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 197 | include·install_aide | ||
| 198 | 198 | class·install_aide·{ | |
| 199 | ··package·{·'aide': | ||
| 200 | ····ensure·=>·'installed', | ||
| 201 | ··} | ||
| 202 | } | ||
| 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 200 | Run·the·following·command·to·generate·a·new·database: | 204 | Run·the·following·command·to·generate·a·new·database: |
| 201 | $·sudo·/usr/sbin/aide·--init | 205 | $·sudo·/usr/sbin/aide·--init |
| 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 206 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 203 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 207 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 204 | To·initiate·a·manual·check,·run·the·following·command: | 208 | To·initiate·a·manual·check,·run·the·following·command: |
| 205 | $·sudo·/usr/sbin/aide·--check | 209 | $·sudo·/usr/sbin/aide·--check |
| Offset 226, 14 lines modified | Offset 226, 28 lines modified | ||
| 226 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 226 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 227 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 227 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 228 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 228 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 229 | ·············_\x8c_\x8i_\x8s············6.1.1 | 229 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 230 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 230 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 231 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 231 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 234 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 235 | if·rpm·--quiet·-q·kernel;·then | ||
| 236 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| Max diff block lines reached; 1309084/1314408 bytes (99.59%) of diff not shown. | |||
| Offset 15156, 285 lines modified | Offset 15156, 285 lines modified | ||
| 0003b330:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b330:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b340:·646d·3834·3538·2220·7461·6269·6e64·6578··dm8458"·tabindex | 0003b340:·646d·3834·3538·2220·7461·6269·6e64·6578··dm8458"·tabindex | ||
| 0003b350:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b350:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b360:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b360:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b370:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b370:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b380:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b380:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b390:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b390:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b3a0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b3b0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b3c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b3d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b3e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b3f0:·3834·3538·223e·3c74·6162·6c65·2063·6c61··8458"><table·cla | |||
| 0003b400:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b410:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b420:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b430:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b440:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b450:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b460:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b470:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b480:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b490:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b4a0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b4b0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b4c0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b4d0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b4e0:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b4f0:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b500:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b510:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b520:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b530:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b540:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b550:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b560:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b570:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b580:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b590:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b5a0:·743d·2223·6964·6d38·3435·3922·2074·6162··t="#idm8459"·tab | |||
| 0003b5b0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b5c0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b5d0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b5e0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b5f0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b600:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b610:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b620:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b630:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b640:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b650:·643d·2269·646d·3834·3539·223e·3c74·6162··d="idm8459"><tab | |||
| 0003b660:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b670:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b680:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b690:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b6a0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b6b0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b6c0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b6d0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b6e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b6f0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b700:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b710:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b720:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b730:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b740:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b750:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003b760:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003b770:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003b780:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003b790:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003b7a0:·2020·2d20·4343·452d·3930·3834·332d·340a····-·CCE-90843-4. | |||
| 0003b7b0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b7c0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b7d0:·5248·454c·2d30·392d·3635·3130·3130·0a20··RHEL-09-651010.· | |||
| 0003b7e0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b7f0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b800:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b810:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b820:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b830:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b840:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b850:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b860:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b870:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b880:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b890:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003b8a0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b8b0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b8c0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b8d0:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b8e0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b8f0:·7768·656e·3a20·2722·6b65·726e·656c·2220··when:·'"kernel"· | |||
| 0003b900:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0003b910:·2e70·6163·6b61·6765·7327·0a20·2074·6167··.packages'.··tag | |||
| 0003b920:·733a·0a20·202d·2043·4345·2d39·3038·3433··s:.··-·CCE-90843 | |||
| 0003b930:·2d34·0a20·202d·2043·4a49·532d·352e·3130··-4.··-·CJIS-5.10 | |||
| 0003b940:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b950:·4947·2d52·4845·4c2d·3039·2d36·3531·3031··IG-RHEL-09-65101 | |||
| 0003b960:·300a·2020·2d20·4e49·5354·2d38·3030·2d35··0.··-·NIST-800-5 | |||
| 0003b970:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b980:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b990:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b9a0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b9b0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b9c0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b9d0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b9e0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b9f0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003ba00:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003ba10:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003ba20:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003ba30:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003ba40:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003ba50:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003ba60:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003ba70:·6574·3d22·2369·646d·3834·3630·2220·7461··et="#idm8460"·ta | |||
| 0003ba80:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003ba90:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003baa0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003bab0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003bac0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003bad0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003bae0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003baf0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003bb00:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003bb10:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| Max diff block lines reached; 25950981/25988959 bytes (99.85%) of diff not shown. | |||
| Offset 15843, 254 lines modified | Offset 15843, 254 lines modified | ||
| 0003de20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003de20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003de30:·6964·6d39·3136·3922·2074·6162·696e·6465··idm9169"·tabinde | 0003de30:·6964·6d39·3136·3922·2074·6162·696e·6465··idm9169"·tabinde | ||
| 0003de40:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003de40:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003de50:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003de50:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003de60:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003de60:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003de70:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003de70:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003de80:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003de80:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003de90:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003dea0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003deb0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003dec0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003ded0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003dee0:·6d39·3136·3922·3e3c·7461·626c·6520·636c··m9169"><table·cl | |||
| 0003def0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003df00:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003df10:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003df20:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003df30:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003df40:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003df50:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003df60:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003df70:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003df80:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003df90:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003dfa0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003dfb0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003dfc0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003dfd0:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003dfe0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f63··nclude·install_c | |||
| 0003dff0:·7279·7074·6f2d·706f·6c69·6369·6573·0a0a··rypto-policies.. | |||
| 0003e000:·636c·6173·7320·696e·7374·616c·6c5f·6372··class·install_cr | |||
| 0003e010:·7970·746f·2d70·6f6c·6963·6965·7320·7b0a··ypto-policies·{. | |||
| 0003e020:·2020·7061·636b·6167·6520·7b20·2763·7279····package·{·'cry | |||
| 0003e030:·7074·6f2d·706f·6c69·6369·6573·273a·0a20··pto-policies':.· | |||
| 0003e040:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003e050:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003e060:·0a7d·0a3c·2f63·6f64·653e·3c2f·7072·653e··.}.</code></pre> | |||
| 0003e070:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003e080:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003e090:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003e0a0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003e0b0:·6765·743d·2223·6964·6d39·3137·3022·2074··get="#idm9170"·t | |||
| 0003e0c0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003e0d0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003e0e0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003e0f0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003e100:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003e110:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003e120:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003e130:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003e140:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003e150:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003e160:·2069·643d·2269·646d·3931·3730·223e·3c74···id="idm9170"><t | |||
| 0003e170:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003e180:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003e190:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003e1a0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003e1b0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003e1c0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003e1d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003e1e0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003e1f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003e200:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003e210:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003e220:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003e230:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003e240:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003e250:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003e260:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003e270:·7375·7265·2063·7279·7074·6f2d·706f·6c69··sure·crypto-poli | |||
| 0003e280:·6369·6573·2069·7320·696e·7374·616c·6c65··cies·is·installe | |||
| 0003e290:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003e2a0:·206e·616d·653a·2063·7279·7074·6f2d·706f···name:·crypto-po | |||
| 0003e2b0:·6c69·6369·6573·0a20·2020·2073·7461·7465··licies.····state | |||
| 0003e2c0:·3a20·7072·6573·656e·740a·2020·7461·6773··:·present.··tags | |||
| 0003e2d0:·3a0a·2020·2d20·4343·452d·3833·3434·322d··:.··-·CCE-83442- | |||
| 0003e2e0:·340a·2020·2d20·4449·5341·2d53·5449·472d··4.··-·DISA-STIG- | |||
| 0003e2f0:·5248·454c·2d30·392d·3231·3531·3030·0a20··RHEL-09-215100.· | |||
| 0003e300:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003e310:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003e320:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003e330:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003e340:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003e350:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003e360:·640a·2020·2d20·7061·636b·6167·655f·6372··d.··-·package_cr | |||
| 0003e370:·7970·746f·2d70·6f6c·6963·6965·735f·696e··ypto-policies_in | |||
| 0003e380:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003e390:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003e3a0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003e3b0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003e3c0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003e3d0:·612d·7461·7267·6574·3d22·2369·646d·3931··a-target="#idm91 | |||
| 0003e3e0:·3731·2220·7461·6269·6e64·6578·3d22·3022··71"·tabindex="0" | |||
| 0003e3f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003e400:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003e410:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003e420:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003e430:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003e440:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003e450:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003e460:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003e470:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003e480:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003e490:·6964·3d22·6964·6d39·3137·3122·3e3c·7072··id="idm9171"><pr | |||
| 0003e4a0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003e4b0:·6765·735d·5d0a·6e61·6d65·203d·2022·6372··ges]].name·=·"cr | |||
| 0003e4c0:·7970·746f·2d70·6f6c·6963·6965·7322·0a76··ypto-policies".v | |||
| 0003e4d0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003e4e0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003e4f0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003e500:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003e510:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003e520:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003e530:·6964·6d39·3137·3222·2074·6162·696e·6465··idm9172"·tabinde | |||
| 0003e540:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003e550:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003e560:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003e570:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003e580:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003 | 0003de90:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | ||
| 0003 | 0003dea0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003 | 0003deb0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003 | 0003dec0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003 | 0003ded0:·2220·6964·3d22·6964·6d39·3136·3922·3e3c··"·id="idm9169">< | ||
| 0003 | 0003dee0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003 | 0003def0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003 | 0003df00:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| Max diff block lines reached; 6856872/6890572 bytes (99.51%) of diff not shown. | |||
| Offset 158, 79 lines modified | Offset 158, 79 lines modified | ||
| 158 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 158 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 159 | Identifiers:·CCE-83442-4 | 159 | Identifiers:·CCE-83442-4 |
| 160 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 | 160 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 |
| 161 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 161 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 162 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 162 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 163 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-215100 | 163 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-215100 |
| 164 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule | 164 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | include·install_crypto-policies | ||
| 171 | 170 | dnf·install·crypto-policies | |
| 172 | ··package·{·'crypto-policies': | ||
| 173 | ····ensure·=>·'installed', | ||
| 174 | ··} | ||
| 175 | } | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | package·install·crypto-policies | ||
| 181 | -·name:·Ensure·crypto-policies·is·installed | ||
| 182 | ··package: | ||
| 183 | ····name:·crypto-policies | ||
| 184 | ····state:·present | ||
| 185 | ··tags: | ||
| 186 | ··-·CCE-83442-4 | ||
| 187 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 188 | ··-·enable_strategy | ||
| 189 | ··-·low_complexity | ||
| 190 | ··-·low_disruption | ||
| 191 | ··-·medium_severity | ||
| 192 | ··-·no_reboot_needed | ||
| 193 | ··-·package_crypto-policies_installed | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 195 | [[packages]] | 178 | [[packages]] |
| 196 | name·=·"crypto-policies" | 179 | name·=·"crypto-policies" |
| 197 | version·=·"*" | 180 | version·=·"*" |
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 203 | dnf·install·crypto-policies | ||
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 209 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 186 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| 210 | ····dnf·install·-y·"crypto-policies" | 187 | ····dnf·install·-y·"crypto-policies" |
| 211 | fi | 188 | fi |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | -·name:·Ensure·crypto-policies·is·installed | ||
| 195 | ··package: | ||
| 196 | ····name:·crypto-policies | ||
| 197 | ····state:·present | ||
| 198 | ··tags: | ||
| 199 | ··-·CCE-83442-4 | ||
| 200 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 201 | ··-·enable_strategy | ||
| 202 | ··-·low_complexity | ||
| 203 | ··-·low_disruption | ||
| 204 | ··-·medium_severity | ||
| 205 | ··-·no_reboot_needed | ||
| 206 | ··-·package_crypto-policies_installed | ||
| 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 217 | package·--add=crypto-policies | 212 | package·--add=crypto-policies |
| 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 218 | include·install_crypto-policies | ||
| 219 | class·install_crypto-policies·{ | ||
| 223 | package· | 220 | ··package·{·'crypto-policies': |
| 221 | ····ensure·=>·'installed', | ||
| 222 | ··} | ||
| 223 | } | ||
| 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 225 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS·policy,·run·the·following·command: | 225 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS·policy,·run·the·following·command: |
| 226 | $·sudo·update-crypto-policies·--set·FIPS | 226 | $·sudo·update-crypto-policies·--set·FIPS |
| 227 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 227 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 228 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 228 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 229 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 229 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 230 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 230 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 245, 14 lines modified | Offset 245, 58 lines modified | ||
| 245 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 245 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 246 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 246 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 247 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 247 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 248 | ·············_\x8c_\x8i_\x8s······1.6.1 | 248 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 249 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 249 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 250 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 | 250 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 |
| 251 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 251 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 252 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 253 | var_system_crypto_policy='FIPS' | ||
| 254 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 255 | rc=$? | ||
| 256 | if·test·"$rc"·=·127;·then | ||
| 257 | » echo·"$stderr_of_call"·>&2 | ||
| 258 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 259 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 260 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 261 | » false··#·end·with·an·error·code | ||
| Max diff block lines reached; 907298/915377 bytes (99.12%) of diff not shown. | |||
| Offset 15183, 414 lines modified | Offset 15183, 414 lines modified | ||
| 0003b4e0:·7461·7267·6574·3d22·2369·646d·3831·3135··target="#idm8115 | 0003b4e0:·7461·7267·6574·3d22·2369·646d·3831·3135··target="#idm8115 | ||
| 0003b4f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b4f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b500:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b500:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b510:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b510:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b520:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b520:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b530:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b530:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b540:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b540:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b550:·696f·6e20· | 0003b550:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | ||
| 0003b560:· | 0003b560:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b570:· | 0003b570:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b580:· | 0003b580:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b590:· | 0003b590:·2069·643d·2269·646d·3831·3135·223e·3c70···id="idm8115"><p | ||
| 0003b5a0:· | 0003b5a0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0003b5b0:·6 | 0003b5b0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | ||
| 0003b5c0:·6 | 0003b5c0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | ||
| 0003b5d0:· | 0003b5d0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | ||
| 0003b5e0:·6 | 0003b5e0:·6620·2120·2820·7b20·7270·6d20·2d2d·7175··f·!·(·{·rpm·--qu | ||
| 0003b5f0:·6 | 0003b5f0:·6965·7420·2d71·206b·6572·6e65·6c20·3b7d··iet·-q·kernel·;} | ||
| 0003b600:·6 | 0003b600:·2026·616d·703b·2661·6d70·3b20·7b20·7270···&&·{·rp | ||
| 0003b610:· | 0003b610:·6d20·2d2d·7175·6965·7420·2d71·2072·706d··m·--quiet·-q·rpm | ||
| 0003b620:· | 0003b620:·2d6f·7374·7265·6520·3b7d·2026·616d·703b··-ostree·;}·& | ||
| 0003b630:·2 | 0003b630:·2661·6d70·3b20·7b20·7270·6d20·2d2d·7175··&·{·rpm·--qu | ||
| 0003b640:· | 0003b640:·6965·7420·2d71·2062·6f6f·7463·203b·7d20··iet·-q·bootc·;}· | ||
| 0003b650:· | 0003b650:·2661·6d70·3b26·616d·703b·207b·2021·2072··&&·{·!·r | ||
| 0003b660:· | 0003b660:·706d·202d·2d71·7569·6574·202d·7120·6f70··pm·--quiet·-q·op | ||
| 0003b670:· | 0003b670:·656e·7368·6966·742d·6b75·6265·6c65·7420··enshift-kubelet· | ||
| 0003b680:· | 0003b680:·3b7d·2029·3b20·7468·656e·0a0a·2320·4669··;}·);·then..#·Fi | ||
| 0003b690:·6 | 0003b690:·6e64·2077·6869·6368·2066·696c·6573·2068··nd·which·files·h | ||
| 0003b6a0:· | 0003b6a0:·6176·6520·696e·636f·7272·6563·7420·6861··ave·incorrect·ha | ||
| 0003b6b0:· | 0003b6b0:·7368·2028·6e6f·7420·696e·202f·6574·632c··sh·(not·in·/etc, | ||
| 0003b6c0:·20 | 0003b6c0:·2062·6563·6175·7365·206f·6620·7468·6520···because·of·the· | ||
| 0003b6d0:· | 0003b6d0:·7379·7374·656d·2072·656c·6174·6564·2063··system·related·c | ||
| 0003b6e0:· | 0003b6e0:·6f6e·6669·6720·6669·6c65·7329·2061·6e64··onfig·files)·and | ||
| 0003b6f0:· | 0003b6f0:·2074·6865·6e20·6765·7420·6669·6c65·7320···then·get·files· | ||
| 0003b700:· | 0003b700:·6e61·6d65·730a·6669·6c65·735f·7769·7468··names.files_with | ||
| 0003b710:· | 0003b710:·5f69·6e63·6f72·7265·6374·5f68·6173·683d··_incorrect_hash= | ||
| 0003b720:· | 0003b720:·2224·2872·706d·202d·5661·202d·2d6e·6f63··"$(rpm·-Va·--noc | ||
| 0003b730:· | 0003b730:·6f6e·6669·6720·7c20·6772·6570·202d·4520··onfig·|·grep·-E· | ||
| 0003b740:· | 0003b740:·275e·2e2e·3527·207c·2061·776b·2027·7b70··'^..5'·|·awk·'{p | ||
| 0003b750:· | 0003b750:·7269·6e74·2024·4e46·7d27·2029·220a·0a69··rint·$NF}'·)"..i | ||
| 0003b760:· | 0003b760:·6620·5b20·2d6e·2022·2466·696c·6573·5f77··f·[·-n·"$files_w | ||
| 0003b770:· | 0003b770:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b780:· | 0003b780:·7368·2220·5d3b·2074·6865·6e0a·2020·2020··sh"·];·then.···· | ||
| 0003b790:· | 0003b790:·2320·4672·6f6d·2066·696c·6573·206e·616d··#·From·files·nam | ||
| 0003b7a0:· | 0003b7a0:·6573·2067·6574·2070·6163·6b61·6765·206e··es·get·package·n | ||
| 0003b7b0:· | 0003b7b0:·616d·6573·2061·6e64·2063·6861·6e67·6520··ames·and·change· | ||
| 0003b7c0:· | 0003b7c0:·6e65·776c·696e·6520·746f·2073·7061·6365··newline·to·space | ||
| 0003b7d0:· | 0003b7d0:·2c20·6265·6361·7573·6520·7270·6d20·7772··,·because·rpm·wr | ||
| 0003b7e0:· | 0003b7e0:·6974·6573·2065·6163·6820·7061·636b·6167··ites·each·packag | ||
| 0003b7f0:· | 0003b7f0:·6520·746f·206e·6577·206c·696e·650a·2020··e·to·new·line.·· | ||
| 0003b800:· | 0003b800:·2020·7061·636b·6167·6573·5f74·6f5f·7265····packages_to_re | ||
| 0003b810:·6 | 0003b810:·696e·7374·616c·6c3d·2224·2872·706d·202d··install="$(rpm·- | ||
| 0003b820:·7 | 0003b820:·7166·2024·6669·6c65·735f·7769·7468·5f69··qf·$files_with_i | ||
| 0003b830:· | 0003b830:·6e63·6f72·7265·6374·5f68·6173·6820·7c20··ncorrect_hash·|· | ||
| 0003b840:· | 0003b840:·7472·2027·5c6e·2720·2720·2729·220a·0a20··tr·'\n'·'·')"..· | ||
| 0003b850:· | 0003b850:·2020·200a·2020·2020·646e·6620·7265·696e·····.····dnf·rein | ||
| 0003b860:· | 0003b860:·7374·616c·6c20·2d79·2024·7061·636b·6167··stall·-y·$packag | ||
| 0003b870:· | 0003b870:·6573·5f74·6f5f·7265·696e·7374·616c·6c0a··es_to_reinstall. | ||
| 0003b880:· | 0003b880:·2020·2020·0a66·690a·0a65·6c73·650a·2020······.fi..else.·· | ||
| 0003b890:· | 0003b890:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | ||
| 0003b8a0:·6 | 0003b8a0:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | ||
| 0003b8b0:·3 | 0003b8b0:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | ||
| 0003b8c0:· | 0003b8c0:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | ||
| 0003b8d0:·6 | 0003b8d0:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | ||
| 0003b8e0:· | 0003b8e0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | ||
| 0003b8f0:· | 0003b8f0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | ||
| 0003b900:· | 0003b900:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | ||
| 0003b910:· | 0003b910:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | ||
| 0003b920:· | 0003b920:·2d74·6172·6765·743d·2223·6964·6d38·3131··-target="#idm811 | ||
| 0003b930:· | 0003b930:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | ||
| 0003b940:· | 0003b940:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b950:·6 | 0003b950:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b960:· | 0003b960:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b970:·61 | 0003b970:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b980:·66 | 0003b980:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b990:· | 0003b990:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003b9a0:· | 0003b9a0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003b9b0:· | 0003b9b0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b9c0:· | 0003b9c0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b9d0:· | 0003b9d0:·7073·6522·2069·643d·2269·646d·3831·3136··pse"·id="idm8116 | ||
| 0003b9e0:· | 0003b9e0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003b9f0:· | 0003b9f0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003ba00:· | 0003ba00:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003ba10:· | 0003ba10:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003ba20:· | 0003ba20:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003ba30:· | 0003ba30:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003ba40:· | 0003ba40:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | ||
| 0003ba50:· | 0003ba50:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003ba60:· | 0003ba60:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | ||
| 0003ba70:· | 0003ba70:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003ba80:· | 0003ba80:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003ba90:·43 | 0003ba90:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003baa0:· | 0003baa0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003bab0:· | 0003bab0:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003bac0:· | 0003bac0:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003bad0:· | 0003bad0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003bae0:·2 | 0003bae0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | ||
| 0003baf0:· | 0003baf0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | ||
| 0003bb00:· | 0003bb00:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | ||
| 0003bb10:· | 0003bb10:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | ||
| 0003bb20:· | 0003bb20:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | ||
| 0003bb30:· | 0003bb30:·4343·452d·3930·3834·312d·380a·2020·2d20··CCE-90841-8.··-· | ||
| 0003bb40:· | 0003bb40:·434a·4953·2d35·2e31·302e·342e·310a·2020··CJIS-5.10.4.1.·· | ||
| 0003bb50:· | 0003bb50:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003bb60:· | 0003bb60:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003bb70:· | 0003bb70:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003bb80:· | 0003bb80:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003bb90:· | 0003bb90:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003bba0:· | 0003bba0:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003bbb0:· | 0003bbb0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003bbc0:· | 0003bbc0:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003bbd0:·2 | 0003bbd0:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003bbe0:· | 0003bbe0:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003bbf0:· | 0003bbf0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bc00:·2d | 0003bc00:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003bc10:· | 0003bc10:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003bc20:·2 | 0003bc20:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003bc30:· | 0003bc30:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003bc40:· | 0003bc40:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003bc50:· | 0003bc50:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003bc60:·6 | 0003bc60:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003bc70:· | 0003bc70:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003bc80:·6 | 0003bc80:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003bc90:· | 0003bc90:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003bca0:·6 | 0003bca0:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| 0003bcb0:· | 0003bcb0:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | ||
| Max diff block lines reached; 6847882/6903662 bytes (99.19%) of diff not shown. | |||
| Offset 104, 14 lines modified | Offset 104, 33 lines modified | ||
| 104 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 104 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 105 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 105 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 112 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 113 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 114 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 115 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 116 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 117 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 118 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 119 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 120 | fi | ||
| 121 | else | ||
| 122 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 123 | fi | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 116 | -·name:·Gather·the·package·facts | 129 | -·name:·Gather·the·package·facts |
| 117 | ··package_facts: | 130 | ··package_facts: |
| Offset 284, 33 lines modified | Offset 303, 14 lines modified | ||
| 284 | ··-·PCI-DSSv4-11.5.2 | 303 | ··-·PCI-DSSv4-11.5.2 |
| 285 | ··-·high_complexity | 304 | ··-·high_complexity |
| 286 | ··-·high_severity | 305 | ··-·high_severity |
| 287 | ··-·medium_disruption | 306 | ··-·medium_disruption |
| 288 | ··-·no_reboot_needed | 307 | ··-·no_reboot_needed |
| 289 | ··-·restrict_strategy | 308 | ··-·restrict_strategy |
| 290 | ··-·rpm_verify_hashes | 309 | ··-·rpm_verify_hashes |
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 292 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 293 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 294 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 295 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 296 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 297 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 298 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 299 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 300 | fi | ||
| 301 | else | ||
| 302 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 303 | fi | ||
| 304 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 310 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 305 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 311 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 306 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 312 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 307 | run·the·following·command·to·determine·which·package·owns·it: | 313 | run·the·following·command·to·determine·which·package·owns·it: |
| 308 | $·rpm·-qf·FILENAME | 314 | $·rpm·-qf·FILENAME |
| 309 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 315 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 310 | $·sudo·rpm·--restore·PACKAGENAME | 316 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 330, 14 lines modified | Offset 330, 46 lines modified | ||
| 330 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 330 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 331 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 331 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 332 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 332 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 333 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 333 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 334 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 334 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 335 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 335 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 336 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 336 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 342 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 343 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 344 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 345 | declare·-A·SETPERMS_RPM_DICT | ||
| 346 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 347 | #·is·expected·by·the·RPM·database | ||
| 348 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 349 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 350 | do | ||
| 351 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 352 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 353 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 354 | done | ||
| 355 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 356 | #·correct·values | ||
| 357 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 358 | do | ||
| 359 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 360 | done | ||
| 361 | else | ||
| 362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 363 | fi | ||
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 342 | -·name:·Gather·the·package·facts | 369 | -·name:·Gather·the·package·facts |
| 343 | ··package_facts: | 370 | ··package_facts: |
| Offset 449, 46 lines modified | Offset 481, 14 lines modified | ||
| 449 | ··-·PCI-DSSv4-11.5.2 | 481 | ··-·PCI-DSSv4-11.5.2 |
| 450 | ··-·high_complexity | 482 | ··-·high_complexity |
| 451 | ··-·high_severity | 483 | ··-·high_severity |
| 452 | ··-·medium_disruption | 484 | ··-·medium_disruption |
| 453 | ··-·no_reboot_needed | 485 | ··-·no_reboot_needed |
| 454 | ··-·restrict_strategy | 486 | ··-·restrict_strategy |
| 455 | ··-·rpm_verify_ownership | 487 | ··-·rpm_verify_ownership |
| 456 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 457 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 458 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 459 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 460 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 736625/744350 bytes (98.96%) of diff not shown. | |||
| Offset 15204, 414 lines modified | Offset 15204, 414 lines modified | ||
| 0003b630:·7461·7267·6574·3d22·2369·646d·3831·3135··target="#idm8115 | 0003b630:·7461·7267·6574·3d22·2369·646d·3831·3135··target="#idm8115 | ||
| 0003b640:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b640:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b650:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b650:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b660:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b660:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b670:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b670:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b680:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b680:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b690:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b690:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b6a0:·696f·6e20· | 0003b6a0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | ||
| 0003b6b0:· | 0003b6b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b6c0:· | 0003b6c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b6d0:· | 0003b6d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b6e0:· | 0003b6e0:·2069·643d·2269·646d·3831·3135·223e·3c70···id="idm8115"><p | ||
| 0003b6f0:· | 0003b6f0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0003b700:·6 | 0003b700:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | ||
| 0003b710:·6 | 0003b710:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | ||
| 0003b720:· | 0003b720:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | ||
| 0003b730:·6 | 0003b730:·6620·2120·2820·7b20·7270·6d20·2d2d·7175··f·!·(·{·rpm·--qu | ||
| 0003b740:·6 | 0003b740:·6965·7420·2d71·206b·6572·6e65·6c20·3b7d··iet·-q·kernel·;} | ||
| 0003b750:·6 | 0003b750:·2026·616d·703b·2661·6d70·3b20·7b20·7270···&&·{·rp | ||
| 0003b760:· | 0003b760:·6d20·2d2d·7175·6965·7420·2d71·2072·706d··m·--quiet·-q·rpm | ||
| 0003b770:· | 0003b770:·2d6f·7374·7265·6520·3b7d·2026·616d·703b··-ostree·;}·& | ||
| 0003b780:·2 | 0003b780:·2661·6d70·3b20·7b20·7270·6d20·2d2d·7175··&·{·rpm·--qu | ||
| 0003b790:· | 0003b790:·6965·7420·2d71·2062·6f6f·7463·203b·7d20··iet·-q·bootc·;}· | ||
| 0003b7a0:· | 0003b7a0:·2661·6d70·3b26·616d·703b·207b·2021·2072··&&·{·!·r | ||
| 0003b7b0:· | 0003b7b0:·706d·202d·2d71·7569·6574·202d·7120·6f70··pm·--quiet·-q·op | ||
| 0003b7c0:· | 0003b7c0:·656e·7368·6966·742d·6b75·6265·6c65·7420··enshift-kubelet· | ||
| 0003b7d0:· | 0003b7d0:·3b7d·2029·3b20·7468·656e·0a0a·2320·4669··;}·);·then..#·Fi | ||
| 0003b7e0:·6 | 0003b7e0:·6e64·2077·6869·6368·2066·696c·6573·2068··nd·which·files·h | ||
| 0003b7f0:· | 0003b7f0:·6176·6520·696e·636f·7272·6563·7420·6861··ave·incorrect·ha | ||
| 0003b800:· | 0003b800:·7368·2028·6e6f·7420·696e·202f·6574·632c··sh·(not·in·/etc, | ||
| 0003b810:·20 | 0003b810:·2062·6563·6175·7365·206f·6620·7468·6520···because·of·the· | ||
| 0003b820:· | 0003b820:·7379·7374·656d·2072·656c·6174·6564·2063··system·related·c | ||
| 0003b830:· | 0003b830:·6f6e·6669·6720·6669·6c65·7329·2061·6e64··onfig·files)·and | ||
| 0003b840:· | 0003b840:·2074·6865·6e20·6765·7420·6669·6c65·7320···then·get·files· | ||
| 0003b850:· | 0003b850:·6e61·6d65·730a·6669·6c65·735f·7769·7468··names.files_with | ||
| 0003b860:· | 0003b860:·5f69·6e63·6f72·7265·6374·5f68·6173·683d··_incorrect_hash= | ||
| 0003b870:· | 0003b870:·2224·2872·706d·202d·5661·202d·2d6e·6f63··"$(rpm·-Va·--noc | ||
| 0003b880:· | 0003b880:·6f6e·6669·6720·7c20·6772·6570·202d·4520··onfig·|·grep·-E· | ||
| 0003b890:· | 0003b890:·275e·2e2e·3527·207c·2061·776b·2027·7b70··'^..5'·|·awk·'{p | ||
| 0003b8a0:· | 0003b8a0:·7269·6e74·2024·4e46·7d27·2029·220a·0a69··rint·$NF}'·)"..i | ||
| 0003b8b0:· | 0003b8b0:·6620·5b20·2d6e·2022·2466·696c·6573·5f77··f·[·-n·"$files_w | ||
| 0003b8c0:· | 0003b8c0:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b8d0:· | 0003b8d0:·7368·2220·5d3b·2074·6865·6e0a·2020·2020··sh"·];·then.···· | ||
| 0003b8e0:· | 0003b8e0:·2320·4672·6f6d·2066·696c·6573·206e·616d··#·From·files·nam | ||
| 0003b8f0:· | 0003b8f0:·6573·2067·6574·2070·6163·6b61·6765·206e··es·get·package·n | ||
| 0003b900:· | 0003b900:·616d·6573·2061·6e64·2063·6861·6e67·6520··ames·and·change· | ||
| 0003b910:· | 0003b910:·6e65·776c·696e·6520·746f·2073·7061·6365··newline·to·space | ||
| 0003b920:· | 0003b920:·2c20·6265·6361·7573·6520·7270·6d20·7772··,·because·rpm·wr | ||
| 0003b930:· | 0003b930:·6974·6573·2065·6163·6820·7061·636b·6167··ites·each·packag | ||
| 0003b940:· | 0003b940:·6520·746f·206e·6577·206c·696e·650a·2020··e·to·new·line.·· | ||
| 0003b950:· | 0003b950:·2020·7061·636b·6167·6573·5f74·6f5f·7265····packages_to_re | ||
| 0003b960:·6 | 0003b960:·696e·7374·616c·6c3d·2224·2872·706d·202d··install="$(rpm·- | ||
| 0003b970:·7 | 0003b970:·7166·2024·6669·6c65·735f·7769·7468·5f69··qf·$files_with_i | ||
| 0003b980:· | 0003b980:·6e63·6f72·7265·6374·5f68·6173·6820·7c20··ncorrect_hash·|· | ||
| 0003b990:· | 0003b990:·7472·2027·5c6e·2720·2720·2729·220a·0a20··tr·'\n'·'·')"..· | ||
| 0003b9a0:· | 0003b9a0:·2020·200a·2020·2020·646e·6620·7265·696e·····.····dnf·rein | ||
| 0003b9b0:· | 0003b9b0:·7374·616c·6c20·2d79·2024·7061·636b·6167··stall·-y·$packag | ||
| 0003b9c0:· | 0003b9c0:·6573·5f74·6f5f·7265·696e·7374·616c·6c0a··es_to_reinstall. | ||
| 0003b9d0:· | 0003b9d0:·2020·2020·0a66·690a·0a65·6c73·650a·2020······.fi..else.·· | ||
| 0003b9e0:· | 0003b9e0:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | ||
| 0003b9f0:·6 | 0003b9f0:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | ||
| 0003ba00:·3 | 0003ba00:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | ||
| 0003ba10:· | 0003ba10:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | ||
| 0003ba20:·6 | 0003ba20:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | ||
| 0003ba30:· | 0003ba30:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | ||
| 0003ba40:· | 0003ba40:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | ||
| 0003ba50:· | 0003ba50:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | ||
| 0003ba60:· | 0003ba60:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | ||
| 0003ba70:· | 0003ba70:·2d74·6172·6765·743d·2223·6964·6d38·3131··-target="#idm811 | ||
| 0003ba80:· | 0003ba80:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | ||
| 0003ba90:· | 0003ba90:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003baa0:·6 | 0003baa0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003bab0:· | 0003bab0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003bac0:·61 | 0003bac0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003bad0:·66 | 0003bad0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003bae0:· | 0003bae0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003baf0:· | 0003baf0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003bb00:· | 0003bb00:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003bb10:· | 0003bb10:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003bb20:· | 0003bb20:·7073·6522·2069·643d·2269·646d·3831·3136··pse"·id="idm8116 | ||
| 0003bb30:· | 0003bb30:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003bb40:· | 0003bb40:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003bb50:· | 0003bb50:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003bb60:· | 0003bb60:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003bb70:· | 0003bb70:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003bb80:· | 0003bb80:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003bb90:· | 0003bb90:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | ||
| 0003bba0:· | 0003bba0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003bbb0:· | 0003bbb0:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | ||
| 0003bbc0:· | 0003bbc0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bbd0:· | 0003bbd0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003bbe0:·43 | 0003bbe0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003bbf0:· | 0003bbf0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003bc00:· | 0003bc00:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003bc10:· | 0003bc10:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003bc20:· | 0003bc20:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003bc30:·2 | 0003bc30:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | ||
| 0003bc40:· | 0003bc40:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | ||
| 0003bc50:· | 0003bc50:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | ||
| 0003bc60:· | 0003bc60:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | ||
| 0003bc70:· | 0003bc70:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | ||
| 0003bc80:· | 0003bc80:·4343·452d·3930·3834·312d·380a·2020·2d20··CCE-90841-8.··-· | ||
| 0003bc90:· | 0003bc90:·434a·4953·2d35·2e31·302e·342e·310a·2020··CJIS-5.10.4.1.·· | ||
| 0003bca0:· | 0003bca0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003bcb0:· | 0003bcb0:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003bcc0:· | 0003bcc0:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003bcd0:· | 0003bcd0:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003bce0:· | 0003bce0:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003bcf0:· | 0003bcf0:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003bd00:· | 0003bd00:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003bd10:· | 0003bd10:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003bd20:·2 | 0003bd20:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003bd30:· | 0003bd30:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003bd40:· | 0003bd40:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bd50:·2d | 0003bd50:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003bd60:· | 0003bd60:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003bd70:·2 | 0003bd70:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003bd80:· | 0003bd80:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003bd90:· | 0003bd90:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003bda0:· | 0003bda0:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003bdb0:·6 | 0003bdb0:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003bdc0:· | 0003bdc0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003bdd0:·6 | 0003bdd0:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003bde0:· | 0003bde0:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003bdf0:·6 | 0003bdf0:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| 0003be00:· | 0003be00:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | ||
| Max diff block lines reached; 17361275/17417055 bytes (99.68%) of diff not shown. | |||
| Offset 109, 14 lines modified | Offset 109, 33 lines modified | ||
| 109 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 109 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 110 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 110 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 111 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 111 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 112 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 112 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 117 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 118 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 119 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 120 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 121 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 122 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 123 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 124 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 125 | fi | ||
| 126 | else | ||
| 127 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 128 | fi | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 121 | -·name:·Gather·the·package·facts | 134 | -·name:·Gather·the·package·facts |
| 122 | ··package_facts: | 135 | ··package_facts: |
| Offset 289, 33 lines modified | Offset 308, 14 lines modified | ||
| 289 | ··-·PCI-DSSv4-11.5.2 | 308 | ··-·PCI-DSSv4-11.5.2 |
| 290 | ··-·high_complexity | 309 | ··-·high_complexity |
| 291 | ··-·high_severity | 310 | ··-·high_severity |
| 292 | ··-·medium_disruption | 311 | ··-·medium_disruption |
| 293 | ··-·no_reboot_needed | 312 | ··-·no_reboot_needed |
| 294 | ··-·restrict_strategy | 313 | ··-·restrict_strategy |
| 295 | ··-·rpm_verify_hashes | 314 | ··-·rpm_verify_hashes |
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 297 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 298 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 299 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 300 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 301 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 302 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 303 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 304 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 305 | fi | ||
| 306 | else | ||
| 307 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 308 | fi | ||
| 309 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 315 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 310 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 316 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 311 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 317 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 312 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 318 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 313 | $·rpm·-qf·FILENAME | 319 | $·rpm·-qf·FILENAME |
| 314 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 320 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 337, 14 lines modified | Offset 337, 50 lines modified | ||
| 337 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 337 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 338 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 338 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 339 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 339 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 340 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 340 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 341 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 341 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 342 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 342 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 343 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 343 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 349 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 350 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 351 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 352 | declare·-A·SETPERMS_RPM_DICT | ||
| 353 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 354 | #·is·expected·by·the·RPM·database | ||
| 355 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 356 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 357 | do | ||
| 358 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 359 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 360 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 361 | ········do | ||
| 362 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 363 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 364 | ········done | ||
| 365 | done | ||
| 366 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 367 | #·correct·values | ||
| 368 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 369 | do | ||
| 370 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 371 | done | ||
| 372 | else | ||
| 373 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 374 | fi | ||
| 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 375 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 376 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 377 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 378 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 379 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 349 | -·name:·Gather·the·package·facts | 380 | -·name:·Gather·the·package·facts |
| 350 | ··package_facts: | 381 | ··package_facts: |
| Offset 460, 50 lines modified | Offset 496, 14 lines modified | ||
| 460 | ··-·PCI-DSSv4-11.5.2 | 496 | ··-·PCI-DSSv4-11.5.2 |
| 461 | ··-·high_complexity | 497 | ··-·high_complexity |
| 462 | ··-·high_severity | 498 | ··-·high_severity |
| 463 | ··-·medium_disruption | 499 | ··-·medium_disruption |
| 464 | ··-·no_reboot_needed | 500 | ··-·no_reboot_needed |
| 465 | ··-·restrict_strategy | 501 | ··-·restrict_strategy |
| 466 | ··-·rpm_verify_permissions | 502 | ··-·rpm_verify_permissions |
| 467 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1286514/1294612 bytes (99.37%) of diff not shown. | |||
| Offset 15217, 414 lines modified | Offset 15217, 414 lines modified | ||
| 0003b700:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b700:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b710:·6d38·3131·3522·2074·6162·696e·6465·783d··m8115"·tabindex= | 0003b710:·6d38·3131·3522·2074·6162·696e·6465·783d··m8115"·tabindex= | ||
| 0003b720:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b720:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b730:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b730:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b740:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b740:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b750:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b750:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b760:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b760:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b770:·6564·6961·7469·6f6e·20 | 0003b770:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 0003b780:· | 0003b780:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 0003b790:·3 | 0003b790:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b7a0:· | 0003b7a0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b7b0:·6 | 0003b7b0:·6170·7365·2220·6964·3d22·6964·6d38·3131··apse"·id="idm811 | ||
| 0003b7c0:·3 | 0003b7c0:·3522·3e3c·7072·653e·3c63·6f64·653e·2320··5"><pre><code>#· | ||
| 0003b7d0:· | 0003b7d0:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 0003b7e0:·7 | 0003b7e0:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 0003b7f0:· | 0003b7f0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 0003b800:· | 0003b800:·726d·730a·6966·2021·2028·207b·2072·706d··rms.if·!·(·{·rpm | ||
| 0003b810:· | 0003b810:·202d·2d71·7569·6574·202d·7120·6b65·726e···--quiet·-q·kern | ||
| 0003b820:· | 0003b820:·656c·203b·7d20·2661·6d70·3b26·616d·703b··el·;}·&& | ||
| 0003b830:· | 0003b830:·207b·2072·706d·202d·2d71·7569·6574·202d···{·rpm·--quiet·- | ||
| 0003b840:·7 | 0003b840:·7120·7270·6d2d·6f73·7472·6565·203b·7d20··q·rpm-ostree·;}· | ||
| 0003b850:· | 0003b850:·2661·6d70·3b26·616d·703b·207b·2072·706d··&&·{·rpm | ||
| 0003b860:· | 0003b860:·202d·2d71·7569·6574·202d·7120·626f·6f74···--quiet·-q·boot | ||
| 0003b870:·6 | 0003b870:·6320·3b7d·2026·616d·703b·2661·6d70·3b20··c·;}·&&· | ||
| 0003b880:· | 0003b880:·7b20·2120·7270·6d20·2d2d·7175·6965·7420··{·!·rpm·--quiet· | ||
| 0003b890:· | 0003b890:·2d71·206f·7065·6e73·6869·6674·2d6b·7562··-q·openshift-kub | ||
| 0003b8a0:·65 | 0003b8a0:·656c·6574·203b·7d20·293b·2074·6865·6e0a··elet·;}·);·then. | ||
| 0003b8b0:· | 0003b8b0:·0a23·2046·696e·6420·7768·6963·6820·6669··.#·Find·which·fi | ||
| 0003b8c0:·6 | 0003b8c0:·6c65·7320·6861·7665·2069·6e63·6f72·7265··les·have·incorre | ||
| 0003b8d0:·6 | 0003b8d0:·6374·2068·6173·6820·286e·6f74·2069·6e20··ct·hash·(not·in· | ||
| 0003b8e0:· | 0003b8e0:·2f65·7463·2c20·6265·6361·7573·6520·6f66··/etc,·because·of | ||
| 0003b8f0:·6 | 0003b8f0:·2074·6865·2073·7973·7465·6d20·7265·6c61···the·system·rela | ||
| 0003b900:·7 | 0003b900:·7465·6420·636f·6e66·6967·2066·696c·6573··ted·config·files | ||
| 0003b910:·2 | 0003b910:·2920·616e·6420·7468·656e·2067·6574·2066··)·and·then·get·f | ||
| 0003b920:· | 0003b920:·696c·6573·206e·616d·6573·0a66·696c·6573··iles·names.files | ||
| 0003b930:· | 0003b930:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | ||
| 0003b940:· | 0003b940:·6861·7368·3d22·2428·7270·6d20·2d56·6120··hash="$(rpm·-Va· | ||
| 0003b950:· | 0003b950:·2d2d·6e6f·636f·6e66·6967·207c·2067·7265··--noconfig·|·gre | ||
| 0003b960:· | 0003b960:·7020·2d45·2027·5e2e·2e35·2720·7c20·6177··p·-E·'^..5'·|·aw | ||
| 0003b970:· | 0003b970:·6b20·277b·7072·696e·7420·244e·467d·2720··k·'{print·$NF}'· | ||
| 0003b980:·2 | 0003b980:·2922·0a0a·6966·205b·202d·6e20·2224·6669··)"..if·[·-n·"$fi | ||
| 0003b990:· | 0003b990:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003b9a0:· | 0003b9a0:·6374·5f68·6173·6822·205d·3b20·7468·656e··ct_hash"·];·then | ||
| 0003b9b0:· | 0003b9b0:·0a20·2020·2023·2046·726f·6d20·6669·6c65··.····#·From·file | ||
| 0003b9c0:· | 0003b9c0:·7320·6e61·6d65·7320·6765·7420·7061·636b··s·names·get·pack | ||
| 0003b9d0:· | 0003b9d0:·6167·6520·6e61·6d65·7320·616e·6420·6368··age·names·and·ch | ||
| 0003b9e0:· | 0003b9e0:·616e·6765·206e·6577·6c69·6e65·2074·6f20··ange·newline·to· | ||
| 0003b9f0:· | 0003b9f0:·7370·6163·652c·2062·6563·6175·7365·2072··space,·because·r | ||
| 0003ba00:· | 0003ba00:·706d·2077·7269·7465·7320·6561·6368·2070··pm·writes·each·p | ||
| 0003ba10:· | 0003ba10:·6163·6b61·6765·2074·6f20·6e65·7720·6c69··ackage·to·new·li | ||
| 0003ba20:·6 | 0003ba20:·6e65·0a20·2020·2070·6163·6b61·6765·735f··ne.····packages_ | ||
| 0003ba30:· | 0003ba30:·746f·5f72·6569·6e73·7461·6c6c·3d22·2428··to_reinstall="$( | ||
| 0003ba40:· | 0003ba40:·7270·6d20·2d71·6620·2466·696c·6573·5f77··rpm·-qf·$files_w | ||
| 0003ba50:·6 | 0003ba50:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003ba60:· | 0003ba60:·7368·207c·2074·7220·275c·6e27·2027·2027··sh·|·tr·'\n'·'·' | ||
| 0003ba70:· | 0003ba70:·2922·0a0a·2020·2020·0a20·2020·2064·6e66··)"..····.····dnf | ||
| 0003ba80:·2 | 0003ba80:·2072·6569·6e73·7461·6c6c·202d·7920·2470···reinstall·-y·$p | ||
| 0003ba90:·6 | 0003ba90:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | ||
| 0003baa0:·74 | 0003baa0:·7461·6c6c·0a20·2020·200a·6669·0a0a·656c··tall.····.fi..el | ||
| 0003bab0:· | 0003bab0:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | ||
| 0003bac0:· | 0003bac0:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | ||
| 0003bad0:· | 0003bad0:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | ||
| 0003bae0:·6 | 0003bae0:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | ||
| 0003baf0:· | 0003baf0:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | ||
| 0003bb00:·6 | 0003bb00:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0003bb10:·6 | 0003bb10:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0003bb20:· | 0003bb20:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0003bb30:· | 0003bb30:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0003bb40:· | 0003bb40:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003bb50:· | 0003bb50:·646d·3831·3136·2220·7461·6269·6e64·6578··dm8116"·tabindex | ||
| 0003bb60:· | 0003bb60:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003bb70:·6e | 0003bb70:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003bb80:· | 0003bb80:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003bb90:· | 0003bb90:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003bba0:·6 | 0003bba0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003bbb0:· | 0003bbb0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003bbc0:· | 0003bbc0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003bbd0:· | 0003bbd0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003bbe0:· | 0003bbe0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003bbf0:· | 0003bbf0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003bc00:· | 0003bc00:·6d38·3131·3622·3e3c·7461·626c·6520·636c··m8116"><table·cl | ||
| 0003bc10:·61 | 0003bc10:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003bc20:· | 0003bc20:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003bc30:· | 0003bc30:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003bc40:· | 0003bc40:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003bc50:·3 | 0003bc50:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003bc60:· | 0003bc60:·3e3c·7464·3e68·6967·683c·2f74·643e·3c2f··><td>high</td></ | ||
| 0003bc70:· | 0003bc70:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003bc80:· | 0003bc80:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | ||
| 0003bc90:· | 0003bc90:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003bca0:· | 0003bca0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003bcb0:· | 0003bcb0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003bcc0:· | 0003bcc0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003bcd0:· | 0003bcd0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003bce0:· | 0003bce0:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 0003bcf0:· | 0003bcf0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003bd00:· | 0003bd00:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | ||
| 0003bd10:· | 0003bd10:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | ||
| 0003bd20:· | 0003bd20:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | ||
| 0003bd30:·6 | 0003bd30:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | ||
| 0003bd40:· | 0003bd40:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | ||
| 0003bd50:· | 0003bd50:·0a20·202d·2043·4345·2d39·3038·3431·2d38··.··-·CCE-90841-8 | ||
| 0003bd60:· | 0003bd60:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | ||
| 0003bd70:· | 0003bd70:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003bd80:· | 0003bd80:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003bd90:· | 0003bd90:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003bda0:· | 0003bda0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bdb0:· | 0003bdb0:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | ||
| 0003bdc0:· | 0003bdc0:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | ||
| 0003bdd0:· | 0003bdd0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bde0:· | 0003bde0:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003bdf0:· | 0003bdf0:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003be00:· | 0003be00:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003be10:· | 0003be10:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003be20:· | 0003be20:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003be30:·2 | 0003be30:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003be40:· | 0003be40:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003be50:· | 0003be50:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003be60:· | 0003be60:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003be70:· | 0003be70:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| 0003be80:· | 0003be80:·2d20·6d65·6469·756d·5f64·6973·7275·7074··-·medium_disrupt | ||
| 0003be90:· | 0003be90:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | ||
| 0003bea0:· | 0003bea0:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | ||
| 0003beb0:·7 | 0003beb0:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | ||
| 0003bec0:· | 0003bec0:·202d·2072·706d·5f76·6572·6966·795f·6861···-·rpm_verify_ha | ||
| 0003bed0:· | 0003bed0:·7368·6573·0a0a·2d20·6e61·6d65·3a20·2753··shes..-·name:·'S | ||
| Max diff block lines reached; 10203659/10259439 bytes (99.46%) of diff not shown. | |||
| Offset 111, 14 lines modified | Offset 111, 33 lines modified | ||
| 111 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 111 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 112 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 112 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 113 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 113 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 114 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 114 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 121 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 122 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 123 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 124 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 125 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 126 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 127 | fi | ||
| 128 | else | ||
| 129 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 130 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·Gather·the·package·facts | 136 | -·name:·Gather·the·package·facts |
| 124 | ··package_facts: | 137 | ··package_facts: |
| Offset 291, 33 lines modified | Offset 310, 14 lines modified | ||
| 291 | ··-·PCI-DSSv4-11.5.2 | 310 | ··-·PCI-DSSv4-11.5.2 |
| 292 | ··-·high_complexity | 311 | ··-·high_complexity |
| 293 | ··-·high_severity | 312 | ··-·high_severity |
| 294 | ··-·medium_disruption | 313 | ··-·medium_disruption |
| 295 | ··-·no_reboot_needed | 314 | ··-·no_reboot_needed |
| 296 | ··-·restrict_strategy | 315 | ··-·restrict_strategy |
| 297 | ··-·rpm_verify_hashes | 316 | ··-·rpm_verify_hashes |
| 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 299 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 300 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 301 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 302 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 303 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 304 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 305 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 306 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 307 | fi | ||
| 308 | else | ||
| 309 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 310 | fi | ||
| 311 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 317 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 312 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 318 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 313 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 319 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 314 | run·the·following·command·to·determine·which·package·owns·it: | 320 | run·the·following·command·to·determine·which·package·owns·it: |
| 315 | $·rpm·-qf·FILENAME | 321 | $·rpm·-qf·FILENAME |
| 316 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 322 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 317 | $·sudo·rpm·--restore·PACKAGENAME | 323 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 337, 14 lines modified | Offset 337, 46 lines modified | ||
| 337 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 337 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 338 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 338 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 339 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 339 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 340 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 340 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 341 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 341 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 342 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 342 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 343 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 343 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 349 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 350 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 351 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 352 | declare·-A·SETPERMS_RPM_DICT | ||
| 353 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 354 | #·is·expected·by·the·RPM·database | ||
| 355 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 356 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 357 | do | ||
| 358 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 359 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 360 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 361 | done | ||
| 362 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 363 | #·correct·values | ||
| 364 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 365 | do | ||
| 366 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 367 | done | ||
| 368 | else | ||
| 369 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 370 | fi | ||
| 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 371 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 372 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 373 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 374 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 375 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 349 | -·name:·Gather·the·package·facts | 376 | -·name:·Gather·the·package·facts |
| 350 | ··package_facts: | 377 | ··package_facts: |
| Offset 456, 46 lines modified | Offset 488, 14 lines modified | ||
| 456 | ··-·PCI-DSSv4-11.5.2 | 488 | ··-·PCI-DSSv4-11.5.2 |
| 457 | ··-·high_complexity | 489 | ··-·high_complexity |
| 458 | ··-·high_severity | 490 | ··-·high_severity |
| 459 | ··-·medium_disruption | 491 | ··-·medium_disruption |
| 460 | ··-·no_reboot_needed | 492 | ··-·no_reboot_needed |
| 461 | ··-·restrict_strategy | 493 | ··-·restrict_strategy |
| 462 | ··-·rpm_verify_ownership | 494 | ··-·rpm_verify_ownership |
| 463 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 464 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 465 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 466 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 467 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1034154/1041879 bytes (99.26%) of diff not shown. | |||
| Offset 15811, 254 lines modified | Offset 15811, 254 lines modified | ||
| 0003dc20:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003dc20:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003dc30:·2369·646d·3931·3639·2220·7461·6269·6e64··#idm9169"·tabind | 0003dc30:·2369·646d·3931·3639·2220·7461·6269·6e64··#idm9169"·tabind | ||
| 0003dc40:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003dc40:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003dc50:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003dc50:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003dc60:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003dc60:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003dc70:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003dc70:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003dc80:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003dc80:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003dc90:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003dca0:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003dcb0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003dcc0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003dcd0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003dce0:·646d·3931·3639·223e·3c74·6162·6c65·2063··dm9169"><table·c | |||
| 0003dcf0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003dd00:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003dd10:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003dd20:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003dd30:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003dd40:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003dd50:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003dd60:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003dd70:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003dd80:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003dd90:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003dda0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003ddb0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003ddc0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003ddd0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003dde0:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003ddf0:·6372·7970·746f·2d70·6f6c·6963·6965·730a··crypto-policies. | |||
| 0003de00:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f63··.class·install_c | |||
| 0003de10:·7279·7074·6f2d·706f·6c69·6369·6573·207b··rypto-policies·{ | |||
| 0003de20:·0a20·2070·6163·6b61·6765·207b·2027·6372··.··package·{·'cr | |||
| 0003de30:·7970·746f·2d70·6f6c·6963·6965·7327·3a0a··ypto-policies':. | |||
| 0003de40:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003de50:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003de60:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003de70:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003de80:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003de90:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003dea0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003deb0:·7267·6574·3d22·2369·646d·3931·3730·2220··rget="#idm9170"· | |||
| 0003dec0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003ded0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003dee0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003def0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003df00:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003df10:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003df20:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003df30:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003df40:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003df50:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003df60:·2220·6964·3d22·6964·6d39·3137·3022·3e3c··"·id="idm9170">< | |||
| 0003df70:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003df80:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003df90:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003dfa0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003dfb0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003dfc0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003dfd0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003dfe0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003dff0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003e000:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003e010:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003e020:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003e030:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003e040:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003e050:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003e060:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003e070:·6e73·7572·6520·6372·7970·746f·2d70·6f6c··nsure·crypto-pol | |||
| 0003e080:·6963·6965·7320·6973·2069·6e73·7461·6c6c··icies·is·install | |||
| 0003e090:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003e0a0:·2020·6e61·6d65·3a20·6372·7970·746f·2d70····name:·crypto-p | |||
| 0003e0b0:·6f6c·6963·6965·730a·2020·2020·7374·6174··olicies.····stat | |||
| 0003e0c0:·653a·2070·7265·7365·6e74·0a20·2074·6167··e:·present.··tag | |||
| 0003e0d0:·733a·0a20·202d·2043·4345·2d38·3334·3432··s:.··-·CCE-83442 | |||
| 0003e0e0:·2d34·0a20·202d·2044·4953·412d·5354·4947··-4.··-·DISA-STIG | |||
| 0003e0f0:·2d52·4845·4c2d·3039·2d32·3135·3130·300a··-RHEL-09-215100. | |||
| 0003e100:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003e110:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003e120:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003e130:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003e140:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003e150:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003e160:·6564·0a20·202d·2070·6163·6b61·6765·5f63··ed.··-·package_c | |||
| 0003e170:·7279·7074·6f2d·706f·6c69·6369·6573·5f69··rypto-policies_i | |||
| 0003e180:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003e190:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003e1a0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003e1b0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003e1c0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003e1d0:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | |||
| 0003e1e0:·3137·3122·2074·6162·696e·6465·783d·2230··171"·tabindex="0 | |||
| 0003e1f0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003e200:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003e210:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003e220:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003e230:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003e240:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003e250:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003e260:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003e270:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003e280:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003e290:·2069·643d·2269·646d·3931·3731·223e·3c70···id="idm9171"><p | |||
| 0003e2a0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003e2b0:·6167·6573·5d5d·0a6e·616d·6520·3d20·2263··ages]].name·=·"c | |||
| 0003e2c0:·7279·7074·6f2d·706f·6c69·6369·6573·220a··rypto-policies". | |||
| 0003e2d0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003e2e0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003e2f0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003e300:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003e310:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003e320:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003e330:·2369·646d·3931·3732·2220·7461·6269·6e64··#idm9172"·tabind | |||
| 0003e340:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003e350:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003e360:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003e370:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003e380:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003 | 0003dc90:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | ||
| 0003 | 0003dca0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 0003 | 0003dcb0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003 | 0003dcc0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003 | 0003dcd0:·6522·2069·643d·2269·646d·3931·3639·223e··e"·id="idm9169"> | ||
| 0003 | 0003dce0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003 | 0003dcf0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003 | 0003dd00:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| Max diff block lines reached; 6855009/6888709 bytes (99.51%) of diff not shown. | |||
| Offset 149, 79 lines modified | Offset 149, 79 lines modified | ||
| 149 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 149 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 150 | Identifiers:·CCE-83442-4 | 150 | Identifiers:·CCE-83442-4 |
| 151 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 | 151 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 |
| 152 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 152 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 153 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 153 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 154 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-215100 | 154 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-215100 |
| 155 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule | 155 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | include·install_crypto-policies | ||
| 162 | 161 | dnf·install·crypto-policies | |
| 163 | ··package·{·'crypto-policies': | ||
| 164 | ····ensure·=>·'installed', | ||
| 165 | ··} | ||
| 166 | } | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 167 | package·install·crypto-policies | ||
| 172 | -·name:·Ensure·crypto-policies·is·installed | ||
| 173 | ··package: | ||
| 174 | ····name:·crypto-policies | ||
| 175 | ····state:·present | ||
| 176 | ··tags: | ||
| 177 | ··-·CCE-83442-4 | ||
| 178 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 179 | ··-·enable_strategy | ||
| 180 | ··-·low_complexity | ||
| 181 | ··-·low_disruption | ||
| 182 | ··-·medium_severity | ||
| 183 | ··-·no_reboot_needed | ||
| 184 | ··-·package_crypto-policies_installed | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 186 | [[packages]] | 169 | [[packages]] |
| 187 | name·=·"crypto-policies" | 170 | name·=·"crypto-policies" |
| 188 | version·=·"*" | 171 | version·=·"*" |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | dnf·install·crypto-policies | ||
| 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 200 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 177 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| 201 | ····dnf·install·-y·"crypto-policies" | 178 | ····dnf·install·-y·"crypto-policies" |
| 202 | fi | 179 | fi |
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 185 | -·name:·Ensure·crypto-policies·is·installed | ||
| 186 | ··package: | ||
| 187 | ····name:·crypto-policies | ||
| 188 | ····state:·present | ||
| 189 | ··tags: | ||
| 190 | ··-·CCE-83442-4 | ||
| 191 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 192 | ··-·enable_strategy | ||
| 193 | ··-·low_complexity | ||
| 194 | ··-·low_disruption | ||
| 195 | ··-·medium_severity | ||
| 196 | ··-·no_reboot_needed | ||
| 197 | ··-·package_crypto-policies_installed | ||
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 208 | package·--add=crypto-policies | 203 | package·--add=crypto-policies |
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 209 | include·install_crypto-policies | ||
| 210 | class·install_crypto-policies·{ | ||
| 214 | package· | 211 | ··package·{·'crypto-policies': |
| 212 | ····ensure·=>·'installed', | ||
| 213 | ··} | ||
| 214 | } | ||
| 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 216 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 216 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| 217 | $·sudo·update-crypto-policies·--set·FIPS:OSPP | 217 | $·sudo·update-crypto-policies·--set·FIPS:OSPP |
| 218 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 218 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 219 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 219 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 220 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 220 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 221 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 221 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 236, 14 lines modified | Offset 236, 58 lines modified | ||
| 236 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 236 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 237 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 237 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 238 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 238 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 239 | ·············_\x8c_\x8i_\x8s······1.6.1 | 239 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 240 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 240 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 241 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 | 241 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 |
| 242 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 242 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 243 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 244 | var_system_crypto_policy='FIPS:OSPP' | ||
| 245 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 246 | rc=$? | ||
| 247 | if·test·"$rc"·=·127;·then | ||
| 248 | » echo·"$stderr_of_call"·>&2 | ||
| 249 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 250 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 251 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 252 | » false··#·end·with·an·error·code | ||
| Max diff block lines reached; 907303/915397 bytes (99.12%) of diff not shown. | |||
| Offset 15210, 414 lines modified | Offset 15210, 414 lines modified | ||
| 0003b690:·6172·6765·743d·2223·6964·6d38·3131·3522··arget="#idm8115" | 0003b690:·6172·6765·743d·2223·6964·6d38·3131·3522··arget="#idm8115" | ||
| 0003b6a0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003b6a0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b6b0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003b6b0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b6c0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003b6c0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b6d0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003b6d0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b6e0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003b6e0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b6f0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003b6f0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b700:·6f6e·20 | 0003b700:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | ||
| 0003b710:· | 0003b710:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b720:·6 | 0003b720:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b730:·6 | 0003b730:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b740:·6 | 0003b740:·6964·3d22·6964·6d38·3131·3522·3e3c·7072··id="idm8115"><pr | ||
| 0003b750:· | 0003b750:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | ||
| 0003b760:·6 | 0003b760:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | ||
| 0003b770:·6 | 0003b770:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | ||
| 0003b780:· | 0003b780:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | ||
| 0003b790:·2 | 0003b790:·2021·2028·207b·2072·706d·202d·2d71·7569···!·(·{·rpm·--qui | ||
| 0003b7a0:· | 0003b7a0:·6574·202d·7120·6b65·726e·656c·203b·7d20··et·-q·kernel·;}· | ||
| 0003b7b0:·6 | 0003b7b0:·2661·6d70·3b26·616d·703b·207b·2072·706d··&&·{·rpm | ||
| 0003b7c0:· | 0003b7c0:·202d·2d71·7569·6574·202d·7120·7270·6d2d···--quiet·-q·rpm- | ||
| 0003b7d0:· | 0003b7d0:·6f73·7472·6565·203b·7d20·2661·6d70·3b26··ostree·;}·&& | ||
| 0003b7e0:· | 0003b7e0:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003b7f0:· | 0003b7f0:·6574·202d·7120·626f·6f74·6320·3b7d·2026··et·-q·bootc·;}·& | ||
| 0003b800:·6 | 0003b800:·616d·703b·2661·6d70·3b20·7b20·2120·7270··amp;&·{·!·rp | ||
| 0003b810:· | 0003b810:·6d20·2d2d·7175·6965·7420·2d71·206f·7065··m·--quiet·-q·ope | ||
| 0003b820:· | 0003b820:·6e73·6869·6674·2d6b·7562·656c·6574·203b··nshift-kubelet·; | ||
| 0003b830:·7 | 0003b830:·7d20·293b·2074·6865·6e0a·0a23·2046·696e··}·);·then..#·Fin | ||
| 0003b840:·6 | 0003b840:·6420·7768·6963·6820·6669·6c65·7320·6861··d·which·files·ha | ||
| 0003b850:· | 0003b850:·7665·2069·6e63·6f72·7265·6374·2068·6173··ve·incorrect·has | ||
| 0003b860:· | 0003b860:·6820·286e·6f74·2069·6e20·2f65·7463·2c20··h·(not·in·/etc,· | ||
| 0003b870:· | 0003b870:·6265·6361·7573·6520·6f66·2074·6865·2073··because·of·the·s | ||
| 0003b880:· | 0003b880:·7973·7465·6d20·7265·6c61·7465·6420·636f··ystem·related·co | ||
| 0003b890:·6 | 0003b890:·6e66·6967·2066·696c·6573·2920·616e·6420··nfig·files)·and· | ||
| 0003b8a0:· | 0003b8a0:·7468·656e·2067·6574·2066·696c·6573·206e··then·get·files·n | ||
| 0003b8b0:· | 0003b8b0:·616d·6573·0a66·696c·6573·5f77·6974·685f··ames.files_with_ | ||
| 0003b8c0:· | 0003b8c0:·696e·636f·7272·6563·745f·6861·7368·3d22··incorrect_hash=" | ||
| 0003b8d0:·2 | 0003b8d0:·2428·7270·6d20·2d56·6120·2d2d·6e6f·636f··$(rpm·-Va·--noco | ||
| 0003b8e0:· | 0003b8e0:·6e66·6967·207c·2067·7265·7020·2d45·2027··nfig·|·grep·-E·' | ||
| 0003b8f0:·5 | 0003b8f0:·5e2e·2e35·2720·7c20·6177·6b20·277b·7072··^..5'·|·awk·'{pr | ||
| 0003b900:· | 0003b900:·696e·7420·244e·467d·2720·2922·0a0a·6966··int·$NF}'·)"..if | ||
| 0003b910:· | 0003b910:·205b·202d·6e20·2224·6669·6c65·735f·7769···[·-n·"$files_wi | ||
| 0003b920:· | 0003b920:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | ||
| 0003b930:· | 0003b930:·6822·205d·3b20·7468·656e·0a20·2020·2023··h"·];·then.····# | ||
| 0003b940:· | 0003b940:·2046·726f·6d20·6669·6c65·7320·6e61·6d65···From·files·name | ||
| 0003b950:· | 0003b950:·7320·6765·7420·7061·636b·6167·6520·6e61··s·get·package·na | ||
| 0003b960:· | 0003b960:·6d65·7320·616e·6420·6368·616e·6765·206e··mes·and·change·n | ||
| 0003b970:· | 0003b970:·6577·6c69·6e65·2074·6f20·7370·6163·652c··ewline·to·space, | ||
| 0003b980:· | 0003b980:·2062·6563·6175·7365·2072·706d·2077·7269···because·rpm·wri | ||
| 0003b990:· | 0003b990:·7465·7320·6561·6368·2070·6163·6b61·6765··tes·each·package | ||
| 0003b9a0:· | 0003b9a0:·2074·6f20·6e65·7720·6c69·6e65·0a20·2020···to·new·line.··· | ||
| 0003b9b0:· | 0003b9b0:·2070·6163·6b61·6765·735f·746f·5f72·6569···packages_to_rei | ||
| 0003b9c0:· | 0003b9c0:·6e73·7461·6c6c·3d22·2428·7270·6d20·2d71··nstall="$(rpm·-q | ||
| 0003b9d0:·6 | 0003b9d0:·6620·2466·696c·6573·5f77·6974·685f·696e··f·$files_with_in | ||
| 0003b9e0:· | 0003b9e0:·636f·7272·6563·745f·6861·7368·207c·2074··correct_hash·|·t | ||
| 0003b9f0:· | 0003b9f0:·7220·275c·6e27·2027·2027·2922·0a0a·2020··r·'\n'·'·')"..·· | ||
| 0003ba00:· | 0003ba00:·2020·0a20·2020·2064·6e66·2072·6569·6e73····.····dnf·reins | ||
| 0003ba10:·7 | 0003ba10:·7461·6c6c·202d·7920·2470·6163·6b61·6765··tall·-y·$package | ||
| 0003ba20:· | 0003ba20:·735f·746f·5f72·6569·6e73·7461·6c6c·0a20··s_to_reinstall.· | ||
| 0003ba30:· | 0003ba30:·2020·200a·6669·0a0a·656c·7365·0a20·2020·····.fi..else.··· | ||
| 0003ba40:· | 0003ba40:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | ||
| 0003ba50:· | 0003ba50:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | ||
| 0003ba60:·0 | 0003ba60:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | ||
| 0003ba70:· | 0003ba70:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | ||
| 0003ba80:·6 | 0003ba80:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | ||
| 0003ba90:· | 0003ba90:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 0003baa0:· | 0003baa0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 0003bab0:· | 0003bab0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0003bac0:·2 | 0003bac0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0003bad0:·7 | 0003bad0:·7461·7267·6574·3d22·2369·646d·3831·3136··target="#idm8116 | ||
| 0003bae0:· | 0003bae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003baf0:·6 | 0003baf0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003bb00:·6 | 0003bb00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003bb10:·6 | 0003bb10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003bb20:· | 0003bb20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003bb30:· | 0003bb30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003bb40:· | 0003bb40:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003bb50:· | 0003bb50:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003bb60:·6 | 0003bb60:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003bb70:· | 0003bb70:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003bb80:· | 0003bb80:·7365·2220·6964·3d22·6964·6d38·3131·3622··se"·id="idm8116" | ||
| 0003bb90:· | 0003bb90:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003bba0:·6 | 0003bba0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003bbb0:· | 0003bbb0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003bbc0:· | 0003bbc0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003bbd0:· | 0003bbd0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003bbe0:· | 0003bbe0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003bbf0:· | 0003bbf0:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003bc00:· | 0003bc00:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003bc10:· | 0003bc10:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003bc20:· | 0003bc20:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003bc30:· | 0003bc30:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003bc40:· | 0003bc40:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003bc50:·3 | 0003bc50:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003bc60:· | 0003bc60:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003bc70:· | 0003bc70:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003bc80:· | 0003bc80:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003bc90:· | 0003bc90:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | ||
| 0003bca0:· | 0003bca0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | ||
| 0003bcb0:· | 0003bcb0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | ||
| 0003bcc0:· | 0003bcc0:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | ||
| 0003bcd0:· | 0003bcd0:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | ||
| 0003bce0:· | 0003bce0:·4345·2d39·3038·3431·2d38·0a20·202d·2043··CE-90841-8.··-·C | ||
| 0003bcf0:· | 0003bcf0:·4a49·532d·352e·3130·2e34·2e31·0a20·202d··JIS-5.10.4.1.··- | ||
| 0003bd00:· | 0003bd00:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003bd10:· | 0003bd10:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | ||
| 0003bd20:·2 | 0003bd20:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | ||
| 0003bd30:· | 0003bd30:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | ||
| 0003bd40:· | 0003bd40:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | ||
| 0003bd50:· | 0003bd50:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | ||
| 0003bd60:· | 0003bd60:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003bd70:· | 0003bd70:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | ||
| 0003bd80:· | 0003bd80:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | ||
| 0003bd90:· | 0003bd90:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | ||
| 0003bda0:· | 0003bda0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003bdb0:· | 0003bdb0:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | ||
| 0003bdc0:· | 0003bdc0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | ||
| 0003bdd0:· | 0003bdd0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | ||
| 0003bde0:· | 0003bde0:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | ||
| 0003bdf0:·6 | 0003bdf0:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | ||
| 0003be00:·6 | 0003be00:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | ||
| 0003be10:·7 | 0003be10:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | ||
| 0003be20:·2 | 0003be20:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | ||
| 0003be30:· | 0003be30:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | ||
| 0003be40:· | 0003be40:·7374·7261·7465·6779·0a20·202d·2072·706d··strategy.··-·rpm | ||
| 0003be50:· | 0003be50:·5f76·6572·6966·795f·6861·7368·6573·0a0a··_verify_hashes.. | ||
| 0003be60:· | 0003be60:·2d20·6e61·6d65·3a20·2753·6574·2066·6163··-·name:·'Set·fac | ||
| Max diff block lines reached; 17919752/17975532 bytes (99.69%) of diff not shown. | |||
| Offset 15159, 284 lines modified | Offset 15159, 284 lines modified | ||
| 0003b360:·6172·6765·743d·2223·6964·6d38·3435·3822··arget="#idm8458" | 0003b360:·6172·6765·743d·2223·6964·6d38·3435·3822··arget="#idm8458" | ||
| 0003b370:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003b370:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b380:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003b380:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b390:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003b390:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b3a0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003b3a0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b3b0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003b3b0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b3c0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003b3c0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b3d0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b3e0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b3f0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b400:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b410:·2220·6964·3d22·6964·6d38·3435·3822·3e3c··"·id="idm8458">< | |||
| 0003b420:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b430:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b440:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b450:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b460:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b470:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b480:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b490:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b4a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b4b0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b4c0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b4d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b4e0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b4f0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b500:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b510:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003b520:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003b530:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003b540:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003b550:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003b560:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b570:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003b580:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b590:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b5a0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b5b0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b5c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b5d0:·3834·3539·2220·7461·6269·6e64·6578·3d22··8459"·tabindex=" | |||
| 0003b5e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b5f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b600:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b610:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b620:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b630:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003b640:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b650:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b660:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b670:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b680:·3435·3922·3e3c·7461·626c·6520·636c·6173··459"><table·clas | |||
| 0003b690:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b6a0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b6b0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b6c0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b6d0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b6e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b6f0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b700:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b710:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b720:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b730:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b740:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b750:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b760:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b770:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b780:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003b790:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003b7a0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003b7b0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003b7c0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b7d0:·2d39·3038·3433·2d34·0a20·202d·2043·4a49··-90843-4.··-·CJI | |||
| 0003b7e0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b7f0:·4953·412d·5354·4947·2d52·4845·4c2d·3039··ISA-STIG-RHEL-09 | |||
| 0003b800:·2d36·3531·3031·300a·2020·2d20·4e49·5354··-651010.··-·NIST | |||
| 0003b810:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b820:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b830:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b840:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b850:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b860:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b870:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b880:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b890:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b8a0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b8b0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b8c0:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003b8d0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b8e0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b8f0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b900:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b910:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003b920:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003b930:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003b940:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003b950:·4343·452d·3930·3834·332d·340a·2020·2d20··CCE-90843-4.··-· | |||
| 0003b960:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b970:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003b980:·2d30·392d·3635·3130·3130·0a20·202d·204e··-09-651010.··-·N | |||
| 0003b990:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b9a0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b9b0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b9c0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b9d0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b9e0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b9f0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003ba00:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003ba10:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003ba20:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003ba30:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003ba40:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003ba50:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003ba60:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003ba70:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003ba80:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003ba90:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003baa0:·6d38·3436·3022·2074·6162·696e·6465·783d··m8460"·tabindex= | |||
| 0003bab0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003bac0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003bad0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003bae0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003baf0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003bb00:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 0003bb10:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003bb20:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bb30:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bb40:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| Max diff block lines reached; 32702982/32740822 bytes (99.88%) of diff not shown. | |||
| Offset 15177, 285 lines modified | Offset 15177, 285 lines modified | ||
| 0003b480:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b480:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b490:·2369·646d·3834·3538·2220·7461·6269·6e64··#idm8458"·tabind | 0003b490:·2369·646d·3834·3538·2220·7461·6269·6e64··#idm8458"·tabind | ||
| 0003b4a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b4a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b4b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b4b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b4c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b4c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b4d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b4d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b4e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b4e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b4f0:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003b500:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003b510:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b520:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b530:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b540:·646d·3834·3538·223e·3c74·6162·6c65·2063··dm8458"><table·c | |||
| 0003b550:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b560:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b570:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b580:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b590:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b5a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b5b0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b5c0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b5d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b5e0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b5f0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b600:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b610:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b620:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b630:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b640:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003b650:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003b660:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003b670:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003b680:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003b690:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003b6a0:·0a7d·0a3c·2f63·6f64·653e·3c2f·7072·653e··.}.</code></pre> | |||
| 0003b6b0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b6c0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b6d0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b6e0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b6f0:·6765·743d·2223·6964·6d38·3435·3922·2074··get="#idm8459"·t | |||
| 0003b700:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b710:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b720:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b730:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b740:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b750:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b760:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b770:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b780:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b790:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b7a0:·2069·643d·2269·646d·3834·3539·223e·3c74···id="idm8459"><t | |||
| 0003b7b0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b7c0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b7d0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b7e0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b7f0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b800:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b810:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b820:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b830:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b840:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b850:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b860:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b870:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b880:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b890:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b8a0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003b8b0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003b8c0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003b8d0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003b8e0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003b8f0:·3a0a·2020·2d20·4343·452d·3930·3834·332d··:.··-·CCE-90843- | |||
| 0003b900:·340a·2020·2d20·434a·4953·2d35·2e31·302e··4.··-·CJIS-5.10. | |||
| 0003b910:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b920:·472d·5248·454c·2d30·392d·3635·3130·3130··G-RHEL-09-651010 | |||
| 0003b930:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b940:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b950:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b960:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b970:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b980:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b990:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b9a0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b9b0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b9c0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b9d0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b9e0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b9f0:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003ba00:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003ba10:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003ba20:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003ba30:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003ba40:·2020·7768·656e·3a20·2722·6b65·726e·656c····when:·'"kernel | |||
| 0003ba50:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003ba60:·7473·2e70·6163·6b61·6765·7327·0a20·2074··ts.packages'.··t | |||
| 0003ba70:·6167·733a·0a20·202d·2043·4345·2d39·3038··ags:.··-·CCE-908 | |||
| 0003ba80:·3433·2d34·0a20·202d·2043·4a49·532d·352e··43-4.··-·CJIS-5. | |||
| 0003ba90:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003baa0:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 0003bab0:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003bac0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003bad0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003bae0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003baf0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003bb00:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003bb10:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003bb20:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003bb30:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003bb40:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003bb50:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003bb60:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003bb70:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003bb80:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003bb90:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003bba0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003bbb0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003bbc0:·7267·6574·3d22·2369·646d·3834·3630·2220··rget="#idm8460"· | |||
| 0003bbd0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003bbe0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bbf0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bc00:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bc10:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bc20:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003bc30:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003bc40:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003bc50:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bc60:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| Max diff block lines reached; 32620228/32658206 bytes (99.88%) of diff not shown. | |||
| Offset 15127, 408 lines modified | Offset 15127, 408 lines modified | ||
| 0003b160:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b160:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b170:·2223·6964·6d31·3630·3822·2074·6162·696e··"#idm1608"·tabin | 0003b170:·2223·6964·6d31·3630·3822·2074·6162·696e··"#idm1608"·tabin | ||
| 0003b180:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b180:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b190:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b190:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b1a0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b1a0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b1b0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b1b0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b1c0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b1c0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b1d0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b1d0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b1e0:·6 | 0003b1e0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003b1f0:·3 | 0003b1f0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b200:· | 0003b200:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b210:· | 0003b210:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b220:· | 0003b220:·6d31·3630·3822·3e3c·7072·653e·3c63·6f64··m1608"><pre><cod | ||
| 0003b230:· | 0003b230:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003b240:·6 | 0003b240:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003b250:·6 | 0003b250:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003b260:· | 0003b260:·6174·666f·726d·730a·6966·2021·2028·207b··atforms.if·!·(·{ | ||
| 0003b270:· | 0003b270:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b280:· | 0003b280:·6b65·726e·656c·203b·7d20·2661·6d70·3b26··kernel·;}·&& | ||
| 0003b290:· | 0003b290:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003b2a0:·7 | 0003b2a0:·6574·202d·7120·7270·6d2d·6f73·7472·6565··et·-q·rpm-ostree | ||
| 0003b2b0:· | 0003b2b0:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b2c0:· | 0003b2c0:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b2d0:· | 0003b2d0:·626f·6f74·6320·3b7d·2026·616d·703b·2661··bootc·;}·&&a | ||
| 0003b2e0:· | 0003b2e0:·6d70·3b20·7b20·2120·7270·6d20·2d2d·7175··mp;·{·!·rpm·--qu | ||
| 0003b2f0:· | 0003b2f0:·6965·7420·2d71·206f·7065·6e73·6869·6674··iet·-q·openshift | ||
| 0003b300:· | 0003b300:·2d6b·7562·656c·6574·203b·7d20·293b·2074··-kubelet·;}·);·t | ||
| 0003b310:· | 0003b310:·6865·6e0a·0a23·2046·696e·6420·7768·6963··hen..#·Find·whic | ||
| 0003b320:·6 | 0003b320:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | ||
| 0003b330:· | 0003b330:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | ||
| 0003b340:· | 0003b340:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | ||
| 0003b350:·6 | 0003b350:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | ||
| 0003b360:· | 0003b360:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | ||
| 0003b370:·6 | 0003b370:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | ||
| 0003b380:· | 0003b380:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | ||
| 0003b390:· | 0003b390:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003b3a0:· | 0003b3a0:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | ||
| 0003b3b0:· | 0003b3b0:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | ||
| 0003b3c0:·2 | 0003b3c0:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | ||
| 0003b3d0:· | 0003b3d0:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | ||
| 0003b3e0:· | 0003b3e0:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | ||
| 0003b3f0:·2 | 0003b3f0:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | ||
| 0003b400:· | 0003b400:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | ||
| 0003b410:· | 0003b410:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | ||
| 0003b420:· | 0003b420:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | ||
| 0003b430:· | 0003b430:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | ||
| 0003b440:· | 0003b440:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | ||
| 0003b450:·2 | 0003b450:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | ||
| 0003b460:· | 0003b460:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | ||
| 0003b470:·6 | 0003b470:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | ||
| 0003b480:· | 0003b480:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | ||
| 0003b490:· | 0003b490:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003b4a0:· | 0003b4a0:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | ||
| 0003b4b0:·6 | 0003b4b0:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003b4c0:·7 | 0003b4c0:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | ||
| 0003b4d0:· | 0003b4d0:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | ||
| 0003b4e0:· | 0003b4e0:·2079·756d·2072·6569·6e73·7461·6c6c·202d···yum·reinstall·- | ||
| 0003b4f0:· | 0003b4f0:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | ||
| 0003b500:·6 | 0003b500:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | ||
| 0003b510:· | 0003b510:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | ||
| 0003b520:· | 0003b520:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | ||
| 0003b530:·6 | 0003b530:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | ||
| 0003b540:· | 0003b540:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | ||
| 0003b550:·6 | 0003b550:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | ||
| 0003b560:· | 0003b560:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003b570:· | 0003b570:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b580:· | 0003b580:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b590:· | 0003b590:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003b5a0:·7 | 0003b5a0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b5b0:· | 0003b5b0:·3d22·2369·646d·3136·3039·2220·7461·6269··="#idm1609"·tabi | ||
| 0003b5c0:· | 0003b5c0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b5d0:· | 0003b5d0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b5e0:· | 0003b5e0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b5f0:· | 0003b5f0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b600:· | 0003b600:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b610:· | 0003b610:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b620:· | 0003b620:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003b630:· | 0003b630:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003b640:· | 0003b640:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003b650:· | 0003b650:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b660:· | 0003b660:·3d22·6964·6d31·3630·3922·3e3c·7461·626c··="idm1609"><tabl | ||
| 0003b670:· | 0003b670:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003b680:· | 0003b680:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003b690:· | 0003b690:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003b6a0:· | 0003b6a0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003b6b0:·3 | 0003b6b0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003b6c0:· | 0003b6c0:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003b6d0:· | 0003b6d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b6e0:· | 0003b6e0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b6f0:· | 0003b6f0:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003b700:· | 0003b700:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b710:· | 0003b710:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b720:·3 | 0003b720:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b730:· | 0003b730:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003b740:· | 0003b740:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003b750:· | 0003b750:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b760:· | 0003b760:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003b770:·20 | 0003b770:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003b780:·6 | 0003b780:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003b790:·65 | 0003b790:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003b7a0:· | 0003b7a0:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003b7b0:·6 | 0003b7b0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003b7c0:· | 0003b7c0:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003b7d0:· | 0003b7d0:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003b7e0:· | 0003b7e0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003b7f0:· | 0003b7f0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003b800:· | 0003b800:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003b810:·20 | 0003b810:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003b820:· | 0003b820:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003b830:· | 0003b830:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003b840:· | 0003b840:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003b850:· | 0003b850:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003b860:· | 0003b860:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003b870:· | 0003b870:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003b880:· | 0003b880:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003b890:· | 0003b890:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003b8a0:· | 0003b8a0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003b8b0:· | 0003b8b0:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003b8c0:· | 0003b8c0:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003b8d0:· | 0003b8d0:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003b8e0:· | 0003b8e0:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003b8f0:·6 | 0003b8f0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003b900:· | 0003b900:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003b910:· | 0003b910:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003b920:·7 | 0003b920:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| 0003b930:· | 0003b930:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| Max diff block lines reached; 14094326/14149278 bytes (99.61%) of diff not shown. | |||
| Offset 97, 14 lines modified | Offset 97, 33 lines modified | ||
| 97 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 97 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 98 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 98 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 99 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 99 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 105 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 106 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 107 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 108 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 109 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 110 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 111 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 112 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 113 | fi | ||
| 114 | else | ||
| 115 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 116 | fi | ||
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 109 | -·name:·Gather·the·package·facts | 122 | -·name:·Gather·the·package·facts |
| 110 | ··package_facts: | 123 | ··package_facts: |
| Offset 271, 33 lines modified | Offset 290, 14 lines modified | ||
| 271 | ··-·PCI-DSSv4-11.5.2 | 290 | ··-·PCI-DSSv4-11.5.2 |
| 272 | ··-·high_complexity | 291 | ··-·high_complexity |
| 273 | ··-·high_severity | 292 | ··-·high_severity |
| 274 | ··-·medium_disruption | 293 | ··-·medium_disruption |
| 275 | ··-·no_reboot_needed | 294 | ··-·no_reboot_needed |
| 276 | ··-·restrict_strategy | 295 | ··-·restrict_strategy |
| 277 | ··-·rpm_verify_hashes | 296 | ··-·rpm_verify_hashes |
| 278 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 279 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 280 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 281 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 282 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 283 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 284 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 285 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 286 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 287 | fi | ||
| 288 | else | ||
| 289 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 290 | fi | ||
| 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 292 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 298 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 293 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 299 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 294 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 300 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 295 | $·rpm·-qf·FILENAME | 301 | $·rpm·-qf·FILENAME |
| 296 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 302 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 318, 14 lines modified | Offset 318, 50 lines modified | ||
| 318 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 318 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 319 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 319 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 320 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 320 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 321 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 321 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 322 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 322 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 330 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 331 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 332 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 333 | declare·-A·SETPERMS_RPM_DICT | ||
| 334 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 335 | #·is·expected·by·the·RPM·database | ||
| 336 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 337 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 338 | do | ||
| 339 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 340 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 341 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 342 | ········do | ||
| 343 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 344 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 345 | ········done | ||
| 346 | done | ||
| 347 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 348 | #·correct·values | ||
| 349 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 350 | do | ||
| 351 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 352 | done | ||
| 353 | else | ||
| 354 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 355 | fi | ||
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 330 | -·name:·Gather·the·package·facts | 361 | -·name:·Gather·the·package·facts |
| 331 | ··package_facts: | 362 | ··package_facts: |
| Offset 437, 50 lines modified | Offset 473, 14 lines modified | ||
| 437 | ··-·PCI-DSSv4-11.5.2 | 473 | ··-·PCI-DSSv4-11.5.2 |
| 438 | ··-·high_complexity | 474 | ··-·high_complexity |
| 439 | ··-·high_severity | 475 | ··-·high_severity |
| 440 | ··-·medium_disruption | 476 | ··-·medium_disruption |
| 441 | ··-·no_reboot_needed | 477 | ··-·no_reboot_needed |
| 442 | ··-·restrict_strategy | 478 | ··-·restrict_strategy |
| 443 | ··-·rpm_verify_permissions | 479 | ··-·rpm_verify_permissions |
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1033419/1041498 bytes (99.22%) of diff not shown. | |||
| Offset 15180, 408 lines modified | Offset 15180, 408 lines modified | ||
| 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b4c0:·646d·3136·3038·2220·7461·6269·6e64·6578··dm1608"·tabindex | 0003b4c0:·646d·3136·3038·2220·7461·6269·6e64·6578··dm1608"·tabindex | ||
| 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b520:·6d65·6469·6174·696f·6e20· | 0003b520:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | ||
| 0003b530:· | 0003b530:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 0003b540:· | 0003b540:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b550:· | 0003b550:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b560:·6 | 0003b560:·6c61·7073·6522·2069·643d·2269·646d·3136··lapse"·id="idm16 | ||
| 0003b570:· | 0003b570:·3038·223e·3c70·7265·3e3c·636f·6465·3e23··08"><pre><code># | ||
| 0003b580:· | 0003b580:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | ||
| 0003b590:· | 0003b590:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | ||
| 0003b5a0:·6 | 0003b5a0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | ||
| 0003b5b0:·6 | 0003b5b0:·6f72·6d73·0a69·6620·2120·2820·7b20·7270··orms.if·!·(·{·rp | ||
| 0003b5c0:· | 0003b5c0:·6d20·2d2d·7175·6965·7420·2d71·206b·6572··m·--quiet·-q·ker | ||
| 0003b5d0:· | 0003b5d0:·6e65·6c20·3b7d·2026·616d·703b·2661·6d70··nel·;}·&& | ||
| 0003b5e0:· | 0003b5e0:·3b20·7b20·7270·6d20·2d2d·7175·6965·7420··;·{·rpm·--quiet· | ||
| 0003b5f0:· | 0003b5f0:·2d71·2072·706d·2d6f·7374·7265·6520·3b7d··-q·rpm-ostree·;} | ||
| 0003b600:· | 0003b600:·2026·616d·703b·2661·6d70·3b20·7b20·7270···&&·{·rp | ||
| 0003b610:· | 0003b610:·6d20·2d2d·7175·6965·7420·2d71·2062·6f6f··m·--quiet·-q·boo | ||
| 0003b620:·746 | 0003b620:·7463·203b·7d20·2661·6d70·3b26·616d·703b··tc·;}·&& | ||
| 0003b630:· | 0003b630:·207b·2021·2072·706d·202d·2d71·7569·6574···{·!·rpm·--quiet | ||
| 0003b640:· | 0003b640:·202d·7120·6f70·656e·7368·6966·742d·6b75···-q·openshift-ku | ||
| 0003b650:· | 0003b650:·6265·6c65·7420·3b7d·2029·3b20·7468·656e··belet·;}·);·then | ||
| 0003b660:· | 0003b660:·0a0a·2320·4669·6e64·2077·6869·6368·2066··..#·Find·which·f | ||
| 0003b670:·6 | 0003b670:·696c·6573·2068·6176·6520·696e·636f·7272··iles·have·incorr | ||
| 0003b680:·6 | 0003b680:·6563·7420·6861·7368·2028·6e6f·7420·696e··ect·hash·(not·in | ||
| 0003b690:· | 0003b690:·202f·6574·632c·2062·6563·6175·7365·206f···/etc,·because·o | ||
| 0003b6a0:·66 | 0003b6a0:·6620·7468·6520·7379·7374·656d·2072·656c··f·the·system·rel | ||
| 0003b6b0:·6 | 0003b6b0:·6174·6564·2063·6f6e·6669·6720·6669·6c65··ated·config·file | ||
| 0003b6c0:· | 0003b6c0:·7329·2061·6e64·2074·6865·6e20·6765·7420··s)·and·then·get· | ||
| 0003b6d0:· | 0003b6d0:·6669·6c65·7320·6e61·6d65·730a·6669·6c65··files·names.file | ||
| 0003b6e0:· | 0003b6e0:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003b6f0:·5 | 0003b6f0:·5f68·6173·683d·2224·2872·706d·202d·5661··_hash="$(rpm·-Va | ||
| 0003b700:· | 0003b700:·202d·2d6e·6f63·6f6e·6669·6720·7c20·6772···--noconfig·|·gr | ||
| 0003b710:· | 0003b710:·6570·202d·4520·275e·2e2e·3527·207c·2061··ep·-E·'^..5'·|·a | ||
| 0003b720:· | 0003b720:·776b·2027·7b70·7269·6e74·2024·4e46·7d27··wk·'{print·$NF}' | ||
| 0003b730:· | 0003b730:·2029·220a·0a69·6620·5b20·2d6e·2022·2466···)"..if·[·-n·"$f | ||
| 0003b740:· | 0003b740:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003b750:· | 0003b750:·6563·745f·6861·7368·2220·5d3b·2074·6865··ect_hash"·];·the | ||
| 0003b760:· | 0003b760:·6e0a·2020·2020·2320·4672·6f6d·2066·696c··n.····#·From·fil | ||
| 0003b770:· | 0003b770:·6573·206e·616d·6573·2067·6574·2070·6163··es·names·get·pac | ||
| 0003b780:· | 0003b780:·6b61·6765·206e·616d·6573·2061·6e64·2063··kage·names·and·c | ||
| 0003b790:· | 0003b790:·6861·6e67·6520·6e65·776c·696e·6520·746f··hange·newline·to | ||
| 0003b7a0:·2 | 0003b7a0:·2073·7061·6365·2c20·6265·6361·7573·6520···space,·because· | ||
| 0003b7b0:· | 0003b7b0:·7270·6d20·7772·6974·6573·2065·6163·6820··rpm·writes·each· | ||
| 0003b7c0:· | 0003b7c0:·7061·636b·6167·6520·746f·206e·6577·206c··package·to·new·l | ||
| 0003b7d0:·6 | 0003b7d0:·696e·650a·2020·2020·7061·636b·6167·6573··ine.····packages | ||
| 0003b7e0:· | 0003b7e0:·5f74·6f5f·7265·696e·7374·616c·6c3d·2224··_to_reinstall="$ | ||
| 0003b7f0:· | 0003b7f0:·2872·706d·202d·7166·2024·6669·6c65·735f··(rpm·-qf·$files_ | ||
| 0003b800:·7 | 0003b800:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003b810:· | 0003b810:·6173·6820·7c20·7472·2027·5c6e·2720·2720··ash·|·tr·'\n'·'· | ||
| 0003b820:·2 | 0003b820:·2729·220a·0a20·2020·200a·2020·2020·7975··')"..····.····yu | ||
| 0003b830:· | 0003b830:·6d20·7265·696e·7374·616c·6c20·2d79·2024··m·reinstall·-y·$ | ||
| 0003b840:· | 0003b840:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | ||
| 0003b850:· | 0003b850:·7374·616c·6c0a·2020·2020·0a66·690a·0a65··stall.····.fi..e | ||
| 0003b860:·6c | 0003b860:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | ||
| 0003b870:· | 0003b870:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | ||
| 0003b880:· | 0003b880:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | ||
| 0003b890:· | 0003b890:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | ||
| 0003b8a0:· | 0003b8a0:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | ||
| 0003b8b0:·6 | 0003b8b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0003b8c0:· | 0003b8c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003b8d0:·6 | 0003b8d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003b8e0:· | 0003b8e0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0003b8f0:·2220·6 | 0003b8f0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b900:· | 0003b900:·6964·6d31·3630·3922·2074·6162·696e·6465··idm1609"·tabinde | ||
| 0003b910:· | 0003b910:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b920:·6 | 0003b920:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b930:·6 | 0003b930:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b940:· | 0003b940:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b950:· | 0003b950:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b960:· | 0003b960:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003b970:· | 0003b970:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003b980:· | 0003b980:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b990:· | 0003b990:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b9a0:· | 0003b9a0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b9b0:· | 0003b9b0:·646d·3136·3039·223e·3c74·6162·6c65·2063··dm1609"><table·c | ||
| 0003b9c0:· | 0003b9c0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b9d0:· | 0003b9d0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b9e0:· | 0003b9e0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b9f0:· | 0003b9f0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003ba00:· | 0003ba00:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003ba10:· | 0003ba10:·683e·3c74·643e·6869·6768·3c2f·7464·3e3c··h><td>high</td>< | ||
| 0003ba20:·2 | 0003ba20:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003ba30:· | 0003ba30:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003ba40:· | 0003ba40:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | ||
| 0003ba50:· | 0003ba50:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003ba60:·2 | 0003ba60:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003ba70:· | 0003ba70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003ba80:· | 0003ba80:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003ba90:·3 | 0003ba90:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003baa0:· | 0003baa0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003bab0:· | 0003bab0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | ||
| 0003bac0:· | 0003bac0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | ||
| 0003bad0:· | 0003bad0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | ||
| 0003bae0:· | 0003bae0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | ||
| 0003baf0:· | 0003baf0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | ||
| 0003bb00:· | 0003bb00:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | ||
| 0003bb10:· | 0003bb10:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003bb20:· | 0003bb20:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | ||
| 0003bb30:· | 0003bb30:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | ||
| 0003bb40:· | 0003bb40:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | ||
| 0003bb50:· | 0003bb50:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | ||
| 0003bb60:· | 0003bb60:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | ||
| 0003bb70:·2 | 0003bb70:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003bb80:· | 0003bb80:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | ||
| 0003bb90:· | 0003bb90:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | ||
| 0003bba0:· | 0003bba0:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003bbb0:· | 0003bbb0:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | ||
| 0003bbc0:· | 0003bbc0:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | ||
| 0003bbd0:· | 0003bbd0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | ||
| 0003bbe0:· | 0003bbe0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | ||
| 0003bbf0:· | 0003bbf0:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | ||
| 0003bc00:·6 | 0003bc00:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | ||
| 0003bc10:· | 0003bc10:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | ||
| 0003bc20:·202 | 0003bc20:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | ||
| 0003bc30:· | 0003bc30:·7469·6f6e·0a20·202d·206e·6f5f·7265·626f··tion.··-·no_rebo | ||
| 0003bc40:·6 | 0003bc40:·6f74·5f6e·6565·6465·640a·2020·2d20·7265··ot_needed.··-·re | ||
| 0003bc50:·73 | 0003bc50:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | ||
| 0003bc60:· | 0003bc60:·2020·2d20·7270·6d5f·7665·7269·6679·5f68····-·rpm_verify_h | ||
| 0003bc70:· | 0003bc70:·6173·6865·730a·0a2d·206e·616d·653a·2027··ashes..-·name:·' | ||
| 0003bc80:· | 0003bc80:·5365·7420·6661·6374·3a20·5061·636b·6167··Set·fact:·Packag | ||
| Max diff block lines reached; 24761031/24815983 bytes (99.78%) of diff not shown. | |||
| Offset 15203, 408 lines modified | Offset 15203, 408 lines modified | ||
| 0003b620:·7461·7267·6574·3d22·2369·646d·3136·3038··target="#idm1608 | 0003b620:·7461·7267·6574·3d22·2369·646d·3136·3038··target="#idm1608 | ||
| 0003b630:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b630:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b640:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b640:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b650:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b650:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b660:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b660:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b670:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b670:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b680:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b680:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b690:·696f·6e20· | 0003b690:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | ||
| 0003b6a0:· | 0003b6a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b6b0:· | 0003b6b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b6c0:· | 0003b6c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b6d0:· | 0003b6d0:·2069·643d·2269·646d·3136·3038·223e·3c70···id="idm1608"><p | ||
| 0003b6e0:· | 0003b6e0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0003b6f0:·6 | 0003b6f0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | ||
| 0003b700:·6 | 0003b700:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | ||
| 0003b710:· | 0003b710:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | ||
| 0003b720:·6 | 0003b720:·6620·2120·2820·7b20·7270·6d20·2d2d·7175··f·!·(·{·rpm·--qu | ||
| 0003b730:·6 | 0003b730:·6965·7420·2d71·206b·6572·6e65·6c20·3b7d··iet·-q·kernel·;} | ||
| 0003b740:·6 | 0003b740:·2026·616d·703b·2661·6d70·3b20·7b20·7270···&&·{·rp | ||
| 0003b750:· | 0003b750:·6d20·2d2d·7175·6965·7420·2d71·2072·706d··m·--quiet·-q·rpm | ||
| 0003b760:· | 0003b760:·2d6f·7374·7265·6520·3b7d·2026·616d·703b··-ostree·;}·& | ||
| 0003b770:·2 | 0003b770:·2661·6d70·3b20·7b20·7270·6d20·2d2d·7175··&·{·rpm·--qu | ||
| 0003b780:· | 0003b780:·6965·7420·2d71·2062·6f6f·7463·203b·7d20··iet·-q·bootc·;}· | ||
| 0003b790:· | 0003b790:·2661·6d70·3b26·616d·703b·207b·2021·2072··&&·{·!·r | ||
| 0003b7a0:· | 0003b7a0:·706d·202d·2d71·7569·6574·202d·7120·6f70··pm·--quiet·-q·op | ||
| 0003b7b0:· | 0003b7b0:·656e·7368·6966·742d·6b75·6265·6c65·7420··enshift-kubelet· | ||
| 0003b7c0:· | 0003b7c0:·3b7d·2029·3b20·7468·656e·0a0a·2320·4669··;}·);·then..#·Fi | ||
| 0003b7d0:·6 | 0003b7d0:·6e64·2077·6869·6368·2066·696c·6573·2068··nd·which·files·h | ||
| 0003b7e0:· | 0003b7e0:·6176·6520·696e·636f·7272·6563·7420·6861··ave·incorrect·ha | ||
| 0003b7f0:· | 0003b7f0:·7368·2028·6e6f·7420·696e·202f·6574·632c··sh·(not·in·/etc, | ||
| 0003b800:·20 | 0003b800:·2062·6563·6175·7365·206f·6620·7468·6520···because·of·the· | ||
| 0003b810:· | 0003b810:·7379·7374·656d·2072·656c·6174·6564·2063··system·related·c | ||
| 0003b820:· | 0003b820:·6f6e·6669·6720·6669·6c65·7329·2061·6e64··onfig·files)·and | ||
| 0003b830:· | 0003b830:·2074·6865·6e20·6765·7420·6669·6c65·7320···then·get·files· | ||
| 0003b840:· | 0003b840:·6e61·6d65·730a·6669·6c65·735f·7769·7468··names.files_with | ||
| 0003b850:· | 0003b850:·5f69·6e63·6f72·7265·6374·5f68·6173·683d··_incorrect_hash= | ||
| 0003b860:·2 | 0003b860:·2224·2872·706d·202d·5661·202d·2d6e·6f63··"$(rpm·-Va·--noc | ||
| 0003b870:· | 0003b870:·6f6e·6669·6720·7c20·6772·6570·202d·4520··onfig·|·grep·-E· | ||
| 0003b880:· | 0003b880:·275e·2e2e·3527·207c·2061·776b·2027·7b70··'^..5'·|·awk·'{p | ||
| 0003b890:· | 0003b890:·7269·6e74·2024·4e46·7d27·2029·220a·0a69··rint·$NF}'·)"..i | ||
| 0003b8a0:· | 0003b8a0:·6620·5b20·2d6e·2022·2466·696c·6573·5f77··f·[·-n·"$files_w | ||
| 0003b8b0:·6 | 0003b8b0:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b8c0:·353 | 0003b8c0:·7368·2220·5d3b·2074·6865·6e0a·2020·2020··sh"·];·then.···· | ||
| 0003b8d0:·2 | 0003b8d0:·2320·4672·6f6d·2066·696c·6573·206e·616d··#·From·files·nam | ||
| 0003b8e0:· | 0003b8e0:·6573·2067·6574·2070·6163·6b61·6765·206e··es·get·package·n | ||
| 0003b8f0:· | 0003b8f0:·616d·6573·2061·6e64·2063·6861·6e67·6520··ames·and·change· | ||
| 0003b900:· | 0003b900:·6e65·776c·696e·6520·746f·2073·7061·6365··newline·to·space | ||
| 0003b910:·2 | 0003b910:·2c20·6265·6361·7573·6520·7270·6d20·7772··,·because·rpm·wr | ||
| 0003b920:· | 0003b920:·6974·6573·2065·6163·6820·7061·636b·6167··ites·each·packag | ||
| 0003b930:·65 | 0003b930:·6520·746f·206e·6577·206c·696e·650a·2020··e·to·new·line.·· | ||
| 0003b940:· | 0003b940:·2020·7061·636b·6167·6573·5f74·6f5f·7265····packages_to_re | ||
| 0003b950:· | 0003b950:·696e·7374·616c·6c3d·2224·2872·706d·202d··install="$(rpm·- | ||
| 0003b960:· | 0003b960:·7166·2024·6669·6c65·735f·7769·7468·5f69··qf·$files_with_i | ||
| 0003b970:·6 | 0003b970:·6e63·6f72·7265·6374·5f68·6173·6820·7c20··ncorrect_hash·|· | ||
| 0003b980:·7 | 0003b980:·7472·2027·5c6e·2720·2720·2729·220a·0a20··tr·'\n'·'·')"..· | ||
| 0003b990:· | 0003b990:·2020·200a·2020·2020·7975·6d20·7265·696e·····.····yum·rein | ||
| 0003b9a0:· | 0003b9a0:·7374·616c·6c20·2d79·2024·7061·636b·6167··stall·-y·$packag | ||
| 0003b9b0:· | 0003b9b0:·6573·5f74·6f5f·7265·696e·7374·616c·6c0a··es_to_reinstall. | ||
| 0003b9c0:· | 0003b9c0:·2020·2020·0a66·690a·0a65·6c73·650a·2020······.fi..else.·· | ||
| 0003b9d0:· | 0003b9d0:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | ||
| 0003b9e0:· | 0003b9e0:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | ||
| 0003b9f0:· | 0003b9f0:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | ||
| 0003ba00:· | 0003ba00:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | ||
| 0003ba10:·6 | 0003ba10:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | ||
| 0003ba20:· | 0003ba20:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | ||
| 0003ba30:· | 0003ba30:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | ||
| 0003ba40:· | 0003ba40:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | ||
| 0003ba50:· | 0003ba50:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | ||
| 0003ba60:· | 0003ba60:·2d74·6172·6765·743d·2223·6964·6d31·3630··-target="#idm160 | ||
| 0003ba70:· | 0003ba70:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | ||
| 0003ba80:· | 0003ba80:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003ba90:· | 0003ba90:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003baa0:· | 0003baa0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003bab0:·6 | 0003bab0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003bac0:· | 0003bac0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003bad0:· | 0003bad0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003bae0:· | 0003bae0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003baf0:· | 0003baf0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003bb00:·6 | 0003bb00:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003bb10:· | 0003bb10:·7073·6522·2069·643d·2269·646d·3136·3039··pse"·id="idm1609 | ||
| 0003bb20:· | 0003bb20:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003bb30:· | 0003bb30:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003bb40:· | 0003bb40:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003bb50:· | 0003bb50:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003bb60:· | 0003bb60:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003bb70:· | 0003bb70:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003bb80:· | 0003bb80:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | ||
| 0003bb90:· | 0003bb90:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003bba0:· | 0003bba0:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | ||
| 0003bbb0:· | 0003bbb0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bbc0:· | 0003bbc0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003bbd0:· | 0003bbd0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003bbe0:·3 | 0003bbe0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003bbf0:· | 0003bbf0:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003bc00:· | 0003bc00:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003bc10:· | 0003bc10:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003bc20:· | 0003bc20:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | ||
| 0003bc30:·6 | 0003bc30:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | ||
| 0003bc40:· | 0003bc40:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | ||
| 0003bc50:· | 0003bc50:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | ||
| 0003bc60:· | 0003bc60:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | ||
| 0003bc70:· | 0003bc70:·434a·4953·2d35·2e31·302e·342e·310a·2020··CJIS-5.10.4.1.·· | ||
| 0003bc80:· | 0003bc80:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003bc90:·2 | 0003bc90:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003bca0:· | 0003bca0:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003bcb0:· | 0003bcb0:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003bcc0:· | 0003bcc0:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003bcd0:· | 0003bcd0:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003bce0:· | 0003bce0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003bcf0:·2 | 0003bcf0:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003bd00:· | 0003bd00:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003bd10:· | 0003bd10:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003bd20:· | 0003bd20:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bd30:· | 0003bd30:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003bd40:·2 | 0003bd40:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003bd50:· | 0003bd50:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003bd60:·2 | 0003bd60:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003bd70:·6 | 0003bd70:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003bd80:· | 0003bd80:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003bd90:·6 | 0003bd90:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003bda0:· | 0003bda0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003bdb0:· | 0003bdb0:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003bdc0:· | 0003bdc0:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003bdd0:·6 | 0003bdd0:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| 0003bde0:· | 0003bde0:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | ||
| 0003bdf0:·6 | 0003bdf0:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | ||
| Max diff block lines reached; 16165574/16220526 bytes (99.66%) of diff not shown. | |||
| Offset 116, 14 lines modified | Offset 116, 33 lines modified | ||
| 116 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 116 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 117 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 117 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 125 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 126 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 127 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 128 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 129 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 130 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 131 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 132 | fi | ||
| 133 | else | ||
| 134 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 135 | fi | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 128 | -·name:·Gather·the·package·facts | 141 | -·name:·Gather·the·package·facts |
| 129 | ··package_facts: | 142 | ··package_facts: |
| Offset 290, 33 lines modified | Offset 309, 14 lines modified | ||
| 290 | ··-·PCI-DSSv4-11.5.2 | 309 | ··-·PCI-DSSv4-11.5.2 |
| 291 | ··-·high_complexity | 310 | ··-·high_complexity |
| 292 | ··-·high_severity | 311 | ··-·high_severity |
| 293 | ··-·medium_disruption | 312 | ··-·medium_disruption |
| 294 | ··-·no_reboot_needed | 313 | ··-·no_reboot_needed |
| 295 | ··-·restrict_strategy | 314 | ··-·restrict_strategy |
| 296 | ··-·rpm_verify_hashes | 315 | ··-·rpm_verify_hashes |
| 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 298 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 299 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 300 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 301 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 302 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 303 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 304 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 305 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 306 | fi | ||
| 307 | else | ||
| 308 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 309 | fi | ||
| 310 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 316 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 311 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 317 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 312 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 318 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 313 | run·the·following·command·to·determine·which·package·owns·it: | 319 | run·the·following·command·to·determine·which·package·owns·it: |
| 314 | $·rpm·-qf·FILENAME | 320 | $·rpm·-qf·FILENAME |
| 315 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 321 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 316 | $·sudo·rpm·--restore·PACKAGENAME | 322 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 335, 14 lines modified | Offset 335, 46 lines modified | ||
| 335 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 335 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 336 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 336 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 337 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 337 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 338 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 338 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 339 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 339 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 340 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 340 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 341 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 341 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 347 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 348 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 349 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 350 | declare·-A·SETPERMS_RPM_DICT | ||
| 351 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 352 | #·is·expected·by·the·RPM·database | ||
| 353 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 354 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 355 | do | ||
| 356 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 357 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 358 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 359 | done | ||
| 360 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 361 | #·correct·values | ||
| 362 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 363 | do | ||
| 364 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 365 | done | ||
| 366 | else | ||
| 367 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 368 | fi | ||
| 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 370 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 371 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 372 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 373 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 347 | -·name:·Gather·the·package·facts | 374 | -·name:·Gather·the·package·facts |
| 348 | ··package_facts: | 375 | ··package_facts: |
| Offset 450, 46 lines modified | Offset 482, 14 lines modified | ||
| 450 | ··-·PCI-DSSv4-11.5.2 | 482 | ··-·PCI-DSSv4-11.5.2 |
| 451 | ··-·high_complexity | 483 | ··-·high_complexity |
| 452 | ··-·high_severity | 484 | ··-·high_severity |
| 453 | ··-·medium_disruption | 485 | ··-·medium_disruption |
| 454 | ··-·no_reboot_needed | 486 | ··-·no_reboot_needed |
| 455 | ··-·restrict_strategy | 487 | ··-·restrict_strategy |
| 456 | ··-·rpm_verify_ownership | 488 | ··-·rpm_verify_ownership |
| 457 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 458 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 459 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 460 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 461 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1121536/1129247 bytes (99.32%) of diff not shown. | |||
| Offset 15133, 184 lines modified | Offset 15133, 184 lines modified | ||
| 0003b1c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b1c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b1d0:·3533·3937·2220·7461·6269·6e64·6578·3d22··5397"·tabindex=" | 0003b1d0:·3533·3937·2220·7461·6269·6e64·6578·3d22··5397"·tabindex=" | ||
| 0003b1e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b1e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b1f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b1f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b200:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b200:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b210:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b210:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b220:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b220:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b230:·6469·6174·696f·6e20· | 0003b230:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b240:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b250:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b260:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b270:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b280:·2220·6964·3d22·6964·6d35·3339·3722·3e3c··"·id="idm5397">< | |||
| 0003b290:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b2a0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b2b0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b2c0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b2d0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b2e0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b240:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b250:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b260:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b270:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | |||
| 0003b280:·3937·223e·3c74·6162·6c65·2063·6c61·7373··97"><table·class | |||
| 0003b290:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b2a0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b2b0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b2c0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b2d0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b2e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b2f0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b300:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b310:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b320:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b330:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b340:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b350:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b360:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b370:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b380:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003b390:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b3a0:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b3b0:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b3c0:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b3d0:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b3e0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b3f0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b400:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b410:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b | 0003b2f0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b430:·2223·6964·6d35·3339·3822·2074·6162·696e··"#idm5398"·tabin | |||
| 0003b440:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b450:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b460:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b470:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b480:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b490:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003b | 0003b300:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003b310:·7267·6574·3d22·2369·646d·3533·3938·2220··rget="#idm5398"· | |||
| 0003b320:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b330:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b340:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b350:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b360:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b370:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b380:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003b | 0003b390:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b | 0003b3a0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b | 0003b3b0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b | 0003b3c0:·643d·2269·646d·3533·3938·223e·3c74·6162··d="idm5398"><tab | ||
| 0003b | 0003b3d0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003b | 0003b3e0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003b | 0003b3f0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003b | 0003b400:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003b | 0003b410:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003b | 0003b420:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b | 0003b430:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b | 0003b440:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b57 | 0003b450:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003b460:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b | 0003b470:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b | 0003b480:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b | 0003b490:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b | 0003b4a0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 0003b | 0003b4b0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b5e0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003b5f0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003b600:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003b610:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003b620:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003b630:·2d20·4343·452d·3833·3036·372d·390a·2020··-·CCE-83067-9.·· | |||
| 0003b640:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b650:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 0003b660:·4553·2d31·322d·3031·3034·3939·0a20·202d··ES-12-010499.··- | |||
| 0003b670:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b680:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b690:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b6a0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b6b0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b6c0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b6d0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b6e0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b6f0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b700:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b710:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b720:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003b730:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b740:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b750:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b760:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b770:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b780:·656e·3a20·2722·6b65·726e·656c·2d64·6566··en:·'"kernel-def | |||
| 0003b790:·6175·6c74·2220·696e·2061·6e73·6962·6c65··ault"·in·ansible | |||
| 0003b | 0003b4c0:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | ||
| 0003b4d0:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 0003b4e0:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 0003b4f0:·706c·6174·666f·726d·730a·6966·2072·706d··platforms.if·rpm | |||
| 0003b500:·202d·2d71·7569·6574·202d·7120·6b65·726e···--quiet·-q·kern | |||
| 0003b510:·656c·2d64·6566·6175·6c74·3b20·7468·656e··el-default;·then | |||
| 0003b520:·0a0a·7a79·7070·6572·2069·6e73·7461·6c6c··..zypper·install | |||
| 0003b530:·202d·7920·2261·6964·6522·0a0a·656c·7365···-y·"aide"..else | |||
| 0003b540:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003b550:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003b560:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003b570:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003b580:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003b590:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| Max diff block lines reached; 20538454/20562494 bytes (99.88%) of diff not shown. | |||
| Offset 15138, 184 lines modified | Offset 15138, 184 lines modified | ||
| 0003b210:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b210:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b220:·6964·6d35·3339·3722·2074·6162·696e·6465··idm5397"·tabinde | 0003b220:·6964·6d35·3339·3722·2074·6162·696e·6465··idm5397"·tabinde | ||
| 0003b230:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b230:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b240:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b240:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b250:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b250:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b260:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b260:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b270:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b270:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b280:·656d·6564·6961·7469·6f6e·20 | 0003b280:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b290:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b2a0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b2b0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b2c0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b2d0:·7073·6522·2069·643d·2269·646d·3533·3937··pse"·id="idm5397 | |||
| 0003b290:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b2a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b2b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b2c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b2d0:·6d35·3339·3722·3e3c·7461·626c·6520·636c··m5397"><table·cl | |||
| 0003b2e0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b2f0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b300:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b310:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b320:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b330:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b340:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b350:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b360:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b370:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b380:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b390:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b3a0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b3b0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b | 0003b2e0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 0003b2f0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b300:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b310:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b320:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b330:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b340:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b350:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b360:·2d74·6172·6765·743d·2223·6964·6d35·3339··-target="#idm539 | |||
| 0003b370:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003b380:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b390:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b3a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b3b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b3c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b3d0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003b3d0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b3e0:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b3f0:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b400:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b410:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b420:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b430:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003b440:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b450:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b460:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b470:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b480:·6574·3d22·2369·646d·3533·3938·2220·7461··et="#idm5398"·ta | |||
| 0003b490:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b4a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b4b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b4c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b4d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b4e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b4f0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b | 0003b3e0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b | 0003b3f0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b | 0003b400:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b | 0003b410:·2220·6964·3d22·6964·6d35·3339·3822·3e3c··"·id="idm5398">< | ||
| 0003b | 0003b420:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003b | 0003b430:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003b | 0003b440:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003b57 | 0003b450:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003b | 0003b460:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003b | 0003b470:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003b | 0003b480:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b490:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003b | 0003b4a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b | 0003b4b0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b | 0003b4c0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b | 0003b4d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b4e0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003b | 0003b4f0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0003b | 0003b500:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003b630:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b640:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b650:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b660:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b670:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b680:·0a20·202d·2043·4345·2d38·3330·3637·2d39··.··-·CCE-83067-9 | |||
| 0003b690:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b6a0:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b6b0:·2d53·4c45·532d·3132·2d30·3130·3439·390a··-SLES-12-010499. | |||
| 0003b6c0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b6d0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b6e0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b6f0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b700:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b710:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b720:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b730:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b740:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b750:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b760:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b770:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b780:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003b790:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b7a0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b7b0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b7c0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b7d0:·2077·6865·6e3a·2027·226b·6572·6e65·6c2d···when:·'"kernel- | |||
| 0003b7e0:·6465·6661·756c·7422·2069·6e20·616e·7369··default"·in·ansi | |||
| 0003b | 0003b510:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 0003b520:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0003b530:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0003b540:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0003b550:·7270·6d20·2d2d·7175·6965·7420·2d71·206b··rpm·--quiet·-q·k | |||
| 0003b560:·6572·6e65·6c2d·6465·6661·756c·743b·2074··ernel-default;·t | |||
| 0003b570:·6865·6e0a·0a7a·7970·7065·7220·696e·7374··hen..zypper·inst | |||
| 0003b580:·616c·6c20·2d79·2022·6169·6465·220a·0a65··all·-y·"aide"..e | |||
| 0003b590:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | |||
| 0003b5a0:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | |||
| 0003b5b0:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | |||
| 0003b5c0:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | |||
| 0003b5d0:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | |||
| Max diff block lines reached; 20763031/20787071 bytes (99.88%) of diff not shown. | |||
| Offset 15124, 184 lines modified | Offset 15124, 184 lines modified | ||
| 0003b130:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b130:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b140:·6d35·3339·3722·2074·6162·696e·6465·783d··m5397"·tabindex= | 0003b140:·6d35·3339·3722·2074·6162·696e·6465·783d··m5397"·tabindex= | ||
| 0003b150:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b150:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b160:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b160:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b170:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b170:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b180:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b180:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b190:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b190:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b1a0:·6564·6961·7469·6f6e·20 | 0003b1a0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b1b0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b1c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b1d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b1e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b1f0:·6522·2069·643d·2269·646d·3533·3937·223e··e"·id="idm5397"> | |||
| 0003b200:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b210:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b220:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b230:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b240:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b250:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b1b0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b1c0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b1d0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b1e0:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b1f0:·3339·3722·3e3c·7461·626c·6520·636c·6173··397"><table·clas | |||
| 0003b200:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b210:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b220:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b230:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b240:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b250:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b260:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b270:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b280:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b290:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b2a0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b2b0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b2c0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b2d0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b2e0:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003b2f0:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003b300:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003b310:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003b320:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003b330:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003b340:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003b350:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b360:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b370:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b380:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b | 0003b260:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003b3a0:·3d22·2369·646d·3533·3938·2220·7461·6269··="#idm5398"·tabi | |||
| 0003b3b0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b3c0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b3d0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b3e0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b3f0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b400:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b | 0003b270:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 0003b280:·6172·6765·743d·2223·6964·6d35·3339·3822··arget="#idm5398" | |||
| 0003b290:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b2a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b2b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b2c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b2d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b2e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b2f0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003b | 0003b300:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b | 0003b310:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b | 0003b320:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b | 0003b330:·6964·3d22·6964·6d35·3339·3822·3e3c·7461··id="idm5398"><ta | ||
| 0003b46 | 0003b340:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003b | 0003b350:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003b | 0003b360:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003b | 0003b370:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003b | 0003b380:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b | 0003b390:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003b | 0003b3a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b3b0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003b | 0003b3c0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b | 0003b3d0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003b | 0003b3e0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003b | 0003b3f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b400:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b | 0003b410:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | ||
| 0003b | 0003b420:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b550:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003b560:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003b570:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003b580:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003b590:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003b5a0:·202d·2043·4345·2d38·3330·3637·2d39·0a20···-·CCE-83067-9.· | |||
| 0003b5b0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b5c0:·0a20·202d·2044·4953·412d·5354·4947·2d53··.··-·DISA-STIG-S | |||
| 0003b5d0:·4c45·532d·3132·2d30·3130·3439·390a·2020··LES-12-010499.·· | |||
| 0003b5e0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b5f0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b600:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b610:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b620:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b630:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b640:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b650:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b660:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b670:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b680:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b690:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003b6a0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b6b0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b6c0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b6d0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b6e0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b6f0:·6865·6e3a·2027·226b·6572·6e65·6c2d·6465··hen:·'"kernel-de | |||
| 0003b700:·6661·756c·7422·2069·6e20·616e·7369·626c··fault"·in·ansibl | |||
| 0003b | 0003b430:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 0003b440:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 0003b450:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 0003b460:·2070·6c61·7466·6f72·6d73·0a69·6620·7270···platforms.if·rp | |||
| 0003b470:·6d20·2d2d·7175·6965·7420·2d71·206b·6572··m·--quiet·-q·ker | |||
| 0003b480:·6e65·6c2d·6465·6661·756c·743b·2074·6865··nel-default;·the | |||
| 0003b490:·6e0a·0a7a·7970·7065·7220·696e·7374·616c··n..zypper·instal | |||
| 0003b4a0:·6c20·2d79·2022·6169·6465·220a·0a65·6c73··l·-y·"aide"..els | |||
| 0003b4b0:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0003b4c0:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0003b4d0:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0003b4e0:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0003b4f0:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0003b500:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| Max diff block lines reached; 8258944/8282984 bytes (99.71%) of diff not shown. | |||
| Offset 122, 26 lines modified | Offset 122, 32 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | incl | 138 | #·Remediation·is·applicable·only·in·certain·platforms |
| 139 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | 140 | zypper·install·-y·"aide" | |
| 141 | else | ||
| 142 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 143 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | -·name:·Gather·the·package·facts | 149 | -·name:·Gather·the·package·facts |
| 146 | ··package_facts: | 150 | ··package_facts: |
| Offset 174, 32 lines modified | Offset 180, 26 lines modified | ||
| 174 | ··-·PCI-DSSv4-11.5.2 | 180 | ··-·PCI-DSSv4-11.5.2 |
| 175 | ··-·enable_strategy | 181 | ··-·enable_strategy |
| 176 | ··-·low_complexity | 182 | ··-·low_complexity |
| 177 | ··-·low_disruption | 183 | ··-·low_disruption |
| 178 | ··-·medium_severity | 184 | ··-·medium_severity |
| 179 | ··-·no_reboot_needed | 185 | ··-·no_reboot_needed |
| 180 | ··-·package_aide_installed | 186 | ··-·package_aide_installed |
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | [[packages]] | ||
| 183 | name·=·"aide" | ||
| 184 | version·=·"*" | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 192 | include·install_aide | ||
| 190 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 191 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 192 | zypper·install·-y·"aide" | ||
| 193 | else | ||
| 194 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 195 | 193 | class·install_aide·{ | |
| 194 | ··package·{·'aide': | ||
| 195 | ····ensure·=>·'installed', | ||
| 196 | ··} | ||
| 197 | } | ||
| 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 197 | Run·the·following·command·to·generate·a·new·database: | 199 | Run·the·following·command·to·generate·a·new·database: |
| 198 | $·sudo·/usr/bin/aide·--init | 200 | $·sudo·/usr/bin/aide·--init |
| 199 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 200 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 202 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 201 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 203 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 202 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 204 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 227, 14 lines modified | Offset 227, 29 lines modified | ||
| 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 230 | ·············_\x8c_\x8i_\x8s············1.4.1 | 230 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 236 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 237 | zypper·-q·--no-remote·ref | ||
| 238 | zypper·install·-y·"aide" | ||
| 239 | /usr/bin/aide·--init | ||
| 240 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 241 | else | ||
| 242 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 243 | fi | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Gather·the·package·facts | 249 | -·name:·Gather·the·package·facts |
| 240 | ··package_facts: | 250 | ··package_facts: |
| Offset 347, 29 lines modified | Offset 362, 14 lines modified | ||
| 347 | ··-·PCI-DSSv4-11.5.2 | 362 | ··-·PCI-DSSv4-11.5.2 |
| 348 | ··-·aide_build_database | 363 | ··-·aide_build_database |
| 349 | ··-·low_complexity | 364 | ··-·low_complexity |
| 350 | ··-·low_disruption | 365 | ··-·low_disruption |
| 351 | ··-·medium_severity | 366 | ··-·medium_severity |
| 352 | ··-·no_reboot_needed | 367 | ··-·no_reboot_needed |
| 353 | ··-·restrict_strategy | 368 | ··-·restrict_strategy |
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 355 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 356 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 357 | zypper·-q·--no-remote·ref | ||
| 358 | zypper·install·-y·"aide" | ||
| 359 | /usr/bin/aide·--init | ||
| 360 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 361 | else | ||
| 362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 363 | fi | ||
| Max diff block lines reached; 950757/955482 bytes (99.51%) of diff not shown. | |||
| Offset 14800, 192 lines modified | Offset 14800, 192 lines modified | ||
| 00039cf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 00039cf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 00039d00:·3831·3136·2220·7461·6269·6e64·6578·3d22··8116"·tabindex=" | 00039d00:·3831·3136·2220·7461·6269·6e64·6578·3d22··8116"·tabindex=" | ||
| 00039d10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00039d10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00039d20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00039d20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00039d30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00039d30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00039d40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00039d40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00039d50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00039d50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00039d60:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 00039d70:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00039d80:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00039d90:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00039da0:·6c61·7073·6522·2069·643d·2269·646d·3831··lapse"·id="idm81 | |||
| 00039db0:·3136·223e·3c74·6162·6c65·2063·6c61·7373··16"><table·class | |||
| 00039dc0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00039dd0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00039de0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00039df0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00039e00:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00039e10:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00039e20:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00039e30:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00039e40:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039e50:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00039e60:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00039e70:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00039e80:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00039e90:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00039ea0:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 00039eb0:·7564·6520·696e·7374·616c·6c5f·646e·662d··ude·install_dnf- | |||
| 00039ec0:·6175·746f·6d61·7469·630a·0a63·6c61·7373··automatic..class | |||
| 00039ed0:·2069·6e73·7461·6c6c·5f64·6e66·2d61·7574···install_dnf-aut | |||
| 00039ee0:·6f6d·6174·6963·207b·0a20·2070·6163·6b61··omatic·{.··packa | |||
| 00039ef0:·6765·207b·2027·646e·662d·6175·746f·6d61··ge·{·'dnf-automa | |||
| 00039f00:·7469·6327·3a0a·2020·2020·656e·7375·7265··tic':.····ensure | |||
| 00039f10:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 00039f20:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 00039f30:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00039f40:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00039f50:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00039f60:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00039f70:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00039f80:·3831·3137·2220·7461·6269·6e64·6578·3d22··8117"·tabindex=" | |||
| 00039f90:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00039fa0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00039fb0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00039fc0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00039fd0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00039 | 00039d60:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 00039d70:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 00039d80:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00039d90:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00039da0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00039db0:·2220·6964·3d22·6964·6d38·3131·3622·3e3c··"·id="idm8116">< | |||
| 00039dc0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 00039dd0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 00039de0:·646e·662d·6175·746f·6d61·7469·6322·0a76··dnf-automatic".v | |||
| 00039df0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 00039e00:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00039e10:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00039e20:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00039e30:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00039e40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00039e50:·6964·6d38·3131·3722·2074·6162·696e·6465··idm8117"·tabinde | |||
| 00039e60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00039e70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00039e80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00039e90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00039ea0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00039eb0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 00039 | 00039ec0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0003 | 00039ed0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003 | 00039ee0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003 | 00039ef0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | ||
| 0003 | 00039f00:·3131·3722·3e3c·7461·626c·6520·636c·6173··117"><table·clas | ||
| 0003 | 00039f10:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003 | 00039f20:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003 | 00039f30:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003 | 00039f40:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003 | 00039f50:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003 | 00039f60:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003 | 00039f70:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003 | 00039f80:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003 | 00039f90:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003 | 00039fa0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003 | 00039fb0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003 | 00039fc0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003 | 00039fd0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003 | 00039fe0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003 | 00039ff0:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | ||
| 0003a000:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003a010:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003a020:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003a030:·6d73·0a69·6620·2120·2820·7b20·7270·6d20··ms.if·!·(·{·rpm· | |||
| 0003a040:·2d2d·7175·6965·7420·2d71·206b·6572·6e65··--quiet·-q·kerne | |||
| 0003a050:·6c20·3b7d·2026·616d·703b·2661·6d70·3b20··l·;}·&&· | |||
| 0003a130:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003a140:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003a150:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003a160:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003a170:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003a180:·2d39·3134·3736·2d32·0a20·202d·2065·6e61··-91476-2.··-·ena | |||
| 0003a190:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003a1a0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003a1b0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003a1c0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003a1d0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003a1e0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003a1f0:·7061·636b·6167·655f·646e·662d·6175·746f··package_dnf-auto | |||
| 0003a200:·6d61·7469·635f·696e·7374·616c·6c65·640a··matic_installed. | |||
| 0003a210:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003a220:·646e·662d·6175·746f·6d61·7469·6320·6973··dnf-automatic·is | |||
| 0003a230:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003a240:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003a250:·646e·662d·6175·746f·6d61·7469·630a·2020··dnf-automatic.·· | |||
| 0003a260:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003a270:·0a20·2077·6865·6e3a·206e·6f74·2028·2022··.··when:·not·(·" | |||
| 0003a280:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003a290:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003a2a0:·7320·616e·6420·2272·706d·2d6f·7374·7265··s·and·"rpm-ostre | |||
| 0003a2b0:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | |||
| 0003a2c0:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| 0003a2d0:·2061·6e64·2022·626f·6f74·6322·2069·6e20···and·"bootc"·in· | |||
| 0003a2e0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003a2f0:·636b·6167·6573·2061·6e64·206e·6f74·2022··ckages·and·not·" | |||
| 0003a300:·6f70·656e·7368·6966·742d·6b75·6265·6c65··openshift-kubele | |||
| 0003a310:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | |||
| 0003a320:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| Max diff block lines reached; 2132398/2157542 bytes (98.83%) of diff not shown. | |||
| Offset 88, 26 lines modified | Offset 88, 33 lines modified | ||
| 88 | ·············suitable·for·automatic,·regular·execution. | 88 | ·············suitable·for·automatic,·regular·execution. |
| 89 | Severity: ···medium | 89 | Severity: ···medium |
| 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 91 | Identifiers:·CCE-91476-2 | 91 | Identifiers:·CCE-91476-2 |
| 92 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 92 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 93 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 93 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 94 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 94 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 95 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 96 | [[packages]] | ||
| 97 | name·=·"dnf-automatic" | ||
| 98 | version·=·"*" | ||
| 95 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 96 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 97 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 98 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 99 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 100 | 104 | #·Remediation·is·applicable·only·in·certain·platforms | |
| 105 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 106 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 101 | class·install_dnf-automatic·{ | ||
| 102 | ··package·{·'dnf-automatic': | ||
| 103 | ····ensure·=>·'installed', | ||
| 104 | ··} | ||
| 105 | 107 | zypper·install·-y·"dnf-automatic" | |
| 108 | else | ||
| 109 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 110 | fi | ||
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 111 | -·name:·Gather·the·package·facts | 116 | -·name:·Gather·the·package·facts |
| 112 | ··package_facts: | 117 | ··package_facts: |
| Offset 134, 33 lines modified | Offset 141, 26 lines modified | ||
| 134 | ··-·CCE-91476-2 | 141 | ··-·CCE-91476-2 |
| 135 | ··-·enable_strategy | 142 | ··-·enable_strategy |
| 136 | ··-·low_complexity | 143 | ··-·low_complexity |
| 137 | ··-·low_disruption | 144 | ··-·low_disruption |
| 138 | ··-·medium_severity | 145 | ··-·medium_severity |
| 139 | ··-·no_reboot_needed | 146 | ··-·no_reboot_needed |
| 140 | ··-·package_dnf-automatic_installed | 147 | ··-·package_dnf-automatic_installed |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | [[packages]] | ||
| 143 | name·=·"dnf-automatic" | ||
| 144 | version·=·"*" | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | include·install_dnf-automatic | ||
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 151 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 152 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 153 | zypper·install·-y·"dnf-automatic" | ||
| 154 | else | ||
| 155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 156 | fi | 154 | class·install_dnf-automatic·{ |
| 155 | ··package·{·'dnf-automatic': | ||
| 156 | ····ensure·=>·'installed', | ||
| 157 | ··} | ||
| 158 | } | ||
| 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 159 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 158 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically | 160 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically |
| 159 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 161 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 160 | automatic.conf. | 162 | automatic.conf. |
| 161 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the | 163 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the |
| 162 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security | 164 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security |
| 163 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage | 165 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage |
| Offset 171, 14 lines modified | Offset 171, 57 lines modified | ||
| 171 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 171 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 172 | Identifiers:·CCE-91474-7 | 172 | Identifiers:·CCE-91474-7 |
| 173 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 173 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 174 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 174 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 175 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 175 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 176 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 | 176 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 |
| 177 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 177 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 180 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 181 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 182 | found=false | ||
| 183 | #·set·value·in·all·files·if·they·contain·section·or·key | ||
| 184 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do | ||
| 185 | ····if·[·!·-e·"$f"·];·then | ||
| 186 | ········continue | ||
| 187 | ····fi | ||
| 188 | ····#·find·key·in·section·and·change·value | ||
| 189 | ····if·grep·-qzosP·"[[:space:]]*\[commands\]([^\n\[]*\n+)+?[[:space:]]*apply_updates" | ||
| 190 | "$f";·then | ||
| 191 | ············sed·-i·"s/apply_updates[^(\n)]*/apply_updates=yes/"·"$f" | ||
| 192 | ············found=true | ||
| 193 | ····#·find·section·and·add·key·=·value·to·it | ||
| 194 | ····elif·grep·-qs·"[[:space:]]*\[commands\]"·"$f";·then | ||
| 195 | ············sed·-i·"/[[:space:]]*\[commands\]/a·apply_updates=yes"·"$f" | ||
| 196 | ············found=true | ||
| 197 | ····fi | ||
| 198 | done | ||
| 199 | #·if·section·not·in·any·file,·append·section·with·key·=·value·to·FIRST·file·in·files | ||
| 200 | parameter | ||
| 201 | if·!·$found·;·then | ||
| 202 | ····file=$(echo·"/etc/dnf/automatic.conf"·|·cut·-f1·-d·'·') | ||
| 203 | ····mkdir·-p·"$(dirname·"$file")" | ||
| 204 | ····echo·-e·"[commands]\napply_updates=yes"·>>·"$file" | ||
| 205 | fi | ||
| 206 | else | ||
| 207 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 208 | fi | ||
| Max diff block lines reached; 161076/166249 bytes (96.89%) of diff not shown. | |||
| Offset 15170, 184 lines modified | Offset 15170, 184 lines modified | ||
| 0003b410:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b410:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b420:·646d·3533·3937·2220·7461·6269·6e64·6578··dm5397"·tabindex | 0003b420:·646d·3533·3937·2220·7461·6269·6e64·6578··dm5397"·tabindex | ||
| 0003b430:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b430:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b440:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b440:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b450:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b450:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b460:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b460:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b470:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b470:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b480:·6d65·6469·6174·696f·6e20· | 0003b480:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b490:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b4a0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b4b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b4c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b4d0:·7365·2220·6964·3d22·6964·6d35·3339·3722··se"·id="idm5397" | |||
| 0003b490:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b4a0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b4b0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b4c0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b4d0:·3533·3937·223e·3c74·6162·6c65·2063·6c61··5397"><table·cla | |||
| 0003b4e0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b4f0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b500:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b510:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b520:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b530:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b540:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b550:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b560:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b570:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b580:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b590:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b5a0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b5b0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b | 0003b4e0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 0003b4f0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b500:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b510:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b520:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b530:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b5d0:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b5e0:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b5f0:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b600:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b610:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b620:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b630:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b640:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b650:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b660:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b | 0003b540:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0003b680:·743d·2223·6964·6d35·3339·3822·2074·6162··t="#idm5398"·tab | |||
| 0003b690:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b6a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b6b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b6c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b6d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b6e0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b | 0003b550:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0003b560:·7461·7267·6574·3d22·2369·646d·3533·3938··target="#idm5398 | |||
| 0003b570:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b580:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b590:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b5a0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b5b0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b5c0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b5d0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b | 0003b5e0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b | 0003b5f0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b | 0003b600:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b | 0003b610:·2069·643d·2269·646d·3533·3938·223e·3c74···id="idm5398"><t | ||
| 0003b | 0003b620:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003b | 0003b630:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003b | 0003b640:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b | 0003b650:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003b | 0003b660:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003b | 0003b670:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003b | 0003b680:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b690:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b | 0003b6a0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b | 0003b6b0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b | 0003b6c0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b | 0003b6d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b6e0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b | 0003b6f0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | ||
| 0003b | 0003b700:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003b830:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003b840:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003b850:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003b860:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003b870:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003b880:·2020·2d20·4343·452d·3833·3036·372d·390a····-·CCE-83067-9. | |||
| 0003b890:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b8a0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b8b0:·534c·4553·2d31·322d·3031·3034·3939·0a20··SLES-12-010499.· | |||
| 0003b8c0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b8d0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b8e0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b8f0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b900:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b910:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b920:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b930:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b940:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b950:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b960:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b970:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003b980:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b990:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b9a0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b9b0:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b9c0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b9d0:·7768·656e·3a20·2722·6b65·726e·656c·2d64··when:·'"kernel-d | |||
| 0003b9e0:·6566·6175·6c74·2220·696e·2061·6e73·6962··efault"·in·ansib | |||
| 0003b | 0003b710:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | ||
| 0003b720:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003b730:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003b740:·6e20·706c·6174·666f·726d·730a·6966·2072··n·platforms.if·r | |||
| 0003b750:·706d·202d·2d71·7569·6574·202d·7120·6b65··pm·--quiet·-q·ke | |||
| 0003b760:·726e·656c·2d64·6566·6175·6c74·3b20·7468··rnel-default;·th | |||
| 0003b770:·656e·0a0a·7a79·7070·6572·2069·6e73·7461··en..zypper·insta | |||
| 0003b780:·6c6c·202d·7920·2261·6964·6522·0a0a·656c··ll·-y·"aide"..el | |||
| 0003b790:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | |||
| 0003b7a0:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | |||
| 0003b7b0:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | |||
| 0003b7c0:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | |||
| 0003b7d0:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | |||
| 0003b7e0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b7f0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| Max diff block lines reached; 19674368/19698408 bytes (99.88%) of diff not shown. | |||
| Offset 15148, 184 lines modified | Offset 15148, 184 lines modified | ||
| 0003b2b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b2b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b2c0:·2223·6964·6d35·3339·3722·2074·6162·696e··"#idm5397"·tabin | 0003b2c0:·2223·6964·6d35·3339·3722·2074·6162·696e··"#idm5397"·tabin | ||
| 0003b2d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b2d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b2e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b2e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b2f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b2f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b300:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b300:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b310:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b310:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b320:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b320:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b330:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b340:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b3 | 0003b330:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003b340:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b350:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b360:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b370:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | |||
| 0003b380:·3937·223e·3c70·7265·3e3c·636f·6465·3e0a··97"><pre><code>. | |||
| 0003b390:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b3a0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b3b0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b3c0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b3d0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b3e0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b3 | 0003b3f0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003b400:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003b410:·3339·3822·2074·6162·696e·6465·783d·2230··398"·tabindex="0 | |||
| 0003b420:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b430:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b440:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b450:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b460:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b470:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b370:·6964·6d35·3339·3722·3e3c·7461·626c·6520··idm5397"><table· | |||
| 0003b380:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b390:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b3a0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b3b0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b3c0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b3d0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b3e0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b3f0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b400:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b410:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b420:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b430:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b440:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b450:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b460:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b470:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b480:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b490:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b4a0:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b4b0:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b4c0:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b4d0:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003b4e0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b4f0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b500:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b510:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b520:·7267·6574·3d22·2369·646d·3533·3938·2220··rget="#idm5398"· | |||
| 0003b530:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b540:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b550:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b560:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b570:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b580:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b590:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b | 0003b480:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003b | 0003b490:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b | 0003b4a0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b | 0003b4b0:·7365·2220·6964·3d22·6964·6d35·3339·3822··se"·id="idm5398" | ||
| 0003b | 0003b4c0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b | 0003b4d0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b | 0003b4e0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b | 0003b4f0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b | 0003b500:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b | 0003b510:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003b | 0003b520:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b | 0003b530:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b | 0003b540:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003b550:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b | 0003b560:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b | 0003b570:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b | 0003b580:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b | 0003b590:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | ||
| 0003b | 0003b5a0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b6d0:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | |||
| 0003b6e0:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | |||
| 0003b6f0:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | |||
| 0003b700:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | |||
| 0003b710:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | |||
| 0003b720:·733a·0a20·202d·2043·4345·2d38·3330·3637··s:.··-·CCE-83067 | |||
| 0003b730:·2d39·0a20·202d·2043·4a49·532d·352e·3130··-9.··-·CJIS-5.10 | |||
| 0003b740:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b750:·4947·2d53·4c45·532d·3132·2d30·3130·3439··IG-SLES-12-01049 | |||
| 0003b760:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003b770:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b780:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b790:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b7a0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b7b0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b7c0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b7d0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b7e0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b7f0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b800:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b810:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b820:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003b830:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b840:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b850:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b860:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b870:·0a20·2077·6865·6e3a·2027·226b·6572·6e65··.··when:·'"kerne | |||
| 0003b880:·6c2d·6465·6661·756c·7422·2069·6e20·616e··l-default"·in·an | |||
| 0003b | 0003b5b0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0003b5c0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b5d0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b5e0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b5f0:·6620·7270·6d20·2d2d·7175·6965·7420·2d71··f·rpm·--quiet·-q | |||
| 0003b600:·206b·6572·6e65·6c2d·6465·6661·756c·743b···kernel-default; | |||
| 0003b610:·2074·6865·6e0a·0a7a·7970·7065·7220·696e···then..zypper·in | |||
| 0003b620:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b630:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003b640:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003b650:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003b660:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003b670:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003b680:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| Max diff block lines reached; 8627531/8651571 bytes (99.72%) of diff not shown. | |||
| Offset 125, 26 lines modified | Offset 125, 32 lines modified | ||
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 128 | ·············_\x8c_\x8i_\x8s············1.4.1 | 128 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | incl | 141 | #·Remediation·is·applicable·only·in·certain·platforms |
| 142 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 138 | class·install_aide·{ | ||
| 139 | ··package·{·'aide': | ||
| 140 | ····ensure·=>·'installed', | ||
| 141 | ··} | ||
| 142 | 143 | zypper·install·-y·"aide" | |
| 144 | else | ||
| 145 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 146 | fi | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 148 | -·name:·Gather·the·package·facts | 152 | -·name:·Gather·the·package·facts |
| 149 | ··package_facts: | 153 | ··package_facts: |
| Offset 177, 32 lines modified | Offset 183, 26 lines modified | ||
| 177 | ··-·PCI-DSSv4-11.5.2 | 183 | ··-·PCI-DSSv4-11.5.2 |
| 178 | ··-·enable_strategy | 184 | ··-·enable_strategy |
| 179 | ··-·low_complexity | 185 | ··-·low_complexity |
| 180 | ··-·low_disruption | 186 | ··-·low_disruption |
| 181 | ··-·medium_severity | 187 | ··-·medium_severity |
| 182 | ··-·no_reboot_needed | 188 | ··-·no_reboot_needed |
| 183 | ··-·package_aide_installed | 189 | ··-·package_aide_installed |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | [[packages]] | ||
| 186 | name·=·"aide" | ||
| 187 | version·=·"*" | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 195 | include·install_aide | ||
| 193 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 194 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 195 | zypper·install·-y·"aide" | ||
| 196 | else | ||
| 197 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 198 | 196 | class·install_aide·{ | |
| 197 | ··package·{·'aide': | ||
| 198 | ····ensure·=>·'installed', | ||
| 199 | ··} | ||
| 200 | } | ||
| 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 200 | Run·the·following·command·to·generate·a·new·database: | 202 | Run·the·following·command·to·generate·a·new·database: |
| 201 | $·sudo·/usr/bin/aide·--init | 203 | $·sudo·/usr/bin/aide·--init |
| 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 204 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 203 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 205 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 204 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 206 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 205 | generated·database·can·be·installed·as·follows: | 207 | generated·database·can·be·installed·as·follows: |
| Offset 230, 14 lines modified | Offset 230, 29 lines modified | ||
| 230 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 230 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 231 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 231 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 233 | ·············_\x8c_\x8i_\x8s············1.4.1 | 233 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 234 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 234 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 235 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 235 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 236 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 236 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 238 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 239 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 240 | zypper·-q·--no-remote·ref | ||
| 241 | zypper·install·-y·"aide" | ||
| 242 | /usr/bin/aide·--init | ||
| 243 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 244 | else | ||
| 245 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 246 | fi | ||
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 247 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 238 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 248 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 239 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 249 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 240 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 250 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 241 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 251 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 242 | -·name:·Gather·the·package·facts | 252 | -·name:·Gather·the·package·facts |
| 243 | ··package_facts: | 253 | ··package_facts: |
| Offset 350, 29 lines modified | Offset 365, 14 lines modified | ||
| 350 | ··-·PCI-DSSv4-11.5.2 | 365 | ··-·PCI-DSSv4-11.5.2 |
| 351 | ··-·aide_build_database | 366 | ··-·aide_build_database |
| 352 | ··-·low_complexity | 367 | ··-·low_complexity |
| 353 | ··-·low_disruption | 368 | ··-·low_disruption |
| 354 | ··-·medium_severity | 369 | ··-·medium_severity |
| 355 | ··-·no_reboot_needed | 370 | ··-·no_reboot_needed |
| 356 | ··-·restrict_strategy | 371 | ··-·restrict_strategy |
| 357 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 358 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 359 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 360 | zypper·-q·--no-remote·ref | ||
| 361 | zypper·install·-y·"aide" | ||
| 362 | /usr/bin/aide·--init | ||
| 363 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 364 | else | ||
| 365 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 366 | fi | ||
| Max diff block lines reached; 1024548/1029395 bytes (99.53%) of diff not shown. | |||
| Offset 15134, 184 lines modified | Offset 15134, 184 lines modified | ||
| 0003b1d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003b1d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b1e0:·743d·2223·6964·6d35·3339·3722·2074·6162··t="#idm5397"·tab | 0003b1e0:·743d·2223·6964·6d35·3339·3722·2074·6162··t="#idm5397"·tab | ||
| 0003b1f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003b1f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b200:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003b200:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b210:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003b210:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b220:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003b220:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b230:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003b230:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b240:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003b240:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003b250:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b260:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b2 | 0003b250:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 0003b260:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b270:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b280:·70 | 0003b280:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b290:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b2a0:·3533·3937·223e·3c70·7265·3e3c·636f·6465··5397"><pre><code | |||
| 0003b2b0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b2c0:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b2d0:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b2e0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b2f0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b300:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b310:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b320:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b330:·6d35·3339·3822·2074·6162·696e·6465·783d··m5398"·tabindex= | |||
| 0003b340:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b350:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b360:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b370:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b380:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b390:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b290:·3d22·6964·6d35·3339·3722·3e3c·7461·626c··="idm5397"><tabl | |||
| 0003b2a0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b2b0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b2c0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b2d0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b2e0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b2f0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b300:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b310:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b320:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b330:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b340:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b350:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b360:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b370:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b380:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b390:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003b3a0:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003b3b0:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003b3c0:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003b3d0:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003b3e0:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003b3f0:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003b400:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b410:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b420:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b430:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b440:·7461·7267·6574·3d22·2369·646d·3533·3938··target="#idm5398 | |||
| 0003b450:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b460:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b470:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b480:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b490:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b4a0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b4b0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b | 0003b3a0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 0003b | 0003b3b0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b | 0003b3c0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b | 0003b3d0:·6170·7365·2220·6964·3d22·6964·6d35·3339··apse"·id="idm539 | ||
| 0003b | 0003b3e0:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | ||
| 0003b | 0003b3f0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003b | 0003b400:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b | 0003b410:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003b | 0003b420:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003b | 0003b430:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b | 0003b440:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b57 | 0003b450:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003b | 0003b460:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b | 0003b470:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b | 0003b480:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003b | 0003b490:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003b | 0003b4a0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003b | 0003b4b0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | ||
| 0003b | 0003b4c0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003b | 0003b4d0:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 0003b600:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003b610:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003b620:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003b630:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003b640:·6167·733a·0a20·202d·2043·4345·2d38·3330··ags:.··-·CCE-830 | |||
| 0003b650:·3637·2d39·0a20·202d·2043·4a49·532d·352e··67-9.··-·CJIS-5. | |||
| 0003b660:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b670:·5354·4947·2d53·4c45·532d·3132·2d30·3130··STIG-SLES-12-010 | |||
| 0003b680:·3439·390a·2020·2d20·4e49·5354·2d38·3030··499.··-·NIST-800 | |||
| 0003b690:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b6a0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b6b0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b6c0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b6d0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b6e0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b6f0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b700:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b710:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b720:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b730:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b740:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003b750:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b760:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b770:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b780:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b790:·6e74·0a20·2077·6865·6e3a·2027·226b·6572··nt.··when:·'"ker | |||
| 0003b7a0:·6e65·6c2d·6465·6661·756c·7422·2069·6e20··nel-default"·in· | |||
| 0003b7b0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003b | 0003b4e0:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 0003b4f0:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 0003b500:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 0003b510:·0a69·6620·7270·6d20·2d2d·7175·6965·7420··.if·rpm·--quiet· | |||
| 0003b520:·2d71·206b·6572·6e65·6c2d·6465·6661·756c··-q·kernel-defaul | |||
| 0003b530:·743b·2074·6865·6e0a·0a7a·7970·7065·7220··t;·then..zypper· | |||
| 0003b540:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003b550:·220a·0a65·6c73·650a·2020·2020·2667·743b··"..else.····> | |||
| 0003b560:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003b570:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003b580:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003b590:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003b5a0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| Max diff block lines reached; 8369921/8393961 bytes (99.71%) of diff not shown. | |||
| Offset 122, 26 lines modified | Offset 122, 32 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | incl | 138 | #·Remediation·is·applicable·only·in·certain·platforms |
| 139 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | 140 | zypper·install·-y·"aide" | |
| 141 | else | ||
| 142 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 143 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | -·name:·Gather·the·package·facts | 149 | -·name:·Gather·the·package·facts |
| 146 | ··package_facts: | 150 | ··package_facts: |
| Offset 174, 32 lines modified | Offset 180, 26 lines modified | ||
| 174 | ··-·PCI-DSSv4-11.5.2 | 180 | ··-·PCI-DSSv4-11.5.2 |
| 175 | ··-·enable_strategy | 181 | ··-·enable_strategy |
| 176 | ··-·low_complexity | 182 | ··-·low_complexity |
| 177 | ··-·low_disruption | 183 | ··-·low_disruption |
| 178 | ··-·medium_severity | 184 | ··-·medium_severity |
| 179 | ··-·no_reboot_needed | 185 | ··-·no_reboot_needed |
| 180 | ··-·package_aide_installed | 186 | ··-·package_aide_installed |
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | [[packages]] | ||
| 183 | name·=·"aide" | ||
| 184 | version·=·"*" | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 192 | include·install_aide | ||
| 190 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 191 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 192 | zypper·install·-y·"aide" | ||
| 193 | else | ||
| 194 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 195 | 193 | class·install_aide·{ | |
| 194 | ··package·{·'aide': | ||
| 195 | ····ensure·=>·'installed', | ||
| 196 | ··} | ||
| 197 | } | ||
| 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 197 | Run·the·following·command·to·generate·a·new·database: | 199 | Run·the·following·command·to·generate·a·new·database: |
| 198 | $·sudo·/usr/bin/aide·--init | 200 | $·sudo·/usr/bin/aide·--init |
| 199 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 200 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 202 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 201 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 203 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 202 | generated·database·can·be·installed·as·follows: | 204 | generated·database·can·be·installed·as·follows: |
| Offset 227, 14 lines modified | Offset 227, 29 lines modified | ||
| 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 230 | ·············_\x8c_\x8i_\x8s············1.4.1 | 230 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 236 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 237 | zypper·-q·--no-remote·ref | ||
| 238 | zypper·install·-y·"aide" | ||
| 239 | /usr/bin/aide·--init | ||
| 240 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 241 | else | ||
| 242 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 243 | fi | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Gather·the·package·facts | 249 | -·name:·Gather·the·package·facts |
| 240 | ··package_facts: | 250 | ··package_facts: |
| Offset 347, 29 lines modified | Offset 362, 14 lines modified | ||
| 347 | ··-·PCI-DSSv4-11.5.2 | 362 | ··-·PCI-DSSv4-11.5.2 |
| 348 | ··-·aide_build_database | 363 | ··-·aide_build_database |
| 349 | ··-·low_complexity | 364 | ··-·low_complexity |
| 350 | ··-·low_disruption | 365 | ··-·low_disruption |
| 351 | ··-·medium_severity | 366 | ··-·medium_severity |
| 352 | ··-·no_reboot_needed | 367 | ··-·no_reboot_needed |
| 353 | ··-·restrict_strategy | 368 | ··-·restrict_strategy |
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 355 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 356 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 357 | zypper·-q·--no-remote·ref | ||
| 358 | zypper·install·-y·"aide" | ||
| 359 | /usr/bin/aide·--init | ||
| 360 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 361 | else | ||
| 362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 363 | fi | ||
| Max diff block lines reached; 995042/999889 bytes (99.52%) of diff not shown. | |||
| Offset 15161, 184 lines modified | Offset 15161, 184 lines modified | ||
| 0003b380:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b380:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b390:·2369·646d·3533·3937·2220·7461·6269·6e64··#idm5397"·tabind | 0003b390:·2369·646d·3533·3937·2220·7461·6269·6e64··#idm5397"·tabind | ||
| 0003b3a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b3a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b3b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b3b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b3c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b3c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b3d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b3d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b3e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b3e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b3f0:·5265·6d65·6469·6174·696f·6e20· | 0003b3f0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b400:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b410:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b420:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b430:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b440:·6170·7365·2220·6964·3d22·6964·6d35·3339··apse"·id="idm539 | |||
| 0003b400:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003b410:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b420:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b430:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b440:·646d·3533·3937·223e·3c74·6162·6c65·2063··dm5397"><table·c | |||
| 0003b450:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b460:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b470:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b480:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b490:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b4a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b4b0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b4c0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b4d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b4e0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b4f0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b500:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b510:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b520:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b | 0003b450:·3722·3e3c·7072·653e·3c63·6f64·653e·0a5b··7"><pre><code>.[ | ||
| 0003b460:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b470:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b480:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b490:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b4a0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b4b0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b4c0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b4d0:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | |||
| 0003b4e0:·3938·2220·7461·6269·6e64·6578·3d22·3022··98"·tabindex="0" | |||
| 0003b4f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b500:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b510:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b520:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b530:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b540:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b540:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003b550:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003b560:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003b570:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003b580:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003b590:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003b5a0:·0a7d·0a3c·2f63·6f64·653e·3c2f·7072·653e··.}.</code></pre> | |||
| 0003b5b0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b5c0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b5d0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b5e0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b5f0:·6765·743d·2223·6964·6d35·3339·3822·2074··get="#idm5398"·t | |||
| 0003b600:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b610:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b620:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b630:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b640:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b650:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b660:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b | 0003b550:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 0003b | 0003b560:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003b | 0003b570:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003b | 0003b580:·6522·2069·643d·2269·646d·3533·3938·223e··e"·id="idm5398"> | ||
| 0003b | 0003b590:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003b | 0003b5a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003b | 0003b5b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003b | 0003b5c0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003b | 0003b5d0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003b | 0003b5e0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b | 0003b5f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b | 0003b600:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003b | 0003b610:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b620:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b | 0003b630:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b | 0003b640:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b | 0003b650:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003b | 0003b660:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 0003b | 0003b670:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b7a0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003b7b0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003b7c0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003b7d0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003b7e0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003b7f0:·3a0a·2020·2d20·4343·452d·3833·3036·372d··:.··-·CCE-83067- | |||
| 0003b800:·390a·2020·2d20·434a·4953·2d35·2e31·302e··9.··-·CJIS-5.10. | |||
| 0003b810:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b820:·472d·534c·4553·2d31·322d·3031·3034·3939··G-SLES-12-010499 | |||
| 0003b830:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b840:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b850:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b860:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b870:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b880:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b890:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b8a0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b8b0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b8c0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b8d0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b8e0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b8f0:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003b900:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b910:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b920:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b930:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b940:·2020·7768·656e·3a20·2722·6b65·726e·656c····when:·'"kernel | |||
| 0003b950:·2d64·6566·6175·6c74·2220·696e·2061·6e73··-default"·in·ans | |||
| 0003b | 0003b680:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | ||
| 0003b690:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003b6a0:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003b6b0:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003b6c0:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | |||
| 0003b6d0:·6b65·726e·656c·2d64·6566·6175·6c74·3b20··kernel-default;· | |||
| 0003b6e0:·7468·656e·0a0a·7a79·7070·6572·2069·6e73··then..zypper·ins | |||
| 0003b6f0:·7461·6c6c·202d·7920·2261·6964·6522·0a0a··tall·-y·"aide".. | |||
| 0003b700:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | |||
| 0003b710:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | |||
| 0003b720:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | |||
| 0003b730:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | |||
| 0003b740:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | |||
| Max diff block lines reached; 19591616/19615656 bytes (99.88%) of diff not shown. | |||
| Offset 15218, 414 lines modified | Offset 15218, 414 lines modified | ||
| 0003b710:·2d74·6172·6765·743d·2223·6964·6d35·3035··-target="#idm505 | 0003b710:·2d74·6172·6765·743d·2223·6964·6d35·3035··-target="#idm505 | ||
| 0003b720:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | 0003b720:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | ||
| 0003b730:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b730:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b740:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b740:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b750:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b750:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b760:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b760:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b770:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b770:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b780:·7469·6f6e·20 | 0003b780:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | ||
| 0003b790:·7 | 0003b790:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b7a0:· | 0003b7a0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b7b0:·6 | 0003b7b0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b7c0:· | 0003b7c0:·2220·6964·3d22·6964·6d35·3035·3622·3e3c··"·id="idm5056">< | ||
| 0003b7d0:·2 | 0003b7d0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 0003b7e0:· | 0003b7e0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 0003b7f0:· | 0003b7f0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | ||
| 0003b800:· | 0003b800:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | ||
| 0003b810:·6 | 0003b810:·6966·2021·2028·207b·2072·706d·202d·2d71··if·!·(·{·rpm·--q | ||
| 0003b820:· | 0003b820:·7569·6574·202d·7120·6b65·726e·656c·203b··uiet·-q·kernel·; | ||
| 0003b830:· | 0003b830:·7d20·2661·6d70·3b26·616d·703b·207b·2072··}·&&·{·r | ||
| 0003b840:·7 | 0003b840:·706d·202d·2d71·7569·6574·202d·7120·7270··pm·--quiet·-q·rp | ||
| 0003b850:· | 0003b850:·6d2d·6f73·7472·6565·203b·7d20·2661·6d70··m-ostree·;}·& | ||
| 0003b860:·3 | 0003b860:·3b26·616d·703b·207b·2072·706d·202d·2d71··;&·{·rpm·--q | ||
| 0003b870:· | 0003b870:·7569·6574·202d·7120·626f·6f74·6320·3b7d··uiet·-q·bootc·;} | ||
| 0003b880:· | 0003b880:·2026·616d·703b·2661·6d70·3b20·7b20·2120···&&·{·!· | ||
| 0003b890:· | 0003b890:·7270·6d20·2d2d·7175·6965·7420·2d71·206f··rpm·--quiet·-q·o | ||
| 0003b8a0:·7 | 0003b8a0:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | ||
| 0003b8b0:· | 0003b8b0:·203b·7d20·293b·2074·6865·6e0a·0a23·2046···;}·);·then..#·F | ||
| 0003b8c0:·6 | 0003b8c0:·696e·6420·7768·6963·6820·6669·6c65·7320··ind·which·files· | ||
| 0003b8d0:· | 0003b8d0:·6861·7665·2069·6e63·6f72·7265·6374·2068··have·incorrect·h | ||
| 0003b8e0:·6 | 0003b8e0:·6173·6820·286e·6f74·2069·6e20·2f65·7463··ash·(not·in·/etc | ||
| 0003b8f0:· | 0003b8f0:·2c20·6265·6361·7573·6520·6f66·2074·6865··,·because·of·the | ||
| 0003b900:· | 0003b900:·2073·7973·7465·6d20·7265·6c61·7465·6420···system·related· | ||
| 0003b910:· | 0003b910:·636f·6e66·6967·2066·696c·6573·2920·616e··config·files)·an | ||
| 0003b920:· | 0003b920:·6420·7468·656e·2067·6574·2066·696c·6573··d·then·get·files | ||
| 0003b930:· | 0003b930:·206e·616d·6573·0a66·696c·6573·5f77·6974···names.files_wit | ||
| 0003b940:· | 0003b940:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b950:· | 0003b950:·3d22·2428·7270·6d20·2d56·6120·2d2d·6e6f··="$(rpm·-Va·--no | ||
| 0003b960:· | 0003b960:·636f·6e66·6967·207c·2067·7265·7020·2d45··config·|·grep·-E | ||
| 0003b970:· | 0003b970:·2027·5e2e·2e35·2720·7c20·6177·6b20·277b···'^..5'·|·awk·'{ | ||
| 0003b980:· | 0003b980:·7072·696e·7420·244e·467d·2720·2922·0a0a··print·$NF}'·)".. | ||
| 0003b990:· | 0003b990:·6966·205b·202d·6e20·2224·6669·6c65·735f··if·[·-n·"$files_ | ||
| 0003b9a0:· | 0003b9a0:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003b9b0:· | 0003b9b0:·6173·6822·205d·3b20·7468·656e·0a20·2020··ash"·];·then.··· | ||
| 0003b9c0:·2 | 0003b9c0:·2023·2046·726f·6d20·6669·6c65·7320·6e61···#·From·files·na | ||
| 0003b9d0:· | 0003b9d0:·6d65·7320·6765·7420·7061·636b·6167·6520··mes·get·package· | ||
| 0003b9e0:· | 0003b9e0:·6e61·6d65·7320·616e·6420·6368·616e·6765··names·and·change | ||
| 0003b9f0:·2 | 0003b9f0:·206e·6577·6c69·6e65·2074·6f20·7370·6163···newline·to·spac | ||
| 0003ba00:· | 0003ba00:·652c·2062·6563·6175·7365·2072·706d·2077··e,·because·rpm·w | ||
| 0003ba10:· | 0003ba10:·7269·7465·7320·6561·6368·2070·6163·6b61··rites·each·packa | ||
| 0003ba20:· | 0003ba20:·6765·2074·6f20·6e65·7720·6c69·6e65·0a20··ge·to·new·line.· | ||
| 0003ba30:· | 0003ba30:·2020·2070·6163·6b61·6765·735f·746f·5f72·····packages_to_r | ||
| 0003ba40:· | 0003ba40:·6569·6e73·7461·6c6c·3d22·2428·7270·6d20··einstall="$(rpm· | ||
| 0003ba50:· | 0003ba50:·2d71·6620·2466·696c·6573·5f77·6974·685f··-qf·$files_with_ | ||
| 0003ba60:· | 0003ba60:·696e·636f·7272·6563·745f·6861·7368·207c··incorrect_hash·| | ||
| 0003ba70:· | 0003ba70:·2074·7220·275c·6e27·2027·2027·2922·0a0a···tr·'\n'·'·')".. | ||
| 0003ba80:· | 0003ba80:·2020·2020·0a20·2020·207a·7970·7065·7220······.····zypper· | ||
| 0003ba90:·6 | 0003ba90:·696e·7374·616c·6c20·2d66·202d·7920·2470··install·-f·-y·$p | ||
| 0003baa0:· | 0003baa0:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | ||
| 0003bab0:·6 | 0003bab0:·7461·6c6c·0a20·2020·200a·6669·0a0a·656c··tall.····.fi..el | ||
| 0003bac0:· | 0003bac0:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | ||
| 0003bad0:· | 0003bad0:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | ||
| 0003bae0:· | 0003bae0:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | ||
| 0003baf0:·6 | 0003baf0:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | ||
| 0003bb00:· | 0003bb00:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | ||
| 0003bb10:·6 | 0003bb10:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0003bb20:· | 0003bb20:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0003bb30:· | 0003bb30:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0003bb40:·6 | 0003bb40:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0003bb50:· | 0003bb50:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003bb60:·6 | 0003bb60:·646d·3530·3537·2220·7461·6269·6e64·6578··dm5057"·tabindex | ||
| 0003bb70:· | 0003bb70:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003bb80:·6 | 0003bb80:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003bb90:· | 0003bb90:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003bba0:· | 0003bba0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003bbb0:·6 | 0003bbb0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003bbc0:·6 | 0003bbc0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003bbd0:· | 0003bbd0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003bbe0:· | 0003bbe0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003bbf0:· | 0003bbf0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003bc00:·6 | 0003bc00:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003bc10:· | 0003bc10:·6d35·3035·3722·3e3c·7461·626c·6520·636c··m5057"><table·cl | ||
| 0003bc20:·6 | 0003bc20:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003bc30:· | 0003bc30:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003bc40:· | 0003bc40:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003bc50:· | 0003bc50:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003bc60:·3 | 0003bc60:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003bc70:· | 0003bc70:·3e3c·7464·3e68·6967·683c·2f74·643e·3c2f··><td>high</td></ | ||
| 0003bc80:· | 0003bc80:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003bc90:· | 0003bc90:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | ||
| 0003bca0:· | 0003bca0:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003bcb0:· | 0003bcb0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003bcc0:· | 0003bcc0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003bcd0:· | 0003bcd0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003bce0:· | 0003bce0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003bcf0:·2 | 0003bcf0:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 0003bd00:· | 0003bd00:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003bd10:· | 0003bd10:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | ||
| 0003bd20:· | 0003bd20:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | ||
| 0003bd30:· | 0003bd30:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | ||
| 0003bd40:·6 | 0003bd40:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | ||
| 0003bd50:· | 0003bd50:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | ||
| 0003bd60:·0a20·202d·20 | 0003bd60:·0a20·202d·2043·4345·2d39·3136·3332·2d30··.··-·CCE-91632-0 | ||
| 0003bd70:· | 0003bd70:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | ||
| 0003bd80:· | 0003bd80:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003bd90:· | 0003bd90:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003bda0:· | 0003bda0:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003bdb0:· | 0003bdb0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bdc0:·2 | 0003bdc0:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | ||
| 0003bdd0:· | 0003bdd0:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | ||
| 0003bde0:· | 0003bde0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bdf0:· | 0003bdf0:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003be00:· | 0003be00:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003be10:· | 0003be10:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003be20:· | 0003be20:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003be30:· | 0003be30:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003be40:·2 | 0003be40:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003be50:·2 | 0003be50:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003be60:· | 0003be60:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003be70:· | 0003be70:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003be80:·6 | 0003be80:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| 0003be90:· | 0003be90:·2d20·6d65·6469·756d·5f64·6973·7275·7074··-·medium_disrupt | ||
| 0003bea0:·6 | 0003bea0:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | ||
| 0003beb0:· | 0003beb0:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | ||
| 0003bec0:· | 0003bec0:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | ||
| 0003bed0:· | 0003bed0:·202d·2072·706d·5f76·6572·6966·795f·6861···-·rpm_verify_ha | ||
| 0003bee0:· | 0003bee0:·7368·6573·0a0a·2d20·6e61·6d65·3a20·2753··shes..-·name:·'S | ||
| Max diff block lines reached; 18534927/18590707 bytes (99.70%) of diff not shown. | |||
| Offset 134, 14 lines modified | Offset 134, 36 lines modified | ||
| 134 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 134 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 135 | ····························A.14.2.3,·A.14.2.4 | 135 | ····························A.14.2.3,·A.14.2.4 |
| 136 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 136 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 137 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 137 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 138 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 138 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 139 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 139 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 140 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 140 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 142 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 143 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 144 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 145 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 146 | get·files·names | ||
| 147 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 148 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 149 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 150 | new·line | ||
| 151 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 152 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 153 | fi | ||
| 154 | else | ||
| 155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 156 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 146 | -·name:·Gather·the·package·facts | 162 | -·name:·Gather·the·package·facts |
| 147 | ··package_facts: | 163 | ··package_facts: |
| Offset 314, 36 lines modified | Offset 336, 14 lines modified | ||
| 314 | ··-·PCI-DSSv4-11.5.2 | 336 | ··-·PCI-DSSv4-11.5.2 |
| 315 | ··-·high_complexity | 337 | ··-·high_complexity |
| 316 | ··-·high_severity | 338 | ··-·high_severity |
| 317 | ··-·medium_disruption | 339 | ··-·medium_disruption |
| 318 | ··-·no_reboot_needed | 340 | ··-·no_reboot_needed |
| 319 | ··-·restrict_strategy | 341 | ··-·restrict_strategy |
| 320 | ··-·rpm_verify_hashes | 342 | ··-·rpm_verify_hashes |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 323 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 324 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 325 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 326 | get·files·names | ||
| 327 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 328 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 329 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 330 | new·line | ||
| 331 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 332 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 333 | fi | ||
| 334 | else | ||
| 335 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 336 | fi | ||
| 337 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 343 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 338 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, | 344 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, |
| 339 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, | 345 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, |
| 340 | which·can·be·found·with: | 346 | which·can·be·found·with: |
| 341 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 347 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 342 | run·the·following·command·to·determine·which·package·owns·it: | 348 | run·the·following·command·to·determine·which·package·owns·it: |
| 343 | $·rpm·-qf·FILENAME | 349 | $·rpm·-qf·FILENAME |
| Offset 425, 14 lines modified | Offset 425, 53 lines modified | ||
| 425 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 425 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 426 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 426 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 427 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 427 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 428 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 428 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 429 | ····························SRG-OS-000278-GPOS-00108 | 429 | ····························SRG-OS-000278-GPOS-00108 |
| 430 | ·············_\x8c_\x8i_\x8s············6.1.1 | 430 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 431 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 431 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 432 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 433 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 434 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 435 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 436 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 437 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 438 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 439 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 440 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 441 | declare·-A·SETPERMS_RPM_DICT | ||
| 442 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 443 | #·is·expected·by·the·RPM·database | ||
| 444 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 445 | $NF·}') | ||
| 446 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 447 | do | ||
| 448 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 449 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 450 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 451 | ········do | ||
| 452 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 453 | duplicates. | ||
| 454 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 455 | ········done | ||
| 456 | done | ||
| 457 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 458 | #·correct·values | ||
| 459 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 460 | do | ||
| 461 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 462 | done | ||
| 463 | else | ||
| 464 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 465 | fi | ||
| 432 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 466 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 433 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 467 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 434 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 468 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 435 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 469 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 436 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 470 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 437 | -·name:·Gather·the·package·facts | 471 | -·name:·Gather·the·package·facts |
| 438 | ··package_facts: | 472 | ··package_facts: |
| Max diff block lines reached; 1473903/1479556 bytes (99.62%) of diff not shown. | |||
| Offset 15163, 415 lines modified | Offset 15163, 415 lines modified | ||
| 0003b3a0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b3a0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b3b0:·6964·6d35·3035·3622·2074·6162·696e·6465··idm5056"·tabinde | 0003b3b0:·6964·6d35·3035·3622·2074·6162·696e·6465··idm5056"·tabinde | ||
| 0003b3c0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b3c0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b3d0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b3d0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b3e0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b3e0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b3f0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b3f0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | Diff chunk too large, falling back to line-by-line diff (401 lines added, 401 lines removed) | |
| 0003b400:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b400:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b410:·656d·6564·6961·7469·6f6e·20 | 0003b410:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | ||
| 0003b420:· | 0003b420:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0003b430:·6 | 0003b430:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b440:· | 0003b440:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b450:· | 0003b450:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | ||
| 0003b460:· | 0003b460:·3035·3622·3e3c·7072·653e·3c63·6f64·653e··056"><pre><code> | ||
| 0003b470:· | 0003b470:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | ||
| 0003b480:· | 0003b480:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | ||
| 0003b490:· | 0003b490:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | ||
| 0003b4a0:·6 | 0003b4a0:·666f·726d·730a·6966·2021·2028·207b·2072··forms.if·!·(·{·r | ||
| 0003b4b0:· | 0003b4b0:·706d·202d·2d71·7569·6574·202d·7120·6b65··pm·--quiet·-q·ke | ||
| 0003b4c0:· | 0003b4c0:·726e·656c·203b·7d20·2661·6d70·3b26·616d··rnel·;}·&&am | ||
| 0003b4d0:· | 0003b4d0:·703b·207b·2072·706d·202d·2d71·7569·6574··p;·{·rpm·--quiet | ||
| 0003b4e0:· | 0003b4e0:·202d·7120·7270·6d2d·6f73·7472·6565·203b···-q·rpm-ostree·; | ||
| 0003b4f0:· | 0003b4f0:·7d20·2661·6d70·3b26·616d·703b·207b·2072··}·&&·{·r | ||
| 0003b500:· | 0003b500:·706d·202d·2d71·7569·6574·202d·7120·626f··pm·--quiet·-q·bo | ||
| 0003b510:· | 0003b510:·6f74·6320·3b7d·2026·616d·703b·2661·6d70··otc·;}·&& | ||
| 0003b520:· | 0003b520:·3b20·7b20·2120·7270·6d20·2d2d·7175·6965··;·{·!·rpm·--quie | ||
| 0003b530:·74 | 0003b530:·7420·2d71·206f·7065·6e73·6869·6674·2d6b··t·-q·openshift-k | ||
| 0003b540:· | 0003b540:·7562·656c·6574·203b·7d20·293b·2074·6865··ubelet·;}·);·the | ||
| 0003b550:· | 0003b550:·6e0a·0a23·2046·696e·6420·7768·6963·6820··n..#·Find·which· | ||
| 0003b560:· | 0003b560:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | ||
| 0003b570:·7 | 0003b570:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | ||
| 0003b580:· | 0003b580:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | ||
| 0003b590:· | 0003b590:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | ||
| 0003b5a0:·6 | 0003b5a0:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | ||
| 0003b5b0:· | 0003b5b0:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | ||
| 0003b5c0:· | 0003b5c0:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | ||
| 0003b5d0:· | 0003b5d0:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003b5e0:· | 0003b5e0:·745f·6861·7368·3d22·2428·7270·6d20·2d56··t_hash="$(rpm·-V | ||
| 0003b5f0:· | 0003b5f0:·6120·2d2d·6e6f·636f·6e66·6967·207c·2067··a·--noconfig·|·g | ||
| 0003b600:· | 0003b600:·7265·7020·2d45·2027·5e2e·2e35·2720·7c20··rep·-E·'^..5'·|· | ||
| 0003b610:· | 0003b610:·6177·6b20·277b·7072·696e·7420·244e·467d··awk·'{print·$NF} | ||
| 0003b620:· | 0003b620:·2720·2922·0a0a·6966·205b·202d·6e20·2224··'·)"..if·[·-n·"$ | ||
| 0003b630:· | 0003b630:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | ||
| 0003b640:· | 0003b640:·7265·6374·5f68·6173·6822·205d·3b20·7468··rect_hash"·];·th | ||
| 0003b650:· | 0003b650:·656e·0a20·2020·2023·2046·726f·6d20·6669··en.····#·From·fi | ||
| 0003b660:· | 0003b660:·6c65·7320·6e61·6d65·7320·6765·7420·7061··les·names·get·pa | ||
| 0003b670:· | 0003b670:·636b·6167·6520·6e61·6d65·7320·616e·6420··ckage·names·and· | ||
| 0003b680:· | 0003b680:·6368·616e·6765·206e·6577·6c69·6e65·2074··change·newline·t | ||
| 0003b690:· | 0003b690:·6f20·7370·6163·652c·2062·6563·6175·7365··o·space,·because | ||
| 0003b6a0:· | 0003b6a0:·2072·706d·2077·7269·7465·7320·6561·6368···rpm·writes·each | ||
| 0003b6b0:· | 0003b6b0:·2070·6163·6b61·6765·2074·6f20·6e65·7720···package·to·new· | ||
| 0003b6c0:·6 | 0003b6c0:·6c69·6e65·0a20·2020·2070·6163·6b61·6765··line.····package | ||
| 0003b6d0:· | 0003b6d0:·735f·746f·5f72·6569·6e73·7461·6c6c·3d22··s_to_reinstall=" | ||
| 0003b6e0:·2 | 0003b6e0:·2428·7270·6d20·2d71·6620·2466·696c·6573··$(rpm·-qf·$files | ||
| 0003b6f0:· | 0003b6f0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | ||
| 0003b700:·6 | 0003b700:·6861·7368·207c·2074·7220·275c·6e27·2027··hash·|·tr·'\n'·' | ||
| 0003b710:· | 0003b710:·2027·2922·0a0a·2020·2020·0a20·2020·207a···')"..····.····z | ||
| 0003b720:· | 0003b720:·7970·7065·7220·696e·7374·616c·6c20·2d66··ypper·install·-f | ||
| 0003b730:· | 0003b730:·202d·7920·2470·6163·6b61·6765·735f·746f···-y·$packages_to | ||
| 0003b740:·5 | 0003b740:·5f72·6569·6e73·7461·6c6c·0a20·2020·200a··_reinstall.····. | ||
| 0003b750:·6 | 0003b750:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | ||
| 0003b760:· | 0003b760:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | ||
| 0003b770:·6 | 0003b770:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | ||
| 0003b780:· | 0003b780:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | ||
| 0003b790:·6 | 0003b790:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | ||
| 0003b7a0:·6 | 0003b7a0:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | ||
| 0003b7b0:·2 | 0003b7b0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003b7c0:· | 0003b7c0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003b7d0:· | 0003b7d0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003b7e0:·61 | 0003b7e0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003b7f0:· | 0003b7f0:·6574·3d22·2369·646d·3530·3537·2220·7461··et="#idm5057"·ta | ||
| 0003b800:· | 0003b800:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b810:·2 | 0003b810:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b820:· | 0003b820:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b830:· | 0003b830:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b840:· | 0003b840:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b850:· | 0003b850:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b860:· | 0003b860:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 0003b870:· | 0003b870:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b880:·6 | 0003b880:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b890:·6 | 0003b890:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b8a0:·6 | 0003b8a0:·6964·3d22·6964·6d35·3035·3722·3e3c·7461··id="idm5057"><ta | ||
| 0003b8b0:· | 0003b8b0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003b8c0:· | 0003b8c0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003b8d0:· | 0003b8d0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003b8e0:· | 0003b8e0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003b8f0:· | 0003b8f0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b900:· | 0003b900:·793a·3c2f·7468·3e3c·7464·3e68·6967·683c··y:</th><td>high< | ||
| 0003b910:· | 0003b910:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b920:· | 0003b920:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b930:· | 0003b930:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | ||
| 0003b940:·3 | 0003b940:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b950:· | 0003b950:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b960:· | 0003b960:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b970:·3 | 0003b970:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b980:· | 0003b980:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | ||
| 0003b990:· | 0003b990:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003b9a0:· | 0003b9a0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | ||
| 0003b9b0:·53 | 0003b9b0:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | ||
| 0003b9c0:· | 0003b9c0:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | ||
| 0003b9d0:· | 0003b9d0:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | ||
| 0003b9e0:· | 0003b9e0:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | ||
| 0003b9f0:· | 0003b9f0:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | ||
| 0003ba00:· | 0003ba00:·3136·3332·2d30·0a20·202d·2043·4a49·532d··1632-0.··-·CJIS- | ||
| 0003ba10:· | 0003ba10:·352e·3130·2e34·2e31·0a20·202d·204e·4953··5.10.4.1.··-·NIS | ||
| 0003ba20:· | 0003ba20:·542d·3830·302d·3137·312d·332e·332e·380a··T-800-171-3.3.8. | ||
| 0003ba30:· | 0003ba30:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003ba40:· | 0003ba40:·2d33·2e34·2e31·0a20·202d·204e·4953·542d··-3.4.1.··-·NIST- | ||
| 0003ba50:· | 0003ba50:·3830·302d·3533·2d41·552d·3928·3329·0a20··800-53-AU-9(3).· | ||
| 0003ba60:· | 0003ba60:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003ba70:· | 0003ba70:·4d2d·3628·6329·0a20·202d·204e·4953·542d··M-6(c).··-·NIST- | ||
| 0003ba80:· | 0003ba80:·3830·302d·3533·2d43·4d2d·3628·6429·0a20··800-53-CM-6(d).· | ||
| 0003ba90:· | 0003ba90:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003baa0:· | 0003baa0:·492d·370a·2020·2d20·4e49·5354·2d38·3030··I-7.··-·NIST-800 | ||
| 0003bab0:· | 0003bab0:·2d35·332d·5349·2d37·2831·290a·2020·2d20··-53-SI-7(1).··-· | ||
| 0003bac0:· | 0003bac0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003bad0:· | 0003bad0:·2836·290a·2020·2d20·5043·492d·4453·532d··(6).··-·PCI-DSS- | ||
| 0003bae0:· | 0003bae0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | ||
| 0003baf0:· | 0003baf0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | ||
| 0003bb00:· | 0003bb00:·2d20·6869·6768·5f63·6f6d·706c·6578·6974··-·high_complexit | ||
| 0003bb10:· | 0003bb10:·790a·2020·2d20·6869·6768·5f73·6576·6572··y.··-·high_sever | ||
| 0003bb20:·6 | 0003bb20:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | ||
| 0003bb30:· | 0003bb30:·6973·7275·7074·696f·6e0a·2020·2d20·6e6f··isruption.··-·no | ||
| 0003bb40:· | 0003bb40:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | ||
| 0003bb50:· | 0003bb50:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | ||
| 0003bb60:· | 0003bb60:·7465·6779·0a20·202d·2072·706d·5f76·6572··tegy.··-·rpm_ver | ||
| 0003bb70:· | 0003bb70:·6966·795f·6861·7368·6573·0a0a·2d20·6e61··ify_hashes..-·na | ||
| Max diff block lines reached; 17192083/17248001 bytes (99.68%) of diff not shown. | |||
| Offset 124, 14 lines modified | Offset 124, 36 lines modified | ||
| 124 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 124 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 125 | ····························A.14.2.3,·A.14.2.4 | 125 | ····························A.14.2.3,·A.14.2.4 |
| 126 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 126 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 127 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 127 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 132 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 133 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 134 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 135 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 136 | get·files·names | ||
| 137 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 138 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 139 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 140 | new·line | ||
| 141 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 142 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 143 | fi | ||
| 144 | else | ||
| 145 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 146 | fi | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 136 | -·name:·Gather·the·package·facts | 152 | -·name:·Gather·the·package·facts |
| 137 | ··package_facts: | 153 | ··package_facts: |
| Offset 304, 36 lines modified | Offset 326, 14 lines modified | ||
| 304 | ··-·PCI-DSSv4-11.5.2 | 326 | ··-·PCI-DSSv4-11.5.2 |
| 305 | ··-·high_complexity | 327 | ··-·high_complexity |
| 306 | ··-·high_severity | 328 | ··-·high_severity |
| 307 | ··-·medium_disruption | 329 | ··-·medium_disruption |
| 308 | ··-·no_reboot_needed | 330 | ··-·no_reboot_needed |
| 309 | ··-·restrict_strategy | 331 | ··-·restrict_strategy |
| 310 | ··-·rpm_verify_hashes | 332 | ··-·rpm_verify_hashes |
| 311 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 312 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 313 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 314 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 315 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 316 | get·files·names | ||
| 317 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 318 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 319 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 320 | new·line | ||
| 321 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 322 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 323 | fi | ||
| 324 | else | ||
| 325 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 326 | fi | ||
| 327 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 333 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 328 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, | 334 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, |
| 329 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, | 335 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, |
| 330 | which·can·be·found·with: | 336 | which·can·be·found·with: |
| 331 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 337 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 332 | run·the·following·command·to·determine·which·package·owns·it: | 338 | run·the·following·command·to·determine·which·package·owns·it: |
| 333 | $·rpm·-qf·FILENAME | 339 | $·rpm·-qf·FILENAME |
| Offset 415, 14 lines modified | Offset 415, 53 lines modified | ||
| 415 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 415 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 416 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 416 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 417 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 417 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 418 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 418 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 419 | ····························SRG-OS-000278-GPOS-00108 | 419 | ····························SRG-OS-000278-GPOS-00108 |
| 420 | ·············_\x8c_\x8i_\x8s············6.1.1 | 420 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 421 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 421 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 422 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 423 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 424 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 425 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 426 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 427 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 428 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 429 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 430 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 431 | declare·-A·SETPERMS_RPM_DICT | ||
| 432 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 433 | #·is·expected·by·the·RPM·database | ||
| 434 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 435 | $NF·}') | ||
| 436 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 437 | do | ||
| 438 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 439 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 440 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 441 | ········do | ||
| 442 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 443 | duplicates. | ||
| 444 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 445 | ········done | ||
| 446 | done | ||
| 447 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 448 | #·correct·values | ||
| 449 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 450 | do | ||
| 451 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 452 | done | ||
| 453 | else | ||
| 454 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 455 | fi | ||
| 422 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 456 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 423 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 457 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 424 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 458 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 425 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 459 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 426 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 460 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 427 | -·name:·Gather·the·package·facts | 461 | -·name:·Gather·the·package·facts |
| 428 | ··package_facts: | 462 | ··package_facts: |
| Max diff block lines reached; 1288385/1294038 bytes (99.56%) of diff not shown. | |||
| Offset 14957, 120 lines modified | Offset 14957, 120 lines modified | ||
| 0003a6c0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003a6c0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003a6d0:·2223·6964·6d32·3436·3035·2220·7461·6269··"#idm24605"·tabi | 0003a6d0:·2223·6964·6d32·3436·3035·2220·7461·6269··"#idm24605"·tabi | ||
| 0003a6e0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003a6e0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003a6f0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003a6f0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003a700:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003a700:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003a710:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003a710:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003a720:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003a720:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003a730:·223e·5265·6d65·6469·6174·696f·6e20· | 0003a730:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | ||
| 0003a740:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003a750:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003a760:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003a770:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003a780:·3d22·6964·6d32·3436·3035·223e·3c74·6162··="idm24605"><tab | |||
| 0003a790:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003a7a0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003a7b0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003a7c0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003a7d0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003a7e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a7f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003a | 0003a740:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | ||
| 0003a750:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003a760:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003a770:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003a780:·646d·3234·3630·3522·3e3c·7461·626c·6520··dm24605"><table· | |||
| 0003a790:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003a7a0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003a7b0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003a7c0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003a7d0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003a7e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003a7f0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003a800:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003a810:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003a820:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003a830:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003a840:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003a850:·7465·6779·3a3c·2f74·683e·3c74·643e·636f··tegy:</th><td>co | |||
| 0003a860:·6e66·6967·7572·653c·2f74·643e·3c2f·7472··nfigure</td></tr | |||
| 0003a870:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003a880:·6f64·653e·6368·6772·7020·3020·2f65·7463··ode>chgrp·0·/etc | |||
| 0003a890:·2f70·6173·7377·640a·3c2f·636f·6465·3e3c··/passwd.</code>< | |||
| 0003a8a0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003a8b0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003a8c0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003a8d0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003a8e0:·612d·7461·7267·6574·3d22·2369·646d·3234··a-target="#idm24 | |||
| 0003a8f0:·3630·3622·2074·6162·696e·6465·783d·2230··606"·tabindex="0 | |||
| 0003a900:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003a910:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003a920:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003a930:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003a940:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003a950:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003a960:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003a970:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003a980:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003a990:·6c61·7073·6522·2069·643d·2269·646d·3234··lapse"·id="idm24 | |||
| 0003a9a0:·3630·3622·3e3c·7461·626c·6520·636c·6173··606"><table·clas | |||
| 0003a9b0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003a9c0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003a9d0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003a9e0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003a9f0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003a | 0003aa00:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003aa10:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003a820:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003a830:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003a840:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003a850:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003a860:·3e63·6f6e·6669·6775·7265·3c2f·7464·3e3c··>configure</td>< | |||
| 0003a870:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003a880:·3e3c·636f·6465·3e2d·206e·616d·653a·2054··><code>-·name:·T | |||
| 0003a890:·6573·7420·666f·7220·6578·6973·7465·6e63··est·for·existenc | |||
| 0003a8a0:·6520·2f65·7463·2f70·6173·7377·640a·2020··e·/etc/passwd.·· | |||
| 0003a8b0:·7374·6174·3a0a·2020·2020·7061·7468·3a20··stat:.····path:· | |||
| 0003a8c0:·2f65·7463·2f70·6173·7377·640a·2020·7265··/etc/passwd.··re | |||
| 0003a8d0:·6769·7374·6572·3a20·6669·6c65·5f65·7869··gister:·file_exi | |||
| 0003a8e0:·7374·730a·2020·7461·6773·3a0a·2020·2d20··sts.··tags:.··-· | |||
| 0003a8f0:·4343·452d·3931·3632·372d·300a·2020·2d20··CCE-91627-0.··-· | |||
| 0003a900:·434a·4953·2d35·2e35·2e32·2e32·0a20·202d··CJIS-5.5.2.2.··- | |||
| 0003a910:·204e·4953·542d·3830·302d·3533·2d41·432d···NIST-800-53-AC- | |||
| 0003a920:·3628·3129·0a20·202d·204e·4953·542d·3830··6(1).··-·NIST-80 | |||
| 0003a930:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003a940:·2050·4349·2d44·5353·2d52·6571·2d38·2e37···PCI-DSS-Req-8.7 | |||
| 0003a950:·2e63·0a20·202d·2050·4349·2d44·5353·7634··.c.··-·PCI-DSSv4 | |||
| 0003a960:·2d32·2e32·0a20·202d·2050·4349·2d44·5353··-2.2.··-·PCI-DSS | |||
| 0003a970:·7634·2d32·2e32·2e36·0a20·202d·2063·6f6e··v4-2.2.6.··-·con | |||
| 0003a980:·6669·6775·7265·5f73·7472·6174·6567·790a··figure_strategy. | |||
| 0003a990:·2020·2d20·6669·6c65·5f67·726f·7570·6f77····-·file_groupow | |||
| 0003a9a0:·6e65·725f·6574·635f·7061·7373·7764·0a20··ner_etc_passwd.· | |||
| 0003a9b0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003a9c0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003a9d0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003a9e0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003a9f0:·7265·626f·6f74·5f6e·6565·6465·640a·0a2d··reboot_needed..- | |||
| 0003aa00:·206e·616d·653a·2045·6e73·7572·6520·6772···name:·Ensure·gr | |||
| 0003aa10:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | |||
| 0003aa20:·6574·632f·7061·7373·7764·0a20·2066·696c··etc/passwd.··fil | |||
| 0003aa30:·653a·0a20·2020·2070·6174·683a·202f·6574··e:.····path:·/et | |||
| 0003aa40:·632f·7061·7373·7764·0a20·2020·2067·726f··c/passwd.····gro | |||
| 0003aa50:·7570·3a20·2730·270a·2020·7768·656e·3a20··up:·'0'.··when:· | |||
| 0003aa60:·6669·6c65·5f65·7869·7374·732e·7374·6174··file_exists.stat | |||
| 0003aa70:·2069·7320·6465·6669·6e65·6420·616e·6420···is·defined·and· | |||
| 0003aa80:·6669·6c65·5f65·7869·7374·732e·7374·6174··file_exists.stat | |||
| 0003aa90:·2e65·7869·7374·730a·2020·7461·6773·3a0a··.exists.··tags:. | |||
| 0003aaa0:·2020·2d20·4343·452d·3931·3632·372d·300a····-·CCE-91627-0. | |||
| 0003aab0:·2020·2d20·434a·4953·2d35·2e35·2e32·2e32····-·CJIS-5.5.2.2 | |||
| 0003aac0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003aad0:·2d41·432d·3628·3129·0a20·202d·204e·4953··-AC-6(1).··-·NIS | |||
| 0003aae0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003aaf0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003ab00:·2d38·2e37·2e63·0a20·202d·2050·4349·2d44··-8.7.c.··-·PCI-D | |||
| 0003ab10:·5353·7634·2d32·2e32·0a20·202d·2050·4349··SSv4-2.2.··-·PCI | |||
| 0003ab20:·2d44·5353·7634·2d32·2e32·2e36·0a20·202d··-DSSv4-2.2.6.··- | |||
| 0003ab30:·2063·6f6e·6669·6775·7265·5f73·7472·6174···configure_strat | |||
| 0003ab40:·6567·790a·2020·2d20·6669·6c65·5f67·726f··egy.··-·file_gro | |||
| 0003ab50:·7570·6f77·6e65·725f·6574·635f·7061·7373··upowner_etc_pass | |||
| 0003ab60:·7764·0a20·202d·206c·6f77·5f63·6f6d·706c··wd.··-·low_compl | |||
| 0003ab70:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003ab80:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003ab90:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003aba0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003abb0:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003abc0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003abd0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003abe0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| Max diff block lines reached; 31934/47142 bytes (67.74%) of diff not shown. | |||
| Offset 108, 14 lines modified | Offset 108, 20 lines modified | ||
| 108 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 108 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 109 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 109 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 111 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 111 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 112 | ·············_\x8c_\x8i_\x8s············6.1.2 | 112 | ·············_\x8c_\x8i_\x8s············6.1.2 |
| 113 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 113 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 120 | chgrp·0·/etc/passwd | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 120 | -·name:·Test·for·existence·/etc/passwd | 126 | -·name:·Test·for·existence·/etc/passwd |
| 121 | ··stat: | 127 | ··stat: |
| Offset 151, 20 lines modified | Offset 157, 14 lines modified | ||
| 151 | ··-·PCI-DSSv4-2.2.6 | 157 | ··-·PCI-DSSv4-2.2.6 |
| 152 | ··-·configure_strategy | 158 | ··-·configure_strategy |
| 153 | ··-·file_groupowner_etc_passwd | 159 | ··-·file_groupowner_etc_passwd |
| 154 | ··-·low_complexity | 160 | ··-·low_complexity |
| 155 | ··-·low_disruption | 161 | ··-·low_disruption |
| 156 | ··-·medium_severity | 162 | ··-·medium_severity |
| 157 | ··-·no_reboot_needed | 163 | ··-·no_reboot_needed |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 163 | chgrp·0·/etc/passwd | ||
| 164 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 164 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 165 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: | 165 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: |
| 166 | $·sudo·chown·root·/etc/passwd | 166 | $·sudo·chown·root·/etc/passwd |
| 167 | ·············The·/etc/passwd·file·contains·information·about·the·users·that·are | 167 | ·············The·/etc/passwd·file·contains·information·about·the·users·that·are |
| 168 | Rationale:···configured·on·the·system.·Protection·of·this·file·is·critical·for | 168 | Rationale:···configured·on·the·system.·Protection·of·this·file·is·critical·for |
| 169 | ·············system·security. | 169 | ·············system·security. |
| 170 | Severity: ···medium | 170 | Severity: ···medium |
| Offset 187, 14 lines modified | Offset 187, 20 lines modified | ||
| 187 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 187 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 188 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 188 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 189 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 189 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 190 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 190 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 191 | ·············_\x8c_\x8i_\x8s············6.1.2 | 191 | ·············_\x8c_\x8i_\x8s············6.1.2 |
| 192 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 192 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 193 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 | 193 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 199 | chown·0·/etc/passwd | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 199 | -·name:·Test·for·existence·/etc/passwd | 205 | -·name:·Test·for·existence·/etc/passwd |
| 200 | ··stat: | 206 | ··stat: |
| Offset 230, 20 lines modified | Offset 236, 14 lines modified | ||
| 230 | ··-·PCI-DSSv4-2.2.6 | 236 | ··-·PCI-DSSv4-2.2.6 |
| 231 | ··-·configure_strategy | 237 | ··-·configure_strategy |
| 232 | ··-·file_owner_etc_passwd | 238 | ··-·file_owner_etc_passwd |
| 233 | ··-·low_complexity | 239 | ··-·low_complexity |
| 234 | ··-·low_disruption | 240 | ··-·low_disruption |
| 235 | ··-·medium_severity | 241 | ··-·medium_severity |
| 236 | ··-·no_reboot_needed | 242 | ··-·no_reboot_needed |
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 238 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 239 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 240 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 241 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 242 | chown·0·/etc/passwd | ||
| 243 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 243 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 244 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: | 244 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: |
| 245 | $·sudo·chmod·0644·/etc/passwd | 245 | $·sudo·chmod·0644·/etc/passwd |
| 246 | ·············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world | 246 | ·············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world |
| 247 | Rationale:···the·risk·of·its·compromise·is·increased.·The·file·contains·the | 247 | Rationale:···the·risk·of·its·compromise·is·increased.·The·file·contains·the |
| 248 | ·············list·of·accounts·on·the·system·and·associated·information,·and | 248 | ·············list·of·accounts·on·the·system·and·associated·information,·and |
| 249 | ·············protection·of·this·file·is·critical·for·system·security. | 249 | ·············protection·of·this·file·is·critical·for·system·security. |
| Offset 267, 14 lines modified | Offset 267, 24 lines modified | ||
| 267 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 267 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 268 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 268 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 269 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 269 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 270 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 270 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 271 | ·············_\x8c_\x8i_\x8s············6.1.2 | 271 | ·············_\x8c_\x8i_\x8s············6.1.2 |
| 272 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 272 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 273 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 | 273 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 279 | chmod·u-xs,g-xws,o-xwt·/etc/passwd | ||
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 280 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 281 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 282 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 283 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 284 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 279 | -·name:·Test·for·existence·/etc/passwd | 285 | -·name:·Test·for·existence·/etc/passwd |
| 280 | ··stat: | 286 | ··stat: |
| Offset 310, 21 lines modified | Offset 320, 11 lines modified | ||
| 310 | ··-·PCI-DSSv4-2.2.6 | 320 | ··-·PCI-DSSv4-2.2.6 |
| 311 | ··-·configure_strategy | 321 | ··-·configure_strategy |
| 312 | ··-·file_permissions_etc_passwd | 322 | ··-·file_permissions_etc_passwd |
| 313 | ··-·low_complexity | 323 | ··-·low_complexity |
| 314 | ··-·low_disruption | 324 | ··-·low_disruption |
| 315 | ··-·medium_severity | 325 | ··-·medium_severity |
| 316 | ··-·no_reboot_needed | 326 | ··-·no_reboot_needed |
| 317 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 318 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 319 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 320 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 321 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 322 | chmod·u-xs,g-xws,o-xwt·/etc/passwd | ||
| 323 | Red·Hat·and·Red·Hat·Enterprise·Linux·are·either·registered·trademarks·or | 327 | Red·Hat·and·Red·Hat·Enterprise·Linux·are·either·registered·trademarks·or |
| Max diff block lines reached; 126/5465 bytes (2.31%) of diff not shown. | |||
| Offset 15106, 184 lines modified | Offset 15106, 184 lines modified | ||
| 0003b010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b020:·2223·6964·6d35·3339·3722·2074·6162·696e··"#idm5397"·tabin | 0003b020:·2223·6964·6d35·3339·3722·2074·6162·696e··"#idm5397"·tabin | ||
| 0003b030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b080:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b080:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b090:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b0a0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b0 | 0003b090:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003b0a0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b0b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b0c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b0d0:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | |||
| 0003b0e0:·3937·223e·3c70·7265·3e3c·636f·6465·3e0a··97"><pre><code>. | |||
| 0003b0f0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b100:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b110:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b120:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b130:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b140:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b | 0003b150:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003b160:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003b170:·3339·3822·2074·6162·696e·6465·783d·2230··398"·tabindex="0 | |||
| 0003b180:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b190:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b1a0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b1b0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b1c0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b1d0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b0d0:·6964·6d35·3339·3722·3e3c·7461·626c·6520··idm5397"><table· | |||
| 0003b0e0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b0f0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b100:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b110:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b120:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b130:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b140:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b150:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b160:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b170:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b180:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b190:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b1a0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b1b0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b1c0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b1d0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b1e0:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b1f0:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b200:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b210:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b220:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b230:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003b240:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b250:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b260:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b270:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b280:·7267·6574·3d22·2369·646d·3533·3938·2220··rget="#idm5398"· | |||
| 0003b290:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b2a0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b2b0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b2c0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b2d0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b2e0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b2f0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b | 0003b1e0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003b | 0003b1f0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b | 0003b200:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b | 0003b210:·7365·2220·6964·3d22·6964·6d35·3339·3822··se"·id="idm5398" | ||
| 0003b | 0003b220:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b | 0003b230:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b | 0003b240:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b | 0003b250:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b | 0003b260:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b | 0003b270:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003b | 0003b280:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b | 0003b290:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b | 0003b2a0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003b2b0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b | 0003b2c0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b | 0003b2d0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b | 0003b2e0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b | 0003b2f0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | ||
| 0003b | 0003b300:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b430:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | |||
| 0003b440:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | |||
| 0003b450:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | |||
| 0003b460:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | |||
| 0003b470:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | |||
| 0003b480:·733a·0a20·202d·2043·4345·2d38·3330·3637··s:.··-·CCE-83067 | |||
| 0003b490:·2d39·0a20·202d·2043·4a49·532d·352e·3130··-9.··-·CJIS-5.10 | |||
| 0003b4a0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b4b0:·4947·2d53·4c45·532d·3132·2d30·3130·3439··IG-SLES-12-01049 | |||
| 0003b4c0:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003b4d0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b4e0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b4f0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b500:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b510:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b520:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b530:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b540:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b550:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b560:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b570:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b580:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003b590:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b5a0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b5b0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b5c0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b5d0:·0a20·2077·6865·6e3a·2027·226b·6572·6e65··.··when:·'"kerne | |||
| 0003b5e0:·6c2d·6465·6661·756c·7422·2069·6e20·616e··l-default"·in·an | |||
| 0003b | 0003b310:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0003b320:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b330:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b340:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b350:·6620·7270·6d20·2d2d·7175·6965·7420·2d71··f·rpm·--quiet·-q | |||
| 0003b360:·206b·6572·6e65·6c2d·6465·6661·756c·743b···kernel-default; | |||
| 0003b370:·2074·6865·6e0a·0a7a·7970·7065·7220·696e···then..zypper·in | |||
| 0003b380:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b390:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003b3a0:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003b3b0:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003b3c0:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003b3d0:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003b3e0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| Max diff block lines reached; 19946350/19970390 bytes (99.88%) of diff not shown. | |||
| Offset 114, 26 lines modified | Offset 114, 32 lines modified | ||
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 117 | ·············_\x8c_\x8i_\x8s············1.4.1 | 117 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | incl | 130 | #·Remediation·is·applicable·only·in·certain·platforms |
| 131 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 127 | class·install_aide·{ | ||
| 128 | ··package·{·'aide': | ||
| 129 | ····ensure·=>·'installed', | ||
| 130 | ··} | ||
| 131 | 132 | zypper·install·-y·"aide" | |
| 133 | else | ||
| 134 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 135 | fi | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Gather·the·package·facts | 141 | -·name:·Gather·the·package·facts |
| 138 | ··package_facts: | 142 | ··package_facts: |
| Offset 166, 32 lines modified | Offset 172, 26 lines modified | ||
| 166 | ··-·PCI-DSSv4-11.5.2 | 172 | ··-·PCI-DSSv4-11.5.2 |
| 167 | ··-·enable_strategy | 173 | ··-·enable_strategy |
| 168 | ··-·low_complexity | 174 | ··-·low_complexity |
| 169 | ··-·low_disruption | 175 | ··-·low_disruption |
| 170 | ··-·medium_severity | 176 | ··-·medium_severity |
| 171 | ··-·no_reboot_needed | 177 | ··-·no_reboot_needed |
| 172 | ··-·package_aide_installed | 178 | ··-·package_aide_installed |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | [[packages]] | ||
| 175 | name·=·"aide" | ||
| 176 | version·=·"*" | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 184 | include·install_aide | ||
| 182 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 183 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 184 | zypper·install·-y·"aide" | ||
| 185 | else | ||
| 186 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 187 | 185 | class·install_aide·{ | |
| 186 | ··package·{·'aide': | ||
| 187 | ····ensure·=>·'installed', | ||
| 188 | ··} | ||
| 189 | } | ||
| 188 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 189 | Run·the·following·command·to·generate·a·new·database: | 191 | Run·the·following·command·to·generate·a·new·database: |
| 190 | $·sudo·/usr/bin/aide·--init | 192 | $·sudo·/usr/bin/aide·--init |
| 191 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 192 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 194 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 193 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 195 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 194 | generated·database·can·be·installed·as·follows: | 196 | generated·database·can·be·installed·as·follows: |
| Offset 219, 14 lines modified | Offset 219, 29 lines modified | ||
| 219 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 219 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 220 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 220 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 221 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 221 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 222 | ·············_\x8c_\x8i_\x8s············1.4.1 | 222 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 223 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 223 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 224 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 224 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 227 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 228 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 229 | zypper·-q·--no-remote·ref | ||
| 230 | zypper·install·-y·"aide" | ||
| 231 | /usr/bin/aide·--init | ||
| 232 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 233 | else | ||
| 234 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 235 | fi | ||
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 231 | -·name:·Gather·the·package·facts | 241 | -·name:·Gather·the·package·facts |
| 232 | ··package_facts: | 242 | ··package_facts: |
| Offset 339, 29 lines modified | Offset 354, 14 lines modified | ||
| 339 | ··-·PCI-DSSv4-11.5.2 | 354 | ··-·PCI-DSSv4-11.5.2 |
| 340 | ··-·aide_build_database | 355 | ··-·aide_build_database |
| 341 | ··-·low_complexity | 356 | ··-·low_complexity |
| 342 | ··-·low_disruption | 357 | ··-·low_disruption |
| 343 | ··-·medium_severity | 358 | ··-·medium_severity |
| 344 | ··-·no_reboot_needed | 359 | ··-·no_reboot_needed |
| 345 | ··-·restrict_strategy | 360 | ··-·restrict_strategy |
| 346 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 347 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 348 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 349 | zypper·-q·--no-remote·ref | ||
| 350 | zypper·install·-y·"aide" | ||
| 351 | /usr/bin/aide·--init | ||
| 352 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 353 | else | ||
| 354 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 355 | fi | ||
| Max diff block lines reached; 1464380/1469235 bytes (99.67%) of diff not shown. | |||
| Offset 15133, 184 lines modified | Offset 15133, 184 lines modified | ||
| 0003b1c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b1c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b1d0:·3633·3631·2220·7461·6269·6e64·6578·3d22··6361"·tabindex=" | 0003b1d0:·3633·3631·2220·7461·6269·6e64·6578·3d22··6361"·tabindex=" | ||
| 0003b1e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b1e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b1f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b1f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b200:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b200:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b210:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b210:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b220:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b220:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b230:·6469·6174·696f·6e20· | 0003b230:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b240:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b250:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b260:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b270:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b280:·2220·6964·3d22·6964·6d36·3336·3122·3e3c··"·id="idm6361">< | |||
| 0003b290:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b2a0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b2b0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b2c0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b2d0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b2e0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b240:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b250:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b260:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b270:·6c61·7073·6522·2069·643d·2269·646d·3633··lapse"·id="idm63 | |||
| 0003b280:·3631·223e·3c74·6162·6c65·2063·6c61·7373··61"><table·class | |||
| 0003b290:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b2a0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b2b0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b2c0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b2d0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b2e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b2f0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b300:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b310:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b320:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b330:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b340:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b350:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b360:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b370:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b380:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003b390:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b3a0:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b3b0:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b3c0:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b3d0:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b3e0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b3f0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b400:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b410:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b | 0003b2f0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b430:·2223·6964·6d36·3336·3222·2074·6162·696e··"#idm6362"·tabin | |||
| 0003b440:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b450:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b460:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b470:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b480:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b490:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003b | 0003b300:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003b310:·7267·6574·3d22·2369·646d·3633·3632·2220··rget="#idm6362"· | |||
| 0003b320:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b330:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b340:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b350:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b360:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b370:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b380:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003b | 0003b390:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b | 0003b3a0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b | 0003b3b0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b | 0003b3c0:·643d·2269·646d·3633·3632·223e·3c74·6162··d="idm6362"><tab | ||
| 0003b | 0003b3d0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003b | 0003b3e0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003b | 0003b3f0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003b | 0003b400:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003b | 0003b410:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003b | 0003b420:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b | 0003b430:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b | 0003b440:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b57 | 0003b450:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003b460:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b | 0003b470:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b | 0003b480:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b | 0003b490:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b | 0003b4a0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 0003b | 0003b4b0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b5e0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003b5f0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003b600:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003b610:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003b620:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003b630:·2d20·4343·452d·3833·3238·392d·390a·2020··-·CCE-83289-9.·· | |||
| 0003b640:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b650:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 0003b660:·4553·2d31·352d·3031·3034·3139·0a20·202d··ES-15-010419.··- | |||
| 0003b670:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b680:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b690:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b6a0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b6b0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b6c0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b6d0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b6e0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b6f0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b700:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b710:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b720:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003b730:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b740:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b750:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b760:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b770:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b780:·656e·3a20·2722·6b65·726e·656c·2d64·6566··en:·'"kernel-def | |||
| 0003b790:·6175·6c74·2220·696e·2061·6e73·6962·6c65··ault"·in·ansible | |||
| 0003b | 0003b4c0:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | ||
| 0003b4d0:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 0003b4e0:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 0003b4f0:·706c·6174·666f·726d·730a·6966·2072·706d··platforms.if·rpm | |||
| 0003b500:·202d·2d71·7569·6574·202d·7120·6b65·726e···--quiet·-q·kern | |||
| 0003b510:·656c·2d64·6566·6175·6c74·3b20·7468·656e··el-default;·then | |||
| 0003b520:·0a0a·7a79·7070·6572·2069·6e73·7461·6c6c··..zypper·install | |||
| 0003b530:·202d·7920·2261·6964·6522·0a0a·656c·7365···-y·"aide"..else | |||
| 0003b540:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003b550:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003b560:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003b570:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003b580:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003b590:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| Max diff block lines reached; 20637704/20661744 bytes (99.88%) of diff not shown. | |||
| Offset 15138, 184 lines modified | Offset 15138, 184 lines modified | ||
| 0003b210:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b210:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b220:·6964·6d36·3336·3122·2074·6162·696e·6465··idm6361"·tabinde | 0003b220:·6964·6d36·3336·3122·2074·6162·696e·6465··idm6361"·tabinde | ||
| 0003b230:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b230:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b240:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b240:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b250:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b250:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b260:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b260:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b270:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b270:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b280:·656d·6564·6961·7469·6f6e·20 | 0003b280:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b290:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b2a0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b2b0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b2c0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b2d0:·7073·6522·2069·643d·2269·646d·3633·3631··pse"·id="idm6361 | |||
| 0003b290:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b2a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b2b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b2c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b2d0:·6d36·3336·3122·3e3c·7461·626c·6520·636c··m6361"><table·cl | |||
| 0003b2e0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b2f0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b300:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b310:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b320:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b330:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b340:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b350:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b360:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b370:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b380:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b390:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b3a0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b3b0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b | 0003b2e0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 0003b2f0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b300:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b310:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b320:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b330:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b340:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b350:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b360:·2d74·6172·6765·743d·2223·6964·6d36·3336··-target="#idm636 | |||
| 0003b370:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003b380:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b390:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b3a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b3b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b3c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b3d0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003b3d0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b3e0:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b3f0:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b400:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b410:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b420:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b430:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003b440:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b450:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b460:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b470:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b480:·6574·3d22·2369·646d·3633·3632·2220·7461··et="#idm6362"·ta | |||
| 0003b490:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b4a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b4b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b4c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b4d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b4e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b4f0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b | 0003b3e0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b | 0003b3f0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b | 0003b400:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b | 0003b410:·2220·6964·3d22·6964·6d36·3336·3222·3e3c··"·id="idm6362">< | ||
| 0003b | 0003b420:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003b | 0003b430:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003b | 0003b440:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003b57 | 0003b450:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003b | 0003b460:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003b | 0003b470:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003b | 0003b480:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b490:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003b | 0003b4a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b | 0003b4b0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b | 0003b4c0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b | 0003b4d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b4e0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003b | 0003b4f0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0003b | 0003b500:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003b630:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b640:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b650:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b660:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b670:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b680:·0a20·202d·2043·4345·2d38·3332·3839·2d39··.··-·CCE-83289-9 | |||
| 0003b690:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b6a0:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b6b0:·2d53·4c45·532d·3135·2d30·3130·3431·390a··-SLES-15-010419. | |||
| 0003b6c0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b6d0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b6e0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b6f0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b700:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b710:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b720:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b730:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b740:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b750:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b760:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b770:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b780:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003b790:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b7a0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b7b0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b7c0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b7d0:·2077·6865·6e3a·2027·226b·6572·6e65·6c2d···when:·'"kernel- | |||
| 0003b7e0:·6465·6661·756c·7422·2069·6e20·616e·7369··default"·in·ansi | |||
| 0003b | 0003b510:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 0003b520:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0003b530:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0003b540:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0003b550:·7270·6d20·2d2d·7175·6965·7420·2d71·206b··rpm·--quiet·-q·k | |||
| 0003b560:·6572·6e65·6c2d·6465·6661·756c·743b·2074··ernel-default;·t | |||
| 0003b570:·6865·6e0a·0a7a·7970·7065·7220·696e·7374··hen..zypper·inst | |||
| 0003b580:·616c·6c20·2d79·2022·6169·6465·220a·0a65··all·-y·"aide"..e | |||
| 0003b590:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | |||
| 0003b5a0:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | |||
| 0003b5b0:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | |||
| 0003b5c0:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | |||
| 0003b5d0:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | |||
| Max diff block lines reached; 20959454/20983494 bytes (99.89%) of diff not shown. | |||
| Offset 15124, 184 lines modified | Offset 15124, 184 lines modified | ||
| 0003b130:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b130:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b140:·6d36·3336·3122·2074·6162·696e·6465·783d··m6361"·tabindex= | 0003b140:·6d36·3336·3122·2074·6162·696e·6465·783d··m6361"·tabindex= | ||
| 0003b150:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b150:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b160:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b160:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b170:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b170:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b180:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b180:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b190:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b190:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b1a0:·6564·6961·7469·6f6e·20 | 0003b1a0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b1b0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b1c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b1d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b1e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b1f0:·6522·2069·643d·2269·646d·3633·3631·223e··e"·id="idm6361"> | |||
| 0003b200:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b210:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b220:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b230:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b240:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b250:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b1b0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b1c0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b1d0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b1e0:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003b1f0:·3336·3122·3e3c·7461·626c·6520·636c·6173··361"><table·clas | |||
| 0003b200:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b210:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b220:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b230:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b240:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b250:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b260:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b270:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b280:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b290:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b2a0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b2b0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b2c0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b2d0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b2e0:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003b2f0:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003b300:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003b310:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003b320:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003b330:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003b340:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003b350:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b360:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b370:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b380:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b | 0003b260:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003b3a0:·3d22·2369·646d·3633·3632·2220·7461·6269··="#idm6362"·tabi | |||
| 0003b3b0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b3c0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b3d0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b3e0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b3f0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b400:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b | 0003b270:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 0003b280:·6172·6765·743d·2223·6964·6d36·3336·3222··arget="#idm6362" | |||
| 0003b290:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b2a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b2b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b2c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b2d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b2e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b2f0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003b | 0003b300:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b | 0003b310:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b | 0003b320:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b | 0003b330:·6964·3d22·6964·6d36·3336·3222·3e3c·7461··id="idm6362"><ta | ||
| 0003b46 | 0003b340:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003b | 0003b350:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003b | 0003b360:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003b | 0003b370:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003b | 0003b380:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b | 0003b390:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003b | 0003b3a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b3b0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003b | 0003b3c0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b | 0003b3d0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003b | 0003b3e0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003b | 0003b3f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b400:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b | 0003b410:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | ||
| 0003b | 0003b420:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b550:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003b560:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003b570:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003b580:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003b590:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003b5a0:·202d·2043·4345·2d38·3332·3839·2d39·0a20···-·CCE-83289-9.· | |||
| 0003b5b0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b5c0:·0a20·202d·2044·4953·412d·5354·4947·2d53··.··-·DISA-STIG-S | |||
| 0003b5d0:·4c45·532d·3135·2d30·3130·3431·390a·2020··LES-15-010419.·· | |||
| 0003b5e0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b5f0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b600:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b610:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b620:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b630:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b640:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b650:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b660:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b670:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b680:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b690:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003b6a0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b6b0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b6c0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b6d0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b6e0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b6f0:·6865·6e3a·2027·226b·6572·6e65·6c2d·6465··hen:·'"kernel-de | |||
| 0003b700:·6661·756c·7422·2069·6e20·616e·7369·626c··fault"·in·ansibl | |||
| 0003b | 0003b430:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 0003b440:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 0003b450:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 0003b460:·2070·6c61·7466·6f72·6d73·0a69·6620·7270···platforms.if·rp | |||
| 0003b470:·6d20·2d2d·7175·6965·7420·2d71·206b·6572··m·--quiet·-q·ker | |||
| 0003b480:·6e65·6c2d·6465·6661·756c·743b·2074·6865··nel-default;·the | |||
| 0003b490:·6e0a·0a7a·7970·7065·7220·696e·7374·616c··n..zypper·instal | |||
| 0003b4a0:·6c20·2d79·2022·6169·6465·220a·0a65·6c73··l·-y·"aide"..els | |||
| 0003b4b0:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0003b4c0:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0003b4d0:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0003b4e0:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0003b4f0:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0003b500:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| Max diff block lines reached; 8223547/8247587 bytes (99.71%) of diff not shown. | |||
| Offset 122, 26 lines modified | Offset 122, 32 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | incl | 138 | #·Remediation·is·applicable·only·in·certain·platforms |
| 139 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | 140 | zypper·install·-y·"aide" | |
| 141 | else | ||
| 142 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 143 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | -·name:·Gather·the·package·facts | 149 | -·name:·Gather·the·package·facts |
| 146 | ··package_facts: | 150 | ··package_facts: |
| Offset 174, 32 lines modified | Offset 180, 26 lines modified | ||
| 174 | ··-·PCI-DSSv4-11.5.2 | 180 | ··-·PCI-DSSv4-11.5.2 |
| 175 | ··-·enable_strategy | 181 | ··-·enable_strategy |
| 176 | ··-·low_complexity | 182 | ··-·low_complexity |
| 177 | ··-·low_disruption | 183 | ··-·low_disruption |
| 178 | ··-·medium_severity | 184 | ··-·medium_severity |
| 179 | ··-·no_reboot_needed | 185 | ··-·no_reboot_needed |
| 180 | ··-·package_aide_installed | 186 | ··-·package_aide_installed |
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | [[packages]] | ||
| 183 | name·=·"aide" | ||
| 184 | version·=·"*" | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 192 | include·install_aide | ||
| 190 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 191 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 192 | zypper·install·-y·"aide" | ||
| 193 | else | ||
| 194 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 195 | 193 | class·install_aide·{ | |
| 194 | ··package·{·'aide': | ||
| 195 | ····ensure·=>·'installed', | ||
| 196 | ··} | ||
| 197 | } | ||
| 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 197 | Run·the·following·command·to·generate·a·new·database: | 199 | Run·the·following·command·to·generate·a·new·database: |
| 198 | $·sudo·/usr/bin/aide·--init | 200 | $·sudo·/usr/bin/aide·--init |
| 199 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 200 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 202 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 201 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 203 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 202 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 204 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 227, 14 lines modified | Offset 227, 29 lines modified | ||
| 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 230 | ·············_\x8c_\x8i_\x8s············1.4.1 | 230 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule | 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 236 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 237 | zypper·-q·--no-remote·ref | ||
| 238 | zypper·install·-y·"aide" | ||
| 239 | /usr/bin/aide·--init | ||
| 240 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 241 | else | ||
| 242 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 243 | fi | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Gather·the·package·facts | 249 | -·name:·Gather·the·package·facts |
| 240 | ··package_facts: | 250 | ··package_facts: |
| Offset 347, 29 lines modified | Offset 362, 14 lines modified | ||
| 347 | ··-·PCI-DSSv4-11.5.2 | 362 | ··-·PCI-DSSv4-11.5.2 |
| 348 | ··-·aide_build_database | 363 | ··-·aide_build_database |
| 349 | ··-·low_complexity | 364 | ··-·low_complexity |
| 350 | ··-·low_disruption | 365 | ··-·low_disruption |
| 351 | ··-·medium_severity | 366 | ··-·medium_severity |
| 352 | ··-·no_reboot_needed | 367 | ··-·no_reboot_needed |
| 353 | ··-·restrict_strategy | 368 | ··-·restrict_strategy |
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 355 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 356 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 357 | zypper·-q·--no-remote·ref | ||
| 358 | zypper·install·-y·"aide" | ||
| 359 | /usr/bin/aide·--init | ||
| 360 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 361 | else | ||
| 362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 363 | fi | ||
| Max diff block lines reached; 946858/951583 bytes (99.50%) of diff not shown. | |||
| Offset 14800, 192 lines modified | Offset 14800, 192 lines modified | ||
| 00039cf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 00039cf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 00039d00:·3839·3136·2220·7461·6269·6e64·6578·3d22··8916"·tabindex=" | 00039d00:·3839·3136·2220·7461·6269·6e64·6578·3d22··8916"·tabindex=" | ||
| 00039d10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00039d10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00039d20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00039d20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00039d30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00039d30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00039d40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00039d40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00039d50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00039d50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00039d60:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 00039d70:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00039d80:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00039d90:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00039da0:·6c61·7073·6522·2069·643d·2269·646d·3839··lapse"·id="idm89 | |||
| 00039db0:·3136·223e·3c74·6162·6c65·2063·6c61·7373··16"><table·class | |||
| 00039dc0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00039dd0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00039de0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00039df0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00039e00:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00039e10:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00039e20:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00039e30:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00039e40:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039e50:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00039e60:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00039e70:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00039e80:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00039e90:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00039ea0:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 00039eb0:·7564·6520·696e·7374·616c·6c5f·646e·662d··ude·install_dnf- | |||
| 00039ec0:·6175·746f·6d61·7469·630a·0a63·6c61·7373··automatic..class | |||
| 00039ed0:·2069·6e73·7461·6c6c·5f64·6e66·2d61·7574···install_dnf-aut | |||
| 00039ee0:·6f6d·6174·6963·207b·0a20·2070·6163·6b61··omatic·{.··packa | |||
| 00039ef0:·6765·207b·2027·646e·662d·6175·746f·6d61··ge·{·'dnf-automa | |||
| 00039f00:·7469·6327·3a0a·2020·2020·656e·7375·7265··tic':.····ensure | |||
| 00039f10:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 00039f20:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 00039f30:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00039f40:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00039f50:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00039f60:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00039f70:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00039f80:·3839·3137·2220·7461·6269·6e64·6578·3d22··8917"·tabindex=" | |||
| 00039f90:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00039fa0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00039fb0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00039fc0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00039fd0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00039 | 00039d60:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 00039d70:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 00039d80:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00039d90:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00039da0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00039db0:·2220·6964·3d22·6964·6d38·3931·3622·3e3c··"·id="idm8916">< | |||
| 00039dc0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 00039dd0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 00039de0:·646e·662d·6175·746f·6d61·7469·6322·0a76··dnf-automatic".v | |||
| 00039df0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 00039e00:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00039e10:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00039e20:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00039e30:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00039e40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00039e50:·6964·6d38·3931·3722·2074·6162·696e·6465··idm8917"·tabinde | |||
| 00039e60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00039e70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00039e80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00039e90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00039ea0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00039eb0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 00039 | 00039ec0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0003 | 00039ed0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003 | 00039ee0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003 | 00039ef0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | ||
| 0003 | 00039f00:·3931·3722·3e3c·7461·626c·6520·636c·6173··917"><table·clas | ||
| 0003 | 00039f10:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003 | 00039f20:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003 | 00039f30:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003 | 00039f40:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003 | 00039f50:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003 | 00039f60:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003 | 00039f70:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003 | 00039f80:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003 | 00039f90:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003 | 00039fa0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003 | 00039fb0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003 | 00039fc0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003 | 00039fd0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003 | 00039fe0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003 | 00039ff0:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | ||
| 0003a000:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003a010:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003a020:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003a030:·6d73·0a69·6620·2120·2820·7b20·7270·6d20··ms.if·!·(·{·rpm· | |||
| 0003a040:·2d2d·7175·6965·7420·2d71·206b·6572·6e65··--quiet·-q·kerne | |||
| 0003a050:·6c20·3b7d·2026·616d·703b·2661·6d70·3b20··l·;}·&&· | |||
| 0003a130:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003a140:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003a150:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003a160:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003a170:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003a180:·2d39·3131·3633·2d36·0a20·202d·2065·6e61··-91163-6.··-·ena | |||
| 0003a190:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003a1a0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003a1b0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003a1c0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003a1d0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003a1e0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003a1f0:·7061·636b·6167·655f·646e·662d·6175·746f··package_dnf-auto | |||
| 0003a200:·6d61·7469·635f·696e·7374·616c·6c65·640a··matic_installed. | |||
| 0003a210:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003a220:·646e·662d·6175·746f·6d61·7469·6320·6973··dnf-automatic·is | |||
| 0003a230:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003a240:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003a250:·646e·662d·6175·746f·6d61·7469·630a·2020··dnf-automatic.·· | |||
| 0003a260:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003a270:·0a20·2077·6865·6e3a·206e·6f74·2028·2022··.··when:·not·(·" | |||
| 0003a280:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003a290:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003a2a0:·7320·616e·6420·2272·706d·2d6f·7374·7265··s·and·"rpm-ostre | |||
| 0003a2b0:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | |||
| 0003a2c0:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| 0003a2d0:·2061·6e64·2022·626f·6f74·6322·2069·6e20···and·"bootc"·in· | |||
| 0003a2e0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003a2f0:·636b·6167·6573·2061·6e64·206e·6f74·2022··ckages·and·not·" | |||
| 0003a300:·6f70·656e·7368·6966·742d·6b75·6265·6c65··openshift-kubele | |||
| 0003a310:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | |||
| 0003a320:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| Max diff block lines reached; 2118046/2143190 bytes (98.83%) of diff not shown. | |||
| Offset 88, 26 lines modified | Offset 88, 33 lines modified | ||
| 88 | ·············suitable·for·automatic,·regular·execution. | 88 | ·············suitable·for·automatic,·regular·execution. |
| 89 | Severity: ···medium | 89 | Severity: ···medium |
| 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 91 | Identifiers:·CCE-91163-6 | 91 | Identifiers:·CCE-91163-6 |
| 92 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 92 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 93 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 93 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 94 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 94 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 95 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 96 | [[packages]] | ||
| 97 | name·=·"dnf-automatic" | ||
| 98 | version·=·"*" | ||
| 95 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 96 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 97 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 98 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 99 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 100 | 104 | #·Remediation·is·applicable·only·in·certain·platforms | |
| 105 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 106 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 101 | class·install_dnf-automatic·{ | ||
| 102 | ··package·{·'dnf-automatic': | ||
| 103 | ····ensure·=>·'installed', | ||
| 104 | ··} | ||
| 105 | 107 | zypper·install·-y·"dnf-automatic" | |
| 108 | else | ||
| 109 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 110 | fi | ||
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 111 | -·name:·Gather·the·package·facts | 116 | -·name:·Gather·the·package·facts |
| 112 | ··package_facts: | 117 | ··package_facts: |
| Offset 134, 33 lines modified | Offset 141, 26 lines modified | ||
| 134 | ··-·CCE-91163-6 | 141 | ··-·CCE-91163-6 |
| 135 | ··-·enable_strategy | 142 | ··-·enable_strategy |
| 136 | ··-·low_complexity | 143 | ··-·low_complexity |
| 137 | ··-·low_disruption | 144 | ··-·low_disruption |
| 138 | ··-·medium_severity | 145 | ··-·medium_severity |
| 139 | ··-·no_reboot_needed | 146 | ··-·no_reboot_needed |
| 140 | ··-·package_dnf-automatic_installed | 147 | ··-·package_dnf-automatic_installed |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | [[packages]] | ||
| 143 | name·=·"dnf-automatic" | ||
| 144 | version·=·"*" | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | include·install_dnf-automatic | ||
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 151 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 152 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 153 | zypper·install·-y·"dnf-automatic" | ||
| 154 | else | ||
| 155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 156 | fi | 154 | class·install_dnf-automatic·{ |
| 155 | ··package·{·'dnf-automatic': | ||
| 156 | ····ensure·=>·'installed', | ||
| 157 | ··} | ||
| 158 | } | ||
| 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 159 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 158 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically | 160 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically |
| 159 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 161 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 160 | automatic.conf. | 162 | automatic.conf. |
| 161 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the | 163 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the |
| 162 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security | 164 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security |
| 163 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage | 165 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage |
| Offset 171, 14 lines modified | Offset 171, 57 lines modified | ||
| 171 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 171 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 172 | Identifiers:·CCE-91165-1 | 172 | Identifiers:·CCE-91165-1 |
| 173 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 173 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 174 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 174 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 175 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 175 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 176 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 | 176 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 |
| 177 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 177 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 180 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 181 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 182 | found=false | ||
| 183 | #·set·value·in·all·files·if·they·contain·section·or·key | ||
| 184 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do | ||
| 185 | ····if·[·!·-e·"$f"·];·then | ||
| 186 | ········continue | ||
| 187 | ····fi | ||
| 188 | ····#·find·key·in·section·and·change·value | ||
| 189 | ····if·grep·-qzosP·"[[:space:]]*\[commands\]([^\n\[]*\n+)+?[[:space:]]*apply_updates" | ||
| 190 | "$f";·then | ||
| 191 | ············sed·-i·"s/apply_updates[^(\n)]*/apply_updates=yes/"·"$f" | ||
| 192 | ············found=true | ||
| 193 | ····#·find·section·and·add·key·=·value·to·it | ||
| 194 | ····elif·grep·-qs·"[[:space:]]*\[commands\]"·"$f";·then | ||
| 195 | ············sed·-i·"/[[:space:]]*\[commands\]/a·apply_updates=yes"·"$f" | ||
| 196 | ············found=true | ||
| 197 | ····fi | ||
| 198 | done | ||
| 199 | #·if·section·not·in·any·file,·append·section·with·key·=·value·to·FIRST·file·in·files | ||
| 200 | parameter | ||
| 201 | if·!·$found·;·then | ||
| 202 | ····file=$(echo·"/etc/dnf/automatic.conf"·|·cut·-f1·-d·'·') | ||
| 203 | ····mkdir·-p·"$(dirname·"$file")" | ||
| 204 | ····echo·-e·"[commands]\napply_updates=yes"·>>·"$file" | ||
| 205 | fi | ||
| 206 | else | ||
| 207 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 208 | fi | ||
| Max diff block lines reached; 160804/165977 bytes (96.88%) of diff not shown. | |||
| Offset 15170, 184 lines modified | Offset 15170, 184 lines modified | ||
| 0003b410:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b410:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b420:·646d·3633·3631·2220·7461·6269·6e64·6578··dm6361"·tabindex | 0003b420:·646d·3633·3631·2220·7461·6269·6e64·6578··dm6361"·tabindex | ||
| 0003b430:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b430:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b440:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b440:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b450:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b450:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b460:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b460:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b470:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b470:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b480:·6d65·6469·6174·696f·6e20· | 0003b480:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b490:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b4a0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b4b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b4c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b4d0:·7365·2220·6964·3d22·6964·6d36·3336·3122··se"·id="idm6361" | |||
| 0003b490:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b4a0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b4b0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b4c0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b4d0:·3633·3631·223e·3c74·6162·6c65·2063·6c61··6361"><table·cla | |||
| 0003b4e0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b4f0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b500:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b510:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b520:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b530:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b540:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b550:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b560:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b570:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b580:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b590:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b5a0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b5b0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b | 0003b4e0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | ||
| 0003b4f0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b500:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b510:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b520:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b530:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b5d0:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b5e0:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b5f0:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b600:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b610:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b620:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b630:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b640:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b650:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b660:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b | 0003b540:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0003b680:·743d·2223·6964·6d36·3336·3222·2074·6162··t="#idm6362"·tab | |||
| 0003b690:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b6a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b6b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b6c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b6d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b6e0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b | 0003b550:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0003b560:·7461·7267·6574·3d22·2369·646d·3633·3632··target="#idm6362 | |||
| 0003b570:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b580:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b590:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b5a0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b5b0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b5c0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b5d0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b | 0003b5e0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b | 0003b5f0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b | 0003b600:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b | 0003b610:·2069·643d·2269·646d·3633·3632·223e·3c74···id="idm6362"><t | ||
| 0003b | 0003b620:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003b | 0003b630:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003b | 0003b640:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b | 0003b650:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003b | 0003b660:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003b | 0003b670:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003b | 0003b680:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b690:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b | 0003b6a0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b | 0003b6b0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b | 0003b6c0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b | 0003b6d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b6e0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b | 0003b6f0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | ||
| 0003b | 0003b700:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003b830:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003b840:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003b850:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003b860:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003b870:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003b880:·2020·2d20·4343·452d·3833·3238·392d·390a····-·CCE-83289-9. | |||
| 0003b890:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b8a0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b8b0:·534c·4553·2d31·352d·3031·3034·3139·0a20··SLES-15-010419.· | |||
| 0003b8c0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b8d0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b8e0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b8f0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b900:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b910:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b920:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b930:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b940:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b950:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b960:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b970:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003b980:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b990:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b9a0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b9b0:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b9c0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b9d0:·7768·656e·3a20·2722·6b65·726e·656c·2d64··when:·'"kernel-d | |||
| 0003b9e0:·6566·6175·6c74·2220·696e·2061·6e73·6962··efault"·in·ansib | |||
| 0003b | 0003b710:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | ||
| 0003b720:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003b730:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003b740:·6e20·706c·6174·666f·726d·730a·6966·2072··n·platforms.if·r | |||
| 0003b750:·706d·202d·2d71·7569·6574·202d·7120·6b65··pm·--quiet·-q·ke | |||
| 0003b760:·726e·656c·2d64·6566·6175·6c74·3b20·7468··rnel-default;·th | |||
| 0003b770:·656e·0a0a·7a79·7070·6572·2069·6e73·7461··en..zypper·insta | |||
| 0003b780:·6c6c·202d·7920·2261·6964·6522·0a0a·656c··ll·-y·"aide"..el | |||
| 0003b790:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | |||
| 0003b7a0:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | |||
| 0003b7b0:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | |||
| 0003b7c0:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | |||
| 0003b7d0:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | |||
| 0003b7e0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b7f0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| Max diff block lines reached; 20233430/20257470 bytes (99.88%) of diff not shown. | |||
| Offset 15148, 184 lines modified | Offset 15148, 184 lines modified | ||
| 0003b2b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b2b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b2c0:·2223·6964·6d36·3336·3122·2074·6162·696e··"#idm6361"·tabin | 0003b2c0:·2223·6964·6d36·3336·3122·2074·6162·696e··"#idm6361"·tabin | ||
| 0003b2d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b2d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b2e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b2e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b2f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b2f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b300:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b300:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b310:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b310:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b320:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b320:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b330:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b340:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b3 | 0003b330:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003b340:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b350:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b360:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b370:·6c61·7073·6522·2069·643d·2269·646d·3633··lapse"·id="idm63 | |||
| 0003b380:·3631·223e·3c70·7265·3e3c·636f·6465·3e0a··61"><pre><code>. | |||
| 0003b390:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b3a0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b3b0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b3c0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b3d0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b3e0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b3 | 0003b3f0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003b400:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | |||
| 0003b410:·3336·3222·2074·6162·696e·6465·783d·2230··362"·tabindex="0 | |||
| 0003b420:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b430:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b440:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b450:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b460:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b470:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b370:·6964·6d36·3336·3122·3e3c·7461·626c·6520··idm6361"><table· | |||
| 0003b380:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b390:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b3a0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b3b0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b3c0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b3d0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b3e0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b3f0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b400:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b410:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b420:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b430:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b440:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b450:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b460:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b470:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b480:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b490:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b4a0:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b4b0:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b4c0:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b4d0:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003b4e0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b4f0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b500:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b510:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b520:·7267·6574·3d22·2369·646d·3633·3632·2220··rget="#idm6362"· | |||
| 0003b530:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b540:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b550:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b560:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b570:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b580:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b590:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b | 0003b480:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003b | 0003b490:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b | 0003b4a0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b | 0003b4b0:·7365·2220·6964·3d22·6964·6d36·3336·3222··se"·id="idm6362" | ||
| 0003b | 0003b4c0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b | 0003b4d0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b | 0003b4e0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b | 0003b4f0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b | 0003b500:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b | 0003b510:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003b | 0003b520:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b | 0003b530:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b | 0003b540:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003b550:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b | 0003b560:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b | 0003b570:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b | 0003b580:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b | 0003b590:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | ||
| 0003b | 0003b5a0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b6d0:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | |||
| 0003b6e0:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | |||
| 0003b6f0:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | |||
| 0003b700:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | |||
| 0003b710:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | |||
| 0003b720:·733a·0a20·202d·2043·4345·2d38·3332·3839··s:.··-·CCE-83289 | |||
| 0003b730:·2d39·0a20·202d·2043·4a49·532d·352e·3130··-9.··-·CJIS-5.10 | |||
| 0003b740:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b750:·4947·2d53·4c45·532d·3135·2d30·3130·3431··IG-SLES-15-01041 | |||
| 0003b760:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003b770:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b780:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b790:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b7a0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b7b0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b7c0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b7d0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b7e0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b7f0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b800:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b810:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b820:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003b830:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b840:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b850:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b860:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b870:·0a20·2077·6865·6e3a·2027·226b·6572·6e65··.··when:·'"kerne | |||
| 0003b880:·6c2d·6465·6661·756c·7422·2069·6e20·616e··l-default"·in·an | |||
| 0003b | 0003b5b0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0003b5c0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b5d0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b5e0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b5f0:·6620·7270·6d20·2d2d·7175·6965·7420·2d71··f·rpm·--quiet·-q | |||
| 0003b600:·206b·6572·6e65·6c2d·6465·6661·756c·743b···kernel-default; | |||
| 0003b610:·2074·6865·6e0a·0a7a·7970·7065·7220·696e···then..zypper·in | |||
| 0003b620:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b630:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003b640:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003b650:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003b660:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003b670:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003b680:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| Max diff block lines reached; 9079260/9103300 bytes (99.74%) of diff not shown. | |||
| Offset 125, 26 lines modified | Offset 125, 32 lines modified | ||
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 128 | ·············_\x8c_\x8i_\x8s············1.4.1 | 128 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule | 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | incl | 141 | #·Remediation·is·applicable·only·in·certain·platforms |
| 142 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 138 | class·install_aide·{ | ||
| 139 | ··package·{·'aide': | ||
| 140 | ····ensure·=>·'installed', | ||
| 141 | ··} | ||
| 142 | 143 | zypper·install·-y·"aide" | |
| 144 | else | ||
| 145 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 146 | fi | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 148 | -·name:·Gather·the·package·facts | 152 | -·name:·Gather·the·package·facts |
| 149 | ··package_facts: | 153 | ··package_facts: |
| Offset 177, 32 lines modified | Offset 183, 26 lines modified | ||
| 177 | ··-·PCI-DSSv4-11.5.2 | 183 | ··-·PCI-DSSv4-11.5.2 |
| 178 | ··-·enable_strategy | 184 | ··-·enable_strategy |
| 179 | ··-·low_complexity | 185 | ··-·low_complexity |
| 180 | ··-·low_disruption | 186 | ··-·low_disruption |
| 181 | ··-·medium_severity | 187 | ··-·medium_severity |
| 182 | ··-·no_reboot_needed | 188 | ··-·no_reboot_needed |
| 183 | ··-·package_aide_installed | 189 | ··-·package_aide_installed |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | [[packages]] | ||
| 186 | name·=·"aide" | ||
| 187 | version·=·"*" | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 195 | include·install_aide | ||
| 193 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 194 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 195 | zypper·install·-y·"aide" | ||
| 196 | else | ||
| 197 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 198 | 196 | class·install_aide·{ | |
| 197 | ··package·{·'aide': | ||
| 198 | ····ensure·=>·'installed', | ||
| 199 | ··} | ||
| 200 | } | ||
| 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 200 | Run·the·following·command·to·generate·a·new·database: | 202 | Run·the·following·command·to·generate·a·new·database: |
| 201 | $·sudo·/usr/bin/aide·--init | 203 | $·sudo·/usr/bin/aide·--init |
| 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 204 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 203 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 205 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 204 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 206 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 205 | generated·database·can·be·installed·as·follows: | 207 | generated·database·can·be·installed·as·follows: |
| Offset 230, 14 lines modified | Offset 230, 29 lines modified | ||
| 230 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 230 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 231 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 231 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 233 | ·············_\x8c_\x8i_\x8s············1.4.1 | 233 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 234 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 234 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 235 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 235 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 236 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule | 236 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule |
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 238 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 239 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 240 | zypper·-q·--no-remote·ref | ||
| 241 | zypper·install·-y·"aide" | ||
| 242 | /usr/bin/aide·--init | ||
| 243 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 244 | else | ||
| 245 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 246 | fi | ||
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 247 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 238 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 248 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 239 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 249 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 240 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 250 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 241 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 251 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 242 | -·name:·Gather·the·package·facts | 252 | -·name:·Gather·the·package·facts |
| 243 | ··package_facts: | 253 | ··package_facts: |
| Offset 350, 29 lines modified | Offset 365, 14 lines modified | ||
| 350 | ··-·PCI-DSSv4-11.5.2 | 365 | ··-·PCI-DSSv4-11.5.2 |
| 351 | ··-·aide_build_database | 366 | ··-·aide_build_database |
| 352 | ··-·low_complexity | 367 | ··-·low_complexity |
| 353 | ··-·low_disruption | 368 | ··-·low_disruption |
| 354 | ··-·medium_severity | 369 | ··-·medium_severity |
| 355 | ··-·no_reboot_needed | 370 | ··-·no_reboot_needed |
| 356 | ··-·restrict_strategy | 371 | ··-·restrict_strategy |
| 357 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 358 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 359 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 360 | zypper·-q·--no-remote·ref | ||
| 361 | zypper·install·-y·"aide" | ||
| 362 | /usr/bin/aide·--init | ||
| 363 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 364 | else | ||
| 365 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 366 | fi | ||
| Max diff block lines reached; 1074345/1079205 bytes (99.55%) of diff not shown. | |||
| Offset 15134, 184 lines modified | Offset 15134, 184 lines modified | ||
| 0003b1d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003b1d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b1e0:·743d·2223·6964·6d36·3336·3122·2074·6162··t="#idm6361"·tab | 0003b1e0:·743d·2223·6964·6d36·3336·3122·2074·6162··t="#idm6361"·tab | ||
| 0003b1f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003b1f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b200:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003b200:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b210:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003b210:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b220:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003b220:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b230:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003b230:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b240:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003b240:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003b250:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b260:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b2 | 0003b250:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 0003b260:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b270:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b280:·70 | 0003b280:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b290:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b2a0:·3633·3631·223e·3c70·7265·3e3c·636f·6465··6361"><pre><code | |||
| 0003b2b0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b2c0:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b2d0:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b2e0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b2f0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b300:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b310:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b320:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b330:·6d36·3336·3222·2074·6162·696e·6465·783d··m6362"·tabindex= | |||
| 0003b340:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b350:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b360:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b370:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b380:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b390:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b290:·3d22·6964·6d36·3336·3122·3e3c·7461·626c··="idm6361"><tabl | |||
| 0003b2a0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b2b0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b2c0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b2d0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b2e0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b2f0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b300:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b310:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b320:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b330:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b340:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b350:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b360:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b370:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b380:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b390:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003b3a0:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003b3b0:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003b3c0:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003b3d0:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003b3e0:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003b3f0:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003b400:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b410:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b420:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b430:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b440:·7461·7267·6574·3d22·2369·646d·3633·3632··target="#idm6362 | |||
| 0003b450:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b460:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b470:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b480:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b490:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b4a0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b4b0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b | 0003b3a0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 0003b | 0003b3b0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b | 0003b3c0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b | 0003b3d0:·6170·7365·2220·6964·3d22·6964·6d36·3336··apse"·id="idm636 | ||
| 0003b | 0003b3e0:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | ||
| 0003b | 0003b3f0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003b | 0003b400:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b | 0003b410:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003b | 0003b420:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003b | 0003b430:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b | 0003b440:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b57 | 0003b450:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003b | 0003b460:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b | 0003b470:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b | 0003b480:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003b | 0003b490:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003b | 0003b4a0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003b | 0003b4b0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | ||
| 0003b | 0003b4c0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003b | 0003b4d0:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 0003b600:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003b610:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003b620:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003b630:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003b640:·6167·733a·0a20·202d·2043·4345·2d38·3332··ags:.··-·CCE-832 | |||
| 0003b650:·3839·2d39·0a20·202d·2043·4a49·532d·352e··89-9.··-·CJIS-5. | |||
| 0003b660:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b670:·5354·4947·2d53·4c45·532d·3135·2d30·3130··STIG-SLES-15-010 | |||
| 0003b680:·3431·390a·2020·2d20·4e49·5354·2d38·3030··419.··-·NIST-800 | |||
| 0003b690:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b6a0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b6b0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b6c0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b6d0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b6e0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b6f0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b700:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b710:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b720:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b730:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b740:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003b750:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b760:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b770:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b780:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b790:·6e74·0a20·2077·6865·6e3a·2027·226b·6572··nt.··when:·'"ker | |||
| 0003b7a0:·6e65·6c2d·6465·6661·756c·7422·2069·6e20··nel-default"·in· | |||
| 0003b7b0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003b | 0003b4e0:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 0003b4f0:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 0003b500:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 0003b510:·0a69·6620·7270·6d20·2d2d·7175·6965·7420··.if·rpm·--quiet· | |||
| 0003b520:·2d71·206b·6572·6e65·6c2d·6465·6661·756c··-q·kernel-defaul | |||
| 0003b530:·743b·2074·6865·6e0a·0a7a·7970·7065·7220··t;·then..zypper· | |||
| 0003b540:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003b550:·220a·0a65·6c73·650a·2020·2020·2667·743b··"..else.····> | |||
| 0003b560:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003b570:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003b580:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003b590:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003b5a0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| Max diff block lines reached; 8816678/8840718 bytes (99.73%) of diff not shown. | |||
| Offset 122, 26 lines modified | Offset 122, 32 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | incl | 138 | #·Remediation·is·applicable·only·in·certain·platforms |
| 139 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | 140 | zypper·install·-y·"aide" | |
| 141 | else | ||
| 142 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 143 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | -·name:·Gather·the·package·facts | 149 | -·name:·Gather·the·package·facts |
| 146 | ··package_facts: | 150 | ··package_facts: |
| Offset 174, 32 lines modified | Offset 180, 26 lines modified | ||
| 174 | ··-·PCI-DSSv4-11.5.2 | 180 | ··-·PCI-DSSv4-11.5.2 |
| 175 | ··-·enable_strategy | 181 | ··-·enable_strategy |
| 176 | ··-·low_complexity | 182 | ··-·low_complexity |
| 177 | ··-·low_disruption | 183 | ··-·low_disruption |
| 178 | ··-·medium_severity | 184 | ··-·medium_severity |
| 179 | ··-·no_reboot_needed | 185 | ··-·no_reboot_needed |
| 180 | ··-·package_aide_installed | 186 | ··-·package_aide_installed |
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | [[packages]] | ||
| 183 | name·=·"aide" | ||
| 184 | version·=·"*" | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 192 | include·install_aide | ||
| 190 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 191 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 192 | zypper·install·-y·"aide" | ||
| 193 | else | ||
| 194 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 195 | 193 | class·install_aide·{ | |
| 194 | ··package·{·'aide': | ||
| 195 | ····ensure·=>·'installed', | ||
| 196 | ··} | ||
| 197 | } | ||
| 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 197 | Run·the·following·command·to·generate·a·new·database: | 199 | Run·the·following·command·to·generate·a·new·database: |
| 198 | $·sudo·/usr/bin/aide·--init | 200 | $·sudo·/usr/bin/aide·--init |
| 199 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 200 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 202 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 201 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 203 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 202 | generated·database·can·be·installed·as·follows: | 204 | generated·database·can·be·installed·as·follows: |
| Offset 227, 14 lines modified | Offset 227, 29 lines modified | ||
| 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 230 | ·············_\x8c_\x8i_\x8s············1.4.1 | 230 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule | 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 236 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 237 | zypper·-q·--no-remote·ref | ||
| 238 | zypper·install·-y·"aide" | ||
| 239 | /usr/bin/aide·--init | ||
| 240 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 241 | else | ||
| 242 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 243 | fi | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Gather·the·package·facts | 249 | -·name:·Gather·the·package·facts |
| 240 | ··package_facts: | 250 | ··package_facts: |
| Offset 347, 29 lines modified | Offset 362, 14 lines modified | ||
| 347 | ··-·PCI-DSSv4-11.5.2 | 362 | ··-·PCI-DSSv4-11.5.2 |
| 348 | ··-·aide_build_database | 363 | ··-·aide_build_database |
| 349 | ··-·low_complexity | 364 | ··-·low_complexity |
| 350 | ··-·low_disruption | 365 | ··-·low_disruption |
| 351 | ··-·medium_severity | 366 | ··-·medium_severity |
| 352 | ··-·no_reboot_needed | 367 | ··-·no_reboot_needed |
| 353 | ··-·restrict_strategy | 368 | ··-·restrict_strategy |
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 355 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 356 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 357 | zypper·-q·--no-remote·ref | ||
| 358 | zypper·install·-y·"aide" | ||
| 359 | /usr/bin/aide·--init | ||
| 360 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 361 | else | ||
| 362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 363 | fi | ||
| Max diff block lines reached; 1044303/1049163 bytes (99.54%) of diff not shown. | |||
| Offset 15161, 184 lines modified | Offset 15161, 184 lines modified | ||
| 0003b380:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b380:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b390:·2369·646d·3633·3631·2220·7461·6269·6e64··#idm6361"·tabind | 0003b390:·2369·646d·3633·3631·2220·7461·6269·6e64··#idm6361"·tabind | ||
| 0003b3a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b3a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b3b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b3b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b3c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b3c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b3d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b3d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b3e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b3e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b3f0:·5265·6d65·6469·6174·696f·6e20· | 0003b3f0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b400:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b410:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b420:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b430:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b440:·6170·7365·2220·6964·3d22·6964·6d36·3336··apse"·id="idm636 | |||
| 0003b400:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003b410:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b420:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b430:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b440:·646d·3633·3631·223e·3c74·6162·6c65·2063··dm6361"><table·c | |||
| 0003b450:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b460:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b470:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b480:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b490:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b4a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b4b0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b4c0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b4d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b4e0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b4f0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b500:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b510:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b520:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b | 0003b450:·3122·3e3c·7072·653e·3c63·6f64·653e·0a5b··1"><pre><code>.[ | ||
| 0003b460:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b470:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b480:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b490:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b4a0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b4b0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b4c0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b4d0:·612d·7461·7267·6574·3d22·2369·646d·3633··a-target="#idm63 | |||
| 0003b4e0:·3632·2220·7461·6269·6e64·6578·3d22·3022··62"·tabindex="0" | |||
| 0003b4f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b500:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b510:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b520:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b530:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b540:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b540:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003b550:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003b560:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003b570:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003b580:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003b590:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003b5a0:·0a7d·0a3c·2f63·6f64·653e·3c2f·7072·653e··.}.</code></pre> | |||
| 0003b5b0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b5c0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b5d0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b5e0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b5f0:·6765·743d·2223·6964·6d36·3336·3222·2074··get="#idm6362"·t | |||
| 0003b600:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b610:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b620:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b630:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b640:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b650:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b660:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b | 0003b550:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 0003b | 0003b560:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003b | 0003b570:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003b | 0003b580:·6522·2069·643d·2269·646d·3633·3632·223e··e"·id="idm6362"> | ||
| 0003b | 0003b590:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003b | 0003b5a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003b | 0003b5b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003b | 0003b5c0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003b | 0003b5d0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003b | 0003b5e0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b | 0003b5f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b | 0003b600:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003b | 0003b610:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b620:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b | 0003b630:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b | 0003b640:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b | 0003b650:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003b | 0003b660:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 0003b | 0003b670:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b7a0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003b7b0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003b7c0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003b7d0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003b7e0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003b7f0:·3a0a·2020·2d20·4343·452d·3833·3238·392d··:.··-·CCE-83289- | |||
| 0003b800:·390a·2020·2d20·434a·4953·2d35·2e31·302e··9.··-·CJIS-5.10. | |||
| 0003b810:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b820:·472d·534c·4553·2d31·352d·3031·3034·3139··G-SLES-15-010419 | |||
| 0003b830:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b840:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b850:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b860:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b870:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b880:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b890:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b8a0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b8b0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b8c0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b8d0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b8e0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b8f0:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003b900:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b910:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b920:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b930:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b940:·2020·7768·656e·3a20·2722·6b65·726e·656c····when:·'"kernel | |||
| 0003b950:·2d64·6566·6175·6c74·2220·696e·2061·6e73··-default"·in·ans | |||
| 0003b | 0003b680:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | ||
| 0003b690:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003b6a0:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003b6b0:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003b6c0:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | |||
| 0003b6d0:·6b65·726e·656c·2d64·6566·6175·6c74·3b20··kernel-default;· | |||
| 0003b6e0:·7468·656e·0a0a·7a79·7070·6572·2069·6e73··then..zypper·ins | |||
| 0003b6f0:·7461·6c6c·202d·7920·2261·6964·6522·0a0a··tall·-y·"aide".. | |||
| 0003b700:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | |||
| 0003b710:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | |||
| 0003b720:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | |||
| 0003b730:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | |||
| 0003b740:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | |||
| Max diff block lines reached; 20150609/20174649 bytes (99.88%) of diff not shown. | |||
| Offset 15209, 415 lines modified | Offset 15209, 415 lines modified | ||
| 0003b680:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b680:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b690:·6d36·3032·3022·2074·6162·696e·6465·783d··m6020"·tabindex= | 0003b690:·6d36·3032·3022·2074·6162·696e·6465·783d··m6020"·tabindex= | ||
| 0003b6a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b6a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b6b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b6b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b6c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b6c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b6d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b6d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | Diff chunk too large, falling back to line-by-line diff (401 lines added, 401 lines removed) | |
| 0003b6e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b6e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b6f0:·6564·6961·7469·6f6e·20 | 0003b6f0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 0003b700:· | 0003b700:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 0003b710:·3 | 0003b710:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b720:· | 0003b720:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b730:·6 | 0003b730:·6170·7365·2220·6964·3d22·6964·6d36·3032··apse"·id="idm602 | ||
| 0003b740:·3 | 0003b740:·3022·3e3c·7072·653e·3c63·6f64·653e·2320··0"><pre><code>#· | ||
| 0003b750:· | 0003b750:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 0003b760:·7 | 0003b760:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 0003b770:· | 0003b770:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 0003b780:· | 0003b780:·726d·730a·6966·2021·2028·207b·2072·706d··rms.if·!·(·{·rpm | ||
| 0003b790:· | 0003b790:·202d·2d71·7569·6574·202d·7120·6b65·726e···--quiet·-q·kern | ||
| 0003b7a0:· | 0003b7a0:·656c·203b·7d20·2661·6d70·3b26·616d·703b··el·;}·&& | ||
| 0003b7b0:· | 0003b7b0:·207b·2072·706d·202d·2d71·7569·6574·202d···{·rpm·--quiet·- | ||
| 0003b7c0:·7 | 0003b7c0:·7120·7270·6d2d·6f73·7472·6565·203b·7d20··q·rpm-ostree·;}· | ||
| 0003b7d0:· | 0003b7d0:·2661·6d70·3b26·616d·703b·207b·2072·706d··&&·{·rpm | ||
| 0003b7e0:· | 0003b7e0:·202d·2d71·7569·6574·202d·7120·626f·6f74···--quiet·-q·boot | ||
| 0003b7f0:·6 | 0003b7f0:·6320·3b7d·2026·616d·703b·2661·6d70·3b20··c·;}·&&· | ||
| 0003b800:· | 0003b800:·7b20·2120·7270·6d20·2d2d·7175·6965·7420··{·!·rpm·--quiet· | ||
| 0003b810:· | 0003b810:·2d71·206f·7065·6e73·6869·6674·2d6b·7562··-q·openshift-kub | ||
| 0003b820:·65 | 0003b820:·656c·6574·203b·7d20·293b·2074·6865·6e0a··elet·;}·);·then. | ||
| 0003b830:· | 0003b830:·0a23·2046·696e·6420·7768·6963·6820·6669··.#·Find·which·fi | ||
| 0003b840:·6 | 0003b840:·6c65·7320·6861·7665·2069·6e63·6f72·7265··les·have·incorre | ||
| 0003b850:·6 | 0003b850:·6374·2068·6173·6820·286e·6f74·2069·6e20··ct·hash·(not·in· | ||
| 0003b860:· | 0003b860:·2f65·7463·2c20·6265·6361·7573·6520·6f66··/etc,·because·of | ||
| 0003b870:·6 | 0003b870:·2074·6865·2073·7973·7465·6d20·7265·6c61···the·system·rela | ||
| 0003b880:·7 | 0003b880:·7465·6420·636f·6e66·6967·2066·696c·6573··ted·config·files | ||
| 0003b890:·2 | 0003b890:·2920·616e·6420·7468·656e·2067·6574·2066··)·and·then·get·f | ||
| 0003b8a0:· | 0003b8a0:·696c·6573·206e·616d·6573·0a66·696c·6573··iles·names.files | ||
| 0003b8b0:· | 0003b8b0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | ||
| 0003b8c0:· | 0003b8c0:·6861·7368·3d22·2428·7270·6d20·2d56·6120··hash="$(rpm·-Va· | ||
| 0003b8d0:· | 0003b8d0:·2d2d·6e6f·636f·6e66·6967·207c·2067·7265··--noconfig·|·gre | ||
| 0003b8e0:· | 0003b8e0:·7020·2d45·2027·5e2e·2e35·2720·7c20·6177··p·-E·'^..5'·|·aw | ||
| 0003b8f0:· | 0003b8f0:·6b20·277b·7072·696e·7420·244e·467d·2720··k·'{print·$NF}'· | ||
| 0003b900:·2 | 0003b900:·2922·0a0a·6966·205b·202d·6e20·2224·6669··)"..if·[·-n·"$fi | ||
| 0003b910:· | 0003b910:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003b920:· | 0003b920:·6374·5f68·6173·6822·205d·3b20·7468·656e··ct_hash"·];·then | ||
| 0003b930:· | 0003b930:·0a20·2020·2023·2046·726f·6d20·6669·6c65··.····#·From·file | ||
| 0003b940:· | 0003b940:·7320·6e61·6d65·7320·6765·7420·7061·636b··s·names·get·pack | ||
| 0003b950:· | 0003b950:·6167·6520·6e61·6d65·7320·616e·6420·6368··age·names·and·ch | ||
| 0003b960:· | 0003b960:·616e·6765·206e·6577·6c69·6e65·2074·6f20··ange·newline·to· | ||
| 0003b970:· | 0003b970:·7370·6163·652c·2062·6563·6175·7365·2072··space,·because·r | ||
| 0003b980:· | 0003b980:·706d·2077·7269·7465·7320·6561·6368·2070··pm·writes·each·p | ||
| 0003b990:· | 0003b990:·6163·6b61·6765·2074·6f20·6e65·7720·6c69··ackage·to·new·li | ||
| 0003b9a0:·6 | 0003b9a0:·6e65·0a20·2020·2070·6163·6b61·6765·735f··ne.····packages_ | ||
| 0003b9b0:· | 0003b9b0:·746f·5f72·6569·6e73·7461·6c6c·3d22·2428··to_reinstall="$( | ||
| 0003b9c0:· | 0003b9c0:·7270·6d20·2d71·6620·2466·696c·6573·5f77··rpm·-qf·$files_w | ||
| 0003b9d0:·6 | 0003b9d0:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b9e0:· | 0003b9e0:·7368·207c·2074·7220·275c·6e27·2027·2027··sh·|·tr·'\n'·'·' | ||
| 0003b9f0:· | 0003b9f0:·2922·0a0a·2020·2020·0a20·2020·207a·7970··)"..····.····zyp | ||
| 0003ba00:· | 0003ba00:·7065·7220·696e·7374·616c·6c20·2d66·202d··per·install·-f·- | ||
| 0003ba10:· | 0003ba10:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | ||
| 0003ba20:· | 0003ba20:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | ||
| 0003ba30:· | 0003ba30:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | ||
| 0003ba40:·6 | 0003ba40:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | ||
| 0003ba50:· | 0003ba50:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | ||
| 0003ba60:· | 0003ba60:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | ||
| 0003ba70:· | 0003ba70:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | ||
| 0003ba80:· | 0003ba80:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003ba90:· | 0003ba90:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003baa0:·226 | 0003baa0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003bab0:· | 0003bab0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003bac0:·65 | 0003bac0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003bad0:· | 0003bad0:·3d22·2369·646d·3630·3231·2220·7461·6269··="#idm6021"·tabi | ||
| 0003bae0:·6 | 0003bae0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003baf0:· | 0003baf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003bb00:· | 0003bb00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003bb10:·6 | 0003bb10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003bb20:· | 0003bb20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003bb30:· | 0003bb30:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003bb40:· | 0003bb40:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003bb50:· | 0003bb50:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003bb60:·6 | 0003bb60:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003bb70:· | 0003bb70:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003bb80:· | 0003bb80:·3d22·6964·6d36·3032·3122·3e3c·7461·626c··="idm6021"><tabl | ||
| 0003bb90:· | 0003bb90:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003bba0:· | 0003bba0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003bbb0:· | 0003bbb0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003bbc0:· | 0003bbc0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003bbd0:· | 0003bbd0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003bbe0:· | 0003bbe0:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003bbf0:· | 0003bbf0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003bc00:· | 0003bc00:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003bc10:· | 0003bc10:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003bc20:· | 0003bc20:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003bc30:· | 0003bc30:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003bc40:· | 0003bc40:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bc50:· | 0003bc50:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003bc60:·3 | 0003bc60:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003bc70:· | 0003bc70:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003bc80:· | 0003bc80:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003bc90:·2 | 0003bc90:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003bca0:· | 0003bca0:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003bcb0:· | 0003bcb0:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003bcc0:· | 0003bcc0:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003bcd0:· | 0003bcd0:·6167·733a·0a20·202d·2043·4345·2d38·3537··ags:.··-·CCE-857 | ||
| 0003bce0:· | 0003bce0:·3838·2d38·0a20·202d·2043·4a49·532d·352e··88-8.··-·CJIS-5. | ||
| 0003bcf0:· | 0003bcf0:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003bd00:· | 0003bd00:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003bd10:· | 0003bd10:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003bd20:· | 0003bd20:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003bd30:· | 0003bd30:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003bd40:· | 0003bd40:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003bd50:· | 0003bd50:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003bd60:· | 0003bd60:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003bd70:· | 0003bd70:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003bd80:· | 0003bd80:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003bd90:· | 0003bd90:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003bda0:· | 0003bda0:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003bdb0:· | 0003bdb0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003bdc0:·7 | 0003bdc0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003bdd0:·5 | 0003bdd0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003bde0:·6 | 0003bde0:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003bdf0:·20 | 0003bdf0:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003be00:·7 | 0003be00:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003be10:· | 0003be10:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003be20:· | 0003be20:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003be30:· | 0003be30:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003be40:·6 | 0003be40:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003be50:· | 0003be50:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| Max diff block lines reached; 16133756/16189674 bytes (99.65%) of diff not shown. | |||
| Offset 135, 14 lines modified | Offset 135, 36 lines modified | ||
| 135 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 135 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 136 | ····························A.14.2.3,·A.14.2.4 | 136 | ····························A.14.2.3,·A.14.2.4 |
| 137 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 137 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 138 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 138 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 139 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 139 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 140 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 140 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 141 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 141 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 144 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 145 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 146 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 147 | get·files·names | ||
| 148 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 149 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 150 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 151 | new·line | ||
| 152 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 153 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 154 | fi | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 147 | -·name:·Gather·the·package·facts | 163 | -·name:·Gather·the·package·facts |
| 148 | ··package_facts: | 164 | ··package_facts: |
| Offset 315, 36 lines modified | Offset 337, 14 lines modified | ||
| 315 | ··-·PCI-DSSv4-11.5.2 | 337 | ··-·PCI-DSSv4-11.5.2 |
| 316 | ··-·high_complexity | 338 | ··-·high_complexity |
| 317 | ··-·high_severity | 339 | ··-·high_severity |
| 318 | ··-·medium_disruption | 340 | ··-·medium_disruption |
| 319 | ··-·no_reboot_needed | 341 | ··-·no_reboot_needed |
| 320 | ··-·restrict_strategy | 342 | ··-·restrict_strategy |
| 321 | ··-·rpm_verify_hashes | 343 | ··-·rpm_verify_hashes |
| 322 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 323 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 324 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 325 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 326 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 327 | get·files·names | ||
| 328 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 329 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 330 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 331 | new·line | ||
| 332 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 333 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 334 | fi | ||
| 335 | else | ||
| 336 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 337 | fi | ||
| 338 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 344 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 339 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages, | 345 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages, |
| 340 | including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and | 346 | including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and |
| 341 | commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 347 | commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 342 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 348 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 343 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions, | 349 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions, |
| 344 | run·the·following·command·to·determine·which·package·owns·it: | 350 | run·the·following·command·to·determine·which·package·owns·it: |
| Offset 384, 14 lines modified | Offset 384, 53 lines modified | ||
| 384 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 384 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 385 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 385 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 386 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 386 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 387 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 387 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 388 | ····························SRG-OS-000278-GPOS-00108 | 388 | ····························SRG-OS-000278-GPOS-00108 |
| 389 | ·············_\x8c_\x8i_\x8s············6.1.1 | 389 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 390 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 390 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 391 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 392 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 393 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 394 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 395 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 396 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 397 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 398 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 399 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 400 | declare·-A·SETPERMS_RPM_DICT | ||
| 401 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 402 | #·is·expected·by·the·RPM·database | ||
| 403 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 404 | $NF·}') | ||
| 405 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 406 | do | ||
| 407 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 408 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 409 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 410 | ········do | ||
| 411 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 412 | duplicates. | ||
| 413 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 414 | ········done | ||
| 415 | done | ||
| 416 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 417 | #·correct·values | ||
| 418 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 419 | do | ||
| 420 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 421 | done | ||
| 422 | else | ||
| 423 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 424 | fi | ||
| 391 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 425 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 392 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 426 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 393 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 427 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 394 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 428 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 395 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 429 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 396 | -·name:·Gather·the·package·facts | 430 | -·name:·Gather·the·package·facts |
| 397 | ··package_facts: | 431 | ··package_facts: |
| Max diff block lines reached; 1236133/1241938 bytes (99.53%) of diff not shown. | |||
| Offset 15196, 415 lines modified | Offset 15196, 415 lines modified | ||
| 0003b5b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b5b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b5c0:·2223·6964·6d36·3032·3022·2074·6162·696e··"#idm6020"·tabin | 0003b5c0:·2223·6964·6d36·3032·3022·2074·6162·696e··"#idm6020"·tabin | ||
| 0003b5d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b5d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b5e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b5e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b5f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b5f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b600:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b600:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (401 lines added, 401 lines removed) | |
| 0003b610:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b610:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b620:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b620:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b630:·6 | 0003b630:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003b640:·3 | 0003b640:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b650:· | 0003b650:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b660:· | 0003b660:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b670:· | 0003b670:·6d36·3032·3022·3e3c·7072·653e·3c63·6f64··m6020"><pre><cod | ||
| 0003b680:· | 0003b680:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003b690:·6 | 0003b690:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003b6a0:·6 | 0003b6a0:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003b6b0:· | 0003b6b0:·6174·666f·726d·730a·6966·2021·2028·207b··atforms.if·!·(·{ | ||
| 0003b6c0:· | 0003b6c0:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b6d0:· | 0003b6d0:·6b65·726e·656c·203b·7d20·2661·6d70·3b26··kernel·;}·&& | ||
| 0003b6e0:· | 0003b6e0:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003b6f0:·7 | 0003b6f0:·6574·202d·7120·7270·6d2d·6f73·7472·6565··et·-q·rpm-ostree | ||
| 0003b700:· | 0003b700:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b710:· | 0003b710:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b720:· | 0003b720:·626f·6f74·6320·3b7d·2026·616d·703b·2661··bootc·;}·&&a | ||
| 0003b730:· | 0003b730:·6d70·3b20·7b20·2120·7270·6d20·2d2d·7175··mp;·{·!·rpm·--qu | ||
| 0003b740:· | 0003b740:·6965·7420·2d71·206f·7065·6e73·6869·6674··iet·-q·openshift | ||
| 0003b750:· | 0003b750:·2d6b·7562·656c·6574·203b·7d20·293b·2074··-kubelet·;}·);·t | ||
| 0003b760:· | 0003b760:·6865·6e0a·0a23·2046·696e·6420·7768·6963··hen..#·Find·whic | ||
| 0003b770:·6 | 0003b770:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | ||
| 0003b780:· | 0003b780:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | ||
| 0003b790:· | 0003b790:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | ||
| 0003b7a0:·6 | 0003b7a0:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | ||
| 0003b7b0:· | 0003b7b0:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | ||
| 0003b7c0:·6 | 0003b7c0:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | ||
| 0003b7d0:· | 0003b7d0:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | ||
| 0003b7e0:· | 0003b7e0:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003b7f0:· | 0003b7f0:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | ||
| 0003b800:·2 | 0003b800:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | ||
| 0003b810:· | 0003b810:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | ||
| 0003b820:· | 0003b820:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | ||
| 0003b830:·4 | 0003b830:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | ||
| 0003b840:·2 | 0003b840:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | ||
| 0003b850:· | 0003b850:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | ||
| 0003b860:· | 0003b860:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | ||
| 0003b870:· | 0003b870:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | ||
| 0003b880:· | 0003b880:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | ||
| 0003b890:· | 0003b890:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | ||
| 0003b8a0:· | 0003b8a0:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | ||
| 0003b8b0:· | 0003b8b0:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | ||
| 0003b8c0:· | 0003b8c0:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | ||
| 0003b8d0:· | 0003b8d0:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | ||
| 0003b8e0:· | 0003b8e0:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003b8f0:· | 0003b8f0:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | ||
| 0003b900:· | 0003b900:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003b910:· | 0003b910:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | ||
| 0003b920:· | 0003b920:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | ||
| 0003b930:· | 0003b930:·207a·7970·7065·7220·696e·7374·616c·6c20···zypper·install· | ||
| 0003b940:· | 0003b940:·2d66·202d·7920·2470·6163·6b61·6765·735f··-f·-y·$packages_ | ||
| 0003b950:· | 0003b950:·746f·5f72·6569·6e73·7461·6c6c·0a20·2020··to_reinstall.··· | ||
| 0003b960:· | 0003b960:·200a·6669·0a0a·656c·7365·0a20·2020·2026···.fi..else.····& | ||
| 0003b970:· | 0003b970:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | ||
| 0003b980:· | 0003b980:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | ||
| 0003b990:·6 | 0003b990:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | ||
| 0003b9a0:·6 | 0003b9a0:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | ||
| 0003b9b0:· | 0003b9b0:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | ||
| 0003b9c0:· | 0003b9c0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b9d0:· | 0003b9d0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b9e0:· | 0003b9e0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b9f0:·6 | 0003b9f0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003ba00:· | 0003ba00:·7267·6574·3d22·2369·646d·3630·3231·2220··rget="#idm6021"· | ||
| 0003ba10:· | 0003ba10:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003ba20:· | 0003ba20:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003ba30:· | 0003ba30:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003ba40:· | 0003ba40:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003ba50:· | 0003ba50:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003ba60:· | 0003ba60:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003ba70:·6 | 0003ba70:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003ba80:·7 | 0003ba80:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003ba90:·62 | 0003ba90:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003baa0:· | 0003baa0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003bab0:·22 | 0003bab0:·2220·6964·3d22·6964·6d36·3032·3122·3e3c··"·id="idm6021">< | ||
| 0003bac0:· | 0003bac0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003bad0:· | 0003bad0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003bae0:· | 0003bae0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003baf0:· | 0003baf0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003bb00:· | 0003bb00:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003bb10:· | 0003bb10:·6974·793a·3c2f·7468·3e3c·7464·3e68·6967··ity:</th><td>hig | ||
| 0003bb20:· | 0003bb20:·683c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··h</td></tr><tr>< | ||
| 0003bb30:· | 0003bb30:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003bb40:· | 0003bb40:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | ||
| 0003bb50:· | 0003bb50:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003bb60:· | 0003bb60:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003bb70:· | 0003bb70:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003bb80:· | 0003bb80:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003bb90:· | 0003bb90:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 0003bba0:· | 0003bba0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003bbb0:· | 0003bbb0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003bbc0:· | 0003bbc0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | ||
| 0003bbd0:· | 0003bbd0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | ||
| 0003bbe0:· | 0003bbe0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | ||
| 0003bbf0:· | 0003bbf0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | ||
| 0003bc00:· | 0003bc00:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | ||
| 0003bc10:· | 0003bc10:·2d38·3537·3838·2d38·0a20·202d·2043·4a49··-85788-8.··-·CJI | ||
| 0003bc20:· | 0003bc20:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003bc30:· | 0003bc30:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003bc40:· | 0003bc40:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003bc50:· | 0003bc50:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003bc60:· | 0003bc60:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003bc70:· | 0003bc70:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bc80:· | 0003bc80:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003bc90:· | 0003bc90:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003bca0:· | 0003bca0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bcb0:· | 0003bcb0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003bcc0:· | 0003bcc0:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003bcd0:· | 0003bcd0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003bce0:·2 | 0003bce0:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003bcf0:· | 0003bcf0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003bd00:· | 0003bd00:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003bd10:· | 0003bd10:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003bd20:· | 0003bd20:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003bd30:·6 | 0003bd30:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003bd40:· | 0003bd40:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003bd50:·6e | 0003bd50:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003bd60:· | 0003bd60:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003bd70:· | 0003bd70:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003bd80:·6 | 0003bd80:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| Max diff block lines reached; 14833157/14889075 bytes (99.62%) of diff not shown. | |||
| Offset 130, 14 lines modified | Offset 130, 36 lines modified | ||
| 130 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 130 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 131 | ····························A.14.2.3,·A.14.2.4 | 131 | ····························A.14.2.3,·A.14.2.4 |
| 132 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 132 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 133 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 133 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 134 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 134 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 135 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 135 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 139 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 140 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 141 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 142 | get·files·names | ||
| 143 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 144 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 145 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 146 | new·line | ||
| 147 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 148 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 149 | fi | ||
| 150 | else | ||
| 151 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 152 | fi | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 142 | -·name:·Gather·the·package·facts | 158 | -·name:·Gather·the·package·facts |
| 143 | ··package_facts: | 159 | ··package_facts: |
| Offset 310, 36 lines modified | Offset 332, 14 lines modified | ||
| 310 | ··-·PCI-DSSv4-11.5.2 | 332 | ··-·PCI-DSSv4-11.5.2 |
| 311 | ··-·high_complexity | 333 | ··-·high_complexity |
| 312 | ··-·high_severity | 334 | ··-·high_severity |
| 313 | ··-·medium_disruption | 335 | ··-·medium_disruption |
| 314 | ··-·no_reboot_needed | 336 | ··-·no_reboot_needed |
| 315 | ··-·restrict_strategy | 337 | ··-·restrict_strategy |
| 316 | ··-·rpm_verify_hashes | 338 | ··-·rpm_verify_hashes |
| 317 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 318 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 319 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 320 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 321 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 322 | get·files·names | ||
| 323 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 324 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 325 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 326 | new·line | ||
| 327 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 328 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 329 | fi | ||
| 330 | else | ||
| 331 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 332 | fi | ||
| 333 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 339 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 334 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, | 340 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, |
| 335 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, | 341 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, |
| 336 | which·can·be·found·with: | 342 | which·can·be·found·with: |
| 337 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 343 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 338 | run·the·following·command·to·determine·which·package·owns·it: | 344 | run·the·following·command·to·determine·which·package·owns·it: |
| 339 | $·rpm·-qf·FILENAME | 345 | $·rpm·-qf·FILENAME |
| Offset 421, 14 lines modified | Offset 421, 53 lines modified | ||
| 421 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 421 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 422 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 422 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 423 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 423 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 424 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 424 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 425 | ····························SRG-OS-000278-GPOS-00108 | 425 | ····························SRG-OS-000278-GPOS-00108 |
| 426 | ·············_\x8c_\x8i_\x8s············6.1.1 | 426 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 427 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 427 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 433 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 434 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 435 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 436 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 437 | declare·-A·SETPERMS_RPM_DICT | ||
| 438 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 439 | #·is·expected·by·the·RPM·database | ||
| 440 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 441 | $NF·}') | ||
| 442 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 443 | do | ||
| 444 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 445 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 446 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 447 | ········do | ||
| 448 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 449 | duplicates. | ||
| 450 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 451 | ········done | ||
| 452 | done | ||
| 453 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 454 | #·correct·values | ||
| 455 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 456 | do | ||
| 457 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 458 | done | ||
| 459 | else | ||
| 460 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 461 | fi | ||
| 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 462 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 463 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 464 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 465 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 466 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 433 | -·name:·Gather·the·package·facts | 467 | -·name:·Gather·the·package·facts |
| 434 | ··package_facts: | 468 | ··package_facts: |
| Max diff block lines reached; 1416365/1422018 bytes (99.60%) of diff not shown. | |||
| Offset 15096, 184 lines modified | Offset 15096, 184 lines modified | ||
| 0003af70:·6172·6765·743d·2223·6964·6d36·3336·3122··arget="#idm6361" | 0003af70:·6172·6765·743d·2223·6964·6d36·3336·3122··arget="#idm6361" | ||
| 0003af80:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003af80:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003af90:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003af90:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003afa0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003afa0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003afb0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003afb0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003afc0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003afc0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003afd0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003afd0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003afe0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003aff0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b000:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b010:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003afe0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003aff0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b000:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b010:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b020:·2220·6964·3d22·6964·6d36·3336·3122·3e3c··"·id="idm6361">< | |||
| 0003b030:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b040:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b050:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b060:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b070:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b080:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b090:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b0a0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b0b0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b0c0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b0d0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b0e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b0f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b100:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b110:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b120:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003b130:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003b140:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003b150:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003b160:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003b170:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b180:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003b190:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b1a0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b1b0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b | 0003b020:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b1d0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b1e0:·3633·3632·2220·7461·6269·6e64·6578·3d22··6362"·tabindex=" | |||
| 0003b1f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b200:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b210:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b220:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b230:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b240:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003b | 0003b030:·2269·646d·3633·3631·223e·3c70·7265·3e3c··"idm6361"><pre>< | ||
| 0003b040:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003b050:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003b060:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003b070:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b080:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b090:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b0a0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b0b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b0c0:·2223·6964·6d36·3336·3222·2074·6162·696e··"#idm6362"·tabin | |||
| 0003b0d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b0e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b0f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b100:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b110:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b120:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b130:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b | 0003b140:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b270 | 0003b150:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b | 0003b160:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b | 0003b170:·6d36·3336·3222·3e3c·7461·626c·6520·636c··m6362"><table·cl | ||
| 0003b | 0003b180:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b | 0003b190:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b | 0003b1a0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b | 0003b1b0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b | 0003b1c0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b | 0003b1d0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b | 0003b1e0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b | 0003b1f0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b | 0003b200:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b | 0003b210:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b | 0003b220:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b | 0003b230:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003b | 0003b240:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003b | 0003b250:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003b | 0003b260:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | ||
| 0003b390:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003b3a0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003b3b0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003b3c0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003b3d0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b3e0:·2d38·3332·3839·2d39·0a20·202d·2043·4a49··-83289-9.··-·CJI | |||
| 0003b3f0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b400:·4953·412d·5354·4947·2d53·4c45·532d·3135··ISA-STIG-SLES-15 | |||
| 0003b410:·2d30·3130·3431·390a·2020·2d20·4e49·5354··-010419.··-·NIST | |||
| 0003b420:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b430:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b440:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b450:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b460:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b470:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b480:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b490:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b4a0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b4b0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b4c0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b4d0:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003b4e0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b4f0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b500:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b510:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b520:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003b530:·226b·6572·6e65·6c2d·6465·6661·756c·7422··"kernel-default" | |||
| 0003b540:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003b | 0003b270:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | ||
| 0003b280:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003b290:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003b2a0:·6f72·6d73·0a69·6620·7270·6d20·2d2d·7175··orms.if·rpm·--qu | |||
| 0003b2b0:·6965·7420·2d71·206b·6572·6e65·6c2d·6465··iet·-q·kernel-de | |||
| 0003b2c0:·6661·756c·743b·2074·6865·6e0a·0a7a·7970··fault;·then..zyp | |||
| 0003b2d0:·7065·7220·696e·7374·616c·6c20·2d79·2022··per·install·-y·" | |||
| 0003b2e0:·6169·6465·220a·0a65·6c73·650a·2020·2020··aide"..else.···· | |||
| 0003b2f0:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | |||
| 0003b300:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | |||
| 0003b310:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | |||
| 0003b320:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | |||
| 0003b330:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | |||
| Max diff block lines reached; 22765895/22789935 bytes (99.89%) of diff not shown. | |||
| Offset 15010, 361 lines modified | Offset 15010, 361 lines modified | ||
| 0003aa10:·6172·6765·743d·2223·6964·6d36·3437·3422··arget="#idm6474" | 0003aa10:·6172·6765·743d·2223·6964·6d36·3437·3422··arget="#idm6474" | ||
| 0003aa20:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003aa20:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003aa30:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003aa30:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003aa40:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003aa40:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003aa50:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003aa50:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003aa60:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003aa60:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003aa70:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003aa70:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003aa80:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003aa90:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003aaa0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003aa80:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003aa90:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003aaa0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003aab0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003aac0:·6522·2069·643d·2269·646d·3634·3734·223e··e"·id="idm6474"> | |||
| 0003aad0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003aae0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003aaf0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ab00:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003ab10:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003ab20:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003ab30:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ab40:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003ab50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ab60:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003ab70:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003ab80:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003ab90:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003aba0:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 0003abb0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003abc0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003abd0:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003abe0:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003abf0:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003ac00:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003ac10:·7461·6773·3a0a·2020·2d20·4343·452d·3835··tags:.··-·CCE-85 | |||
| 0003ac20:·3631·302d·340a·2020·2d20·4449·5341·2d53··610-4.··-·DISA-S | |||
| 0003ac30:·5449·472d·534c·4553·2d31·352d·3033·3036··TIG-SLES-15-0306 | |||
| 0003ac40:·3330·0a20·202d·204e·4953·542d·3830·302d··30.··-·NIST-800- | |||
| 0003ac50:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | |||
| 0003ac60:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | |||
| 0003ac70:·3329·2e31·0a20·202d·2061·6964·655f·6368··3).1.··-·aide_ch | |||
| 0003ac80:·6563·6b5f·6175·6469·745f·746f·6f6c·730a··eck_audit_tools. | |||
| 0003ac90:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003aca0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003acb0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003acc0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003acd0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003ace0:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | |||
| 0003acf0:·7465·6779·0a0a·2d20·6e61·6d65·3a20·436f··tegy..-·name:·Co | |||
| 0003ad00:·6e66·6967·7572·6520·4149·4445·2074·6f20··nfigure·AIDE·to· | |||
| 0003ad10:·5665·7269·6679·2074·6865·2041·7564·6974··Verify·the·Audit | |||
| 0003ad20:·2054·6f6f·6c73·202d·2047·6174·6865·7220···Tools·-·Gather· | |||
| 0003ad30:·4c69·7374·206f·6620·5061·636b·6167·6573··List·of·Packages | |||
| 0003ad40:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003ad50:·2d38·3536·3130·2d34·0a20·202d·2044·4953··-85610-4.··-·DIS | |||
| 0003ad60:·412d·5354·4947·2d53·4c45·532d·3135·2d30··A-STIG-SLES-15-0 | |||
| 0003ad70:·3330·3633·300a·2020·2d20·4e49·5354·2d38··30630.··-·NIST-8 | |||
| 0003ad80:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | |||
| 0003ad90:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | |||
| 0003ada0:·2d39·2833·292e·310a·2020·2d20·6169·6465··-9(3).1.··-·aide | |||
| 0003adb0:·5f63·6865·636b·5f61·7564·6974·5f74·6f6f··_check_audit_too | |||
| 0003adc0:·6c73·0a20·202d·2061·6964·655f·6368·6563··ls.··-·aide_chec | |||
| 0003add0:·6b5f·6175·6469·745f·746f·6f6c·730a·2020··k_audit_tools.·· | |||
| 0003ade0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003adf0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003ae00:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003ae10:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003ae20:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003ae30:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | |||
| 0003ae40:·6779·0a20·2061·6e73·6962·6c65·2e62·7569··gy.··ansible.bui | |||
| 0003ae50:·6c74·696e·2e70·6163·6b61·6765·5f66·6163··ltin.package_fac | |||
| 0003ae60:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003ae70:·2061·7574·6f0a·2020·7768·656e·3a20·2722···auto.··when:·'" | |||
| 0003ae80:·6b65·726e·656c·2d64·6566·6175·6c74·2220··kernel-default"· | |||
| 0003ae90:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0003aea0:·2e70·6163·6b61·6765·7327·0a0a·2d20·6e61··.packages'..-·na | |||
| 0003aeb0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003aec0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003aed0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003aee0:·3a20·277b·7b20·6974·656d·207d·7d27·0a20··:·'{{·item·}}'.· | |||
| 0003aef0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003af00:·740a·2020·7769·7468·5f69·7465·6d73·3a0a··t.··with_items:. | |||
| 0003af10:·2020·2d20·6169·6465·0a20·2077·6865·6e3a····-·aide.··when: | |||
| 0003af20:·2027·226b·6572·6e65·6c2d·6465·6661·756c···'"kernel-defaul | |||
| 0003af30:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | |||
| 0003af40:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003af50:·7461·6773·3a0a·2020·2d20·4343·452d·3835··tags:.··-·CCE-85 | |||
| 0003af60:·3631·302d·340a·2020·2d20·4449·5341·2d53··610-4.··-·DISA-S | |||
| 0003af70:·5449·472d·534c·4553·2d31·352d·3033·3036··TIG-SLES-15-0306 | |||
| 0003af80:·3330·0a20·202d·204e·4953·542d·3830·302d··30.··-·NIST-800- | |||
| 0003af90:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | |||
| 0003afa0:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | |||
| 0003afb0:·3329·2e31·0a20·202d·2061·6964·655f·6368··3).1.··-·aide_ch | |||
| 0003afc0:·6563·6b5f·6175·6469·745f·746f·6f6c·730a··eck_audit_tools. | |||
| 0003afd0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003afe0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003aff0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b000:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b010:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b020:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | |||
| 0003b030:·7465·6779·0a0a·2d20·6e61·6d65·3a20·5365··tegy..-·name:·Se | |||
| 0003b040:·7420·6175·6469·745f·746f·6f6c·7320·6661··t·audit_tools·fa | |||
| 0003b050:·6374·0a20·2073·6574·5f66·6163·743a·0a20··ct.··set_fact:.· | |||
| 0003b060:·2020·2061·7564·6974·5f74·6f6f·6c73·3a0a·····audit_tools:. | |||
| 0003b070:·2020·2020·2d20·2f75·7372·2f73·6269·6e2f······-·/usr/sbin/ | |||
| 0003b080:·6175·6469·7370·640a·2020·2020·2d20·2f75··audispd.····-·/u | |||
| 0003b090:·7372·2f73·6269·6e2f·6175·6469·7463·746c··sr/sbin/auditctl | |||
| 0003b0a0:·0a20·2020·202d·202f·7573·722f·7362·696e··.····-·/usr/sbin | |||
| 0003b0b0:·2f61·7564·6974·640a·2020·2020·2d20·2f75··/auditd.····-·/u | |||
| 0003b0c0:·7372·2f73·6269·6e2f·6175·6765·6e72·756c··sr/sbin/augenrul | |||
| 0003b0d0:·6573·0a20·2020·202d·202f·7573·722f·7362··es.····-·/usr/sb | |||
| 0003b0e0:·696e·2f61·7572·6570·6f72·740a·2020·2020··in/aureport.···· | |||
| 0003b0f0:·2d20·2f75·7372·2f73·6269·6e2f·6175·7365··-·/usr/sbin/ause | |||
| 0003b100:·6172·6368·0a20·2020·202d·202f·7573·722f··arch.····-·/usr/ | |||
| 0003b110:·7362·696e·2f61·7574·7261·6365·0a20·2077··sbin/autrace.··w | |||
| 0003b120:·6865·6e3a·2027·226b·6572·6e65·6c2d·6465··hen:·'"kernel-de | |||
| 0003b130:·6661·756c·7422·2069·6e20·616e·7369·626c··fault"·in·ansibl | |||
| 0003b140:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003b150:·270a·2020·7461·6773·3a0a·2020·2d20·4343··'.··tags:.··-·CC | |||
| 0003b160:·452d·3835·3631·302d·340a·2020·2d20·4449··E-85610-4.··-·DI | |||
| 0003b170:·5341·2d53·5449·472d·534c·4553·2d31·352d··SA-STIG-SLES-15- | |||
| 0003b180:·3033·3036·3330·0a20·202d·204e·4953·542d··030630.··-·NIST- | |||
| 0003b190:·3830·302d·3533·2d41·552d·3928·3329·0a20··800-53-AU-9(3).· | |||
| 0003b1a0:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | |||
| 0003b1b0:·552d·3928·3329·2e31·0a20·202d·2061·6964··U-9(3).1.··-·aid | |||
| 0003b1c0:·655f·6368·6563·6b5f·6175·6469·745f·746f··e_check_audit_to | |||
| Max diff block lines reached; 20975476/21023942 bytes (99.77%) of diff not shown. | |||
| Offset 101, 14 lines modified | Offset 101, 82 lines modified | ||
| 101 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 101 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 102 | Identifiers:·CCE-85610-4 | 102 | Identifiers:·CCE-85610-4 |
| 103 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001496,·CCI-001494,·CCI-001495,·CCI-001493 | 103 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001496,·CCI-001494,·CCI-001495,·CCI-001493 |
| 104 | ·············_\x8n_\x8i_\x8s_\x8t····AU-9(3),·AU-9(3).1 | 104 | ·············_\x8n_\x8i_\x8s_\x8t····AU-9(3),·AU-9(3).1 |
| 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000278-GPOS-00108 | 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000278-GPOS-00108 |
| 106 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-030630 | 106 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-030630 |
| 107 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234962r991567_rule | 107 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234962r991567_rule |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 113 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 114 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 115 | zypper·install·-y·"aide" | ||
| 116 | if·grep·-i·'^.*/usr/sbin/auditctl.*$'·/etc/aide.conf;·then | ||
| 117 | sed·-i·"s#.*/usr/sbin/auditctl.*#/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 118 | aide.conf | ||
| 119 | else | ||
| 120 | echo·"/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 121 | fi | ||
| 122 | if·grep·-i·'^.*/usr/sbin/auditd.*$'·/etc/aide.conf;·then | ||
| 123 | sed·-i·"s#.*/usr/sbin/auditd.*#/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 124 | else | ||
| 125 | echo·"/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 126 | fi | ||
| 127 | if·grep·-i·'^.*/usr/sbin/ausearch.*$'·/etc/aide.conf;·then | ||
| 128 | sed·-i·"s#.*/usr/sbin/ausearch.*#/usr/sbin/ausearch·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 129 | aide.conf | ||
| 130 | else | ||
| 131 | echo·"/usr/sbin/ausearch·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 132 | fi | ||
| 133 | if·grep·-i·'^.*/usr/sbin/aureport.*$'·/etc/aide.conf;·then | ||
| 134 | sed·-i·"s#.*/usr/sbin/aureport.*#/usr/sbin/aureport·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 135 | aide.conf | ||
| 136 | else | ||
| 137 | echo·"/usr/sbin/aureport·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 138 | fi | ||
| 139 | if·grep·-i·'^.*/usr/sbin/autrace.*$'·/etc/aide.conf;·then | ||
| 140 | sed·-i·"s#.*/usr/sbin/autrace.*#/usr/sbin/autrace·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 141 | else | ||
| 142 | echo·"/usr/sbin/autrace·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 143 | fi | ||
| 144 | if·grep·-i·'^.*/usr/sbin/augenrules.*$'·/etc/aide.conf;·then | ||
| 145 | sed·-i·"s#.*/usr/sbin/augenrules.*#/usr/sbin/augenrules·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 146 | aide.conf | ||
| 147 | else | ||
| 148 | echo·"/usr/sbin/augenrules·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 149 | fi | ||
| 150 | if·grep·-i·'^.*/usr/sbin/audispd.*$'·/etc/aide.conf;·then | ||
| 151 | sed·-i·"s#.*/usr/sbin/audispd.*#/usr/sbin/audispd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 152 | else | ||
| 153 | echo·"/usr/sbin/audispd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 154 | fi | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 113 | -·name:·Gather·the·package·facts | 163 | -·name:·Gather·the·package·facts |
| 114 | ··package_facts: | 164 | ··package_facts: |
| Offset 216, 82 lines modified | Offset 284, 14 lines modified | ||
| 216 | ··-·NIST-800-53-AU-9(3).1 | 284 | ··-·NIST-800-53-AU-9(3).1 |
| 217 | ··-·aide_check_audit_tools | 285 | ··-·aide_check_audit_tools |
| 218 | ··-·low_complexity | 286 | ··-·low_complexity |
| 219 | ··-·low_disruption | 287 | ··-·low_disruption |
| 220 | ··-·medium_severity | 288 | ··-·medium_severity |
| 221 | ··-·no_reboot_needed | 289 | ··-·no_reboot_needed |
| 222 | ··-·restrict_strategy | 290 | ··-·restrict_strategy |
| 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 228 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 229 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 230 | zypper·install·-y·"aide" | ||
| 231 | if·grep·-i·'^.*/usr/sbin/auditctl.*$'·/etc/aide.conf;·then | ||
| 232 | sed·-i·"s#.*/usr/sbin/auditctl.*#/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 233 | aide.conf | ||
| 234 | else | ||
| 235 | echo·"/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 236 | fi | ||
| 237 | if·grep·-i·'^.*/usr/sbin/auditd.*$'·/etc/aide.conf;·then | ||
| 238 | sed·-i·"s#.*/usr/sbin/auditd.*#/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 239 | else | ||
| 240 | echo·"/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 241 | fi | ||
| 242 | if·grep·-i·'^.*/usr/sbin/ausearch.*$'·/etc/aide.conf;·then | ||
| 243 | sed·-i·"s#.*/usr/sbin/ausearch.*#/usr/sbin/ausearch·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 244 | aide.conf | ||
| 245 | else | ||
| 246 | echo·"/usr/sbin/ausearch·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| Max diff block lines reached; 1483025/1488731 bytes (99.62%) of diff not shown. | |||
| Offset 16817, 96 lines modified | Offset 16817, 96 lines modified | ||
| 00041b00:·612d·7461·7267·6574·3d22·2369·646d·3933··a-target="#idm93 | 00041b00:·612d·7461·7267·6574·3d22·2369·646d·3933··a-target="#idm93 | ||
| 00041b10:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | 00041b10:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | ||
| 00041b20:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00041b20:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 00041b30:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 00041b30:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 00041b40:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 00041b40:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 00041b50:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 00041b50:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 00041b60:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 00041b60:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 00041b70:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 00041b80:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 00041b90:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00041ba0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00041bb0:·6522·2069·643d·2269·646d·3933·3839·223e··e"·id="idm9389"> | |||
| 00041bc0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00041bd0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00041b70:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 00041b80:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00041b90:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00041ba0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00041bb0:·6170·7365·2220·6964·3d22·6964·6d39·3338··apse"·id="idm938 | |||
| 00041bc0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 00041bd0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00041be0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00041b | 00041be0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 00041bf0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 00041c00:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 00041c00:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00041c10:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00041c20:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00041c30:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00041c40:·3a3c·2f74·683e·3c74·643e·6869·6768·3c2f··:</th><td>high</ | |||
| 00041c50:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00041c | 00041c10:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 00041c70:·7472·7565·3c2f·7464·3e3c·2f74·723e·3c74··true</td></tr><t | |||
| 00041c80:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00041c90:·2f74·683e·3c74·643e·7061·7463·683c·2f74··/th><td>patch</t | |||
| 00041ca0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00041cb0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00041cc0:·3a20·5365·6375·7269·7479·2070·6174·6368··:·Security·patch | |||
| 00041cd0:·6573·2061·7265·2075·7020·746f·2064·6174··es·are·up·to·dat | |||
| 00041ce0:·650a·2020·7061·636b·6167·653a·0a20·2020··e.··package:.··· | |||
| 00041cf0:·206e·616d·653a·2027·2a27·0a20·2020·2073···name:·'*'.····s | |||
| 00041d00:·7461·7465·3a20·6c61·7465·7374·0a20·2074··tate:·latest.··t | |||
| 00041d10:·6167·733a·0a20·202d·2043·4345·2d38·3332··ags:.··-·CCE-832 | |||
| 00041d20:·3631·2d38·0a20·202d·2043·4a49·532d·352e··61-8.··-·CJIS-5. | |||
| 00041d30:·3130·2e34·2e31·0a20·202d·2044·4953·412d··10.4.1.··-·DISA- | |||
| 00041d40:·5354·4947·2d53·4c45·532d·3135·2d30·3130··STIG-SLES-15-010 | |||
| 00041d50:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 00041d60:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 00041d70:·4e49·5354·2d38·3030·2d35·332d·5349·2d32··NIST-800-53-SI-2 | |||
| 00041d80:·2835·290a·2020·2d20·4e49·5354·2d38·3030··(5).··-·NIST-800 | |||
| 00041d90:·2d35·332d·5349·2d32·2863·290a·2020·2d20··-53-SI-2(c).··-· | |||
| 00041da0:·5043·492d·4453·532d·5265·712d·362e·320a··PCI-DSS-Req-6.2. | |||
| 00041db0:·2020·2d20·5043·492d·4453·5376·342d·362e····-·PCI-DSSv4-6. | |||
| 00041dc0:·330a·2020·2d20·5043·492d·4453·5376·342d··3.··-·PCI-DSSv4- | |||
| 00041dd0:·362e·332e·330a·2020·2d20·6869·6768·5f64··6.3.3.··-·high_d | |||
| 00041de0:·6973·7275·7074·696f·6e0a·2020·2d20·6c6f··isruption.··-·lo | |||
| 00041df0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 00041e00:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 00041e10:·0a20·202d·2070·6174·6368·5f73·7472·6174··.··-·patch_strat | |||
| 00041e20:·6567·790a·2020·2d20·7265·626f·6f74·5f72··egy.··-·reboot_r | |||
| 00041e30:·6571·7569·7265·640a·2020·2d20·7365·6375··equired.··-·secu | |||
| 00041e40:·7269·7479·5f70·6174·6368·6573·5f75·705f··rity_patches_up_ | |||
| 00041e50:·746f·5f64·6174·650a·2020·2d20·736b·6970··to_date.··-·skip | |||
| 00041e60:·5f61·6e73·6962·6c65·5f6c·696e·740a·3c2f··_ansible_lint.</ | |||
| 00041e70:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00041e80:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00041e90:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00041ea0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00041eb0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00041ec0:·2369·646d·3933·3930·2220·7461·6269·6e64··#idm9390"·tabind | |||
| 00041ed0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00041ee0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00041ef0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00041f00:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00041f10:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00041f20:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 00041f30:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 00041f40:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00041f50:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00041f60:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00041f70:·3933·3930·223e·3c74·6162·6c65·2063·6c61··9390"><table·cla | |||
| 00041f80:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00041f90:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00041fa0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00041fb0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00041fc0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00041fd0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00041fe0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00041ff0:·696f·6e3a·3c2f·7468·3e3c·7464·3e68·6967··ion:</th><td>hig | |||
| 0004 | 00041c20:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 00042010:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00042020:·7464·3e74·7275·653c·2f74·643e·3c2f·7472··td>true</td></tr | |||
| 00042030:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00042040:·793a·3c2f·7468·3e3c·7464·3e70·6174·6368··y:</th><td>patch | |||
| 00042050:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00042060:·653e·3c70·7265·3e3c·636f·6465·3e0a·0a7a··e><pre><code>..z | |||
| 00042070:·7970·7065·7220·7061·7463·6820·2d67·2073··ypper·patch·-g·s | |||
| 0004 | 00041c30:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 00041c40:·7468·3e3c·7464·3e68·6967·683c·2f74·643e··th><td>high</td> | |||
| 00041c50:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00041c60:·6f6f·743a·3c2f·7468·3e3c·7464·3e74·7275··oot:</th><td>tru | |||
| 00041c70:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 00041c80:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00041c90:·3e3c·7464·3e70·6174·6368·3c2f·7464·3e3c··><td>patch</td>< | |||
| 00041ca0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 00041cb0:·3e3c·636f·6465·3e0a·0a7a·7970·7065·7220··><code>..zypper· | |||
| 00041cc0:·7061·7463·6820·2d67·2073·6563·7572·6974··patch·-g·securit | |||
| 00041cd0:·7920·2d79·0a3c·2f63·6f64·653e·3c2f·7072··y·-y.</code></pr | |||
| 00041ce0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00041cf0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00041d00:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00041d10:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00041d20:·6172·6765·743d·2223·6964·6d39·3339·3022··arget="#idm9390" | |||
| 00041d30:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00041d40:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00041d50:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00041d60:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00041d70:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00041d80:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00041d90:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 00041da0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00041db0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00041dc0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00041dd0:·6522·2069·643d·2269·646d·3933·3930·223e··e"·id="idm9390"> | |||
| 00041de0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00041df0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00041e00:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| Max diff block lines reached; 9365462/9377356 bytes (99.87%) of diff not shown. | |||
| Offset 276, 14 lines modified | Offset 276, 22 lines modified | ||
| 276 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 | 276 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 |
| 277 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 277 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 278 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010010 | 278 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010010 |
| 279 | ·············_\x8c_\x8i_\x8s············1.9 | 279 | ·············_\x8c_\x8i_\x8s············1.9 |
| 280 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R61 | 280 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R61 |
| 281 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 | 281 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 |
| 282 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234802r991589_rule | 282 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234802r991589_rule |
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | ||
| 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch | ||
| 288 | zypper·patch·-g·security·-y | ||
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 290 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 291 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 292 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch | 293 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch |
| 288 | -·name:·Security·patches·are·up·to·date | 294 | -·name:·Security·patches·are·up·to·date |
| 289 | ··package: | 295 | ··package: |
| Offset 302, 22 lines modified | Offset 310, 14 lines modified | ||
| 302 | ··-·high_disruption | 310 | ··-·high_disruption |
| 303 | ··-·low_complexity | 311 | ··-·low_complexity |
| 304 | ··-·medium_severity | 312 | ··-·medium_severity |
| 305 | ··-·patch_strategy | 313 | ··-·patch_strategy |
| 306 | ··-·reboot_required | 314 | ··-·reboot_required |
| 307 | ··-·security_patches_up_to_date | 315 | ··-·security_patches_up_to_date |
| 308 | ··-·skip_ansible_lint | 316 | ··-·skip_ansible_lint |
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | ||
| 312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch | ||
| 314 | zypper·patch·-g·security·-y | ||
| 315 | Group ·Account·and·Access·Control· Group·contains·6·groups·and·7·rules | 317 | Group ·Account·and·Access·Control· Group·contains·6·groups·and·7·rules |
| 316 | _\x8[_\x8r_\x8e_\x8f_\x8] ·In·traditional·Unix·security,·if·an·attacker·gains·shell·access·to·a·certain·login·account, | 318 | _\x8[_\x8r_\x8e_\x8f_\x8] ·In·traditional·Unix·security,·if·an·attacker·gains·shell·access·to·a·certain·login·account, |
| 317 | they·can·perform·any·action·or·access·any·file·to·which·that·account·has·access.·Therefore,·making·it | 319 | they·can·perform·any·action·or·access·any·file·to·which·that·account·has·access.·Therefore,·making·it |
| 318 | more·difficult·for·unauthorized·people·to·gain·shell·access·to·accounts,·particularly·to·privileged | 320 | more·difficult·for·unauthorized·people·to·gain·shell·access·to·accounts,·particularly·to·privileged |
| 319 | accounts,·is·a·necessary·part·of·securing·a·system.·This·section·introduces·mechanisms·for | 321 | accounts,·is·a·necessary·part·of·securing·a·system.·This·section·introduces·mechanisms·for |
| 320 | restricting·access·to·accounts·under·SUSE·Linux·Enterprise·15. | 322 | restricting·access·to·accounts·under·SUSE·Linux·Enterprise·15. |
| 321 | Group ·Protect·Accounts·by·Configuring·PAM· Group·contains·2·groups·and·2·rules | 323 | Group ·Protect·Accounts·by·Configuring·PAM· Group·contains·2·groups·and·2·rules |
| Offset 526, 14 lines modified | Offset 526, 344 lines modified | ||
| 526 | ·············_\x8n_\x8i_\x8s_\x8t···········AC-9,·AC-9(1) | 526 | ·············_\x8n_\x8i_\x8s_\x8t···········AC-9,·AC-9(1) |
| 527 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 | 527 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 |
| 528 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.2.4 | 528 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.2.4 |
| 529 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 529 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 530 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-020080 | 530 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-020080 |
| 531 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.2.1.4,·10.2.1,·10.2 | 531 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.2.1.4,·10.2.1,·10.2 |
| 532 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234873r991589_rule | 532 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234873r991589_rule |
| 533 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 534 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 535 | if·rpm·--quiet·-q·pam;·then | ||
| 536 | if·[·-f·/usr/bin/authselect·];·then | ||
| 537 | ····if·authselect·list-features·sssd·|·grep·-q·with-silent-lastlog;·then | ||
| 538 | ········if·!·authselect·check;·then | ||
| 539 | ········echo·" | ||
| 540 | ········authselect·integrity·check·failed.·Remediation·aborted! | ||
| 541 | ········This·remediation·could·not·be·applied·because·an·authselect·profile·was·not·selected·or·the | ||
| 542 | selected·profile·is·not·intact. | ||
| 543 | ········It·is·not·recommended·to·manually·edit·the·PAM·files·when·authselect·tool·is·available. | ||
| 544 | ········In·cases·where·the·default·authselect·profile·does·not·cover·a·specific·demand,·a·custom | ||
| 545 | authselect·profile·is·recommended." | ||
| 546 | ········exit·1 | ||
| 547 | ········fi | ||
| 548 | ········authselect·disable-feature·with-silent-lastlog | ||
| 549 | ········authselect·apply-changes·-b | ||
| 550 | ····else | ||
| 551 | ········if·!·authselect·check;·then | ||
| 552 | ········echo·" | ||
| 553 | ········authselect·integrity·check·failed.·Remediation·aborted! | ||
| 554 | ········This·remediation·could·not·be·applied·because·an·authselect·profile·was·not·selected·or·the | ||
| 555 | selected·profile·is·not·intact. | ||
| 556 | ········It·is·not·recommended·to·manually·edit·the·PAM·files·when·authselect·tool·is·available. | ||
| 557 | ········In·cases·where·the·default·authselect·profile·does·not·cover·a·specific·demand,·a·custom | ||
| 558 | authselect·profile·is·recommended." | ||
| 559 | ········exit·1 | ||
| 560 | ········fi | ||
| 561 | ········CURRENT_PROFILE=$(authselect·current·-r·|·awk·'{·print·$1·}') | ||
| 562 | ········#·If·not·already·in·use,·a·custom·profile·is·created·preserving·the·enabled·features. | ||
| 563 | ········if·[[·!·$CURRENT_PROFILE·==·custom/*·]];·then | ||
| 564 | ············ENABLED_FEATURES=$(authselect·current·|·tail·-n+3·|·awk·'{·print·$2·}') | ||
| 565 | ············#·The·"local"·profile·does·not·contain·essential·security·features·required·by·multiple | ||
| 566 | Benchmarks. | ||
| 567 | ············#·If·currently·used,·it·is·replaced·by·"sssd",·which·is·the·best·option·in·this·case. | ||
| 568 | ············if·[[·$CURRENT_PROFILE·==·local·]];·then | ||
| 569 | ················CURRENT_PROFILE="sssd" | ||
| 570 | ············fi | ||
| 571 | ············authselect·create-profile·hardening·-b·$CURRENT_PROFILE | ||
| 572 | ············CURRENT_PROFILE="custom/hardening" | ||
| 573 | ············authselect·apply-changes·-b·--backup=before-hardening-custom-profile | ||
| 574 | ············authselect·select·$CURRENT_PROFILE | ||
| 575 | ············for·feature·in·$ENABLED_FEATURES;·do | ||
| 576 | ················authselect·enable-feature·$feature; | ||
| 577 | ············done | ||
| 578 | ············authselect·apply-changes·-b·--backup=after-hardening-custom-profile | ||
| 579 | ········fi | ||
| 580 | ········PAM_FILE_NAME=$(basename·"/etc/pam.d/login") | ||
| 581 | ········PAM_FILE_PATH="/etc/authselect/$CURRENT_PROFILE/$PAM_FILE_NAME" | ||
| 582 | ········authselect·apply-changes·-b | ||
| 583 | ········if·[·-e·"$PAM_FILE_PATH"·]·;·then | ||
| 584 | ············PAM_FILE_PATH="$PAM_FILE_PATH" | ||
| 585 | ············if·[·-f·/usr/bin/authselect·];·then | ||
| 586 | ················if·!·authselect·check;·then | ||
| 587 | ················echo·" | ||
| 588 | ················authselect·integrity·check·failed.·Remediation·aborted! | ||
| 589 | ················This·remediation·could·not·be·applied·because·an·authselect·profile·was·not·selected | ||
| 590 | or·the·selected·profile·is·not·intact. | ||
| 591 | ················It·is·not·recommended·to·manually·edit·the·PAM·files·when·authselect·tool·is | ||
| 592 | available. | ||
| 593 | ················In·cases·where·the·default·authselect·profile·does·not·cover·a·specific·demand,·a | ||
| 594 | custom·authselect·profile·is·recommended." | ||
| 595 | ················exit·1 | ||
| 596 | ················fi | ||
| 597 | ················CURRENT_PROFILE=$(authselect·current·-r·|·awk·'{·print·$1·}') | ||
| Max diff block lines reached; 907152/925128 bytes (98.06%) of diff not shown. | |||
| Offset 15106, 184 lines modified | Offset 15106, 184 lines modified | ||
| 0003b010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b020:·2223·6964·6d36·3336·3122·2074·6162·696e··"#idm6361"·tabin | 0003b020:·2223·6964·6d36·3336·3122·2074·6162·696e··"#idm6361"·tabin | ||
| 0003b030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b080:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b080:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b090:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b0a0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b0 | 0003b090:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003b0a0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b0b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b0c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b0d0:·6c61·7073·6522·2069·643d·2269·646d·3633··lapse"·id="idm63 | |||
| 0003b0e0:·3631·223e·3c70·7265·3e3c·636f·6465·3e0a··61"><pre><code>. | |||
| 0003b0f0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b100:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b110:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b120:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b130:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b140:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b | 0003b150:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003b160:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | |||
| 0003b170:·3336·3222·2074·6162·696e·6465·783d·2230··362"·tabindex="0 | |||
| 0003b180:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b190:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b1a0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b1b0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b1c0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b1d0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b0d0:·6964·6d36·3336·3122·3e3c·7461·626c·6520··idm6361"><table· | |||
| 0003b0e0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b0f0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b100:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b110:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b120:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b130:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b140:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b150:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b160:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b170:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b180:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b190:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b1a0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b1b0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b1c0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b1d0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b1e0:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b1f0:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b200:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b210:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b220:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b230:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003b240:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b250:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b260:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b270:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b280:·7267·6574·3d22·2369·646d·3633·3632·2220··rget="#idm6362"· | |||
| 0003b290:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b2a0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b2b0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b2c0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b2d0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b2e0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b2f0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b | 0003b1e0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003b | 0003b1f0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b | 0003b200:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b | 0003b210:·7365·2220·6964·3d22·6964·6d36·3336·3222··se"·id="idm6362" | ||
| 0003b | 0003b220:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b | 0003b230:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b | 0003b240:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b | 0003b250:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b | 0003b260:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b | 0003b270:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003b | 0003b280:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b | 0003b290:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b | 0003b2a0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003b2b0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b | 0003b2c0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b | 0003b2d0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b | 0003b2e0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b | 0003b2f0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | ||
| 0003b | 0003b300:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b430:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | |||
| 0003b440:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | |||
| 0003b450:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | |||
| 0003b460:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | |||
| 0003b470:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | |||
| 0003b480:·733a·0a20·202d·2043·4345·2d38·3332·3839··s:.··-·CCE-83289 | |||
| 0003b490:·2d39·0a20·202d·2043·4a49·532d·352e·3130··-9.··-·CJIS-5.10 | |||
| 0003b4a0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b4b0:·4947·2d53·4c45·532d·3135·2d30·3130·3431··IG-SLES-15-01041 | |||
| 0003b4c0:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003b4d0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b4e0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b4f0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b500:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b510:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b520:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b530:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b540:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b550:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b560:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b570:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b580:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003b590:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b5a0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b5b0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b5c0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b5d0:·0a20·2077·6865·6e3a·2027·226b·6572·6e65··.··when:·'"kerne | |||
| 0003b5e0:·6c2d·6465·6661·756c·7422·2069·6e20·616e··l-default"·in·an | |||
| 0003b | 0003b310:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0003b320:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b330:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b340:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b350:·6620·7270·6d20·2d2d·7175·6965·7420·2d71··f·rpm·--quiet·-q | |||
| 0003b360:·206b·6572·6e65·6c2d·6465·6661·756c·743b···kernel-default; | |||
| 0003b370:·2074·6865·6e0a·0a7a·7970·7065·7220·696e···then..zypper·in | |||
| 0003b380:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b390:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003b3a0:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003b3b0:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003b3c0:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003b3d0:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003b3e0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| Max diff block lines reached; 21108007/21132047 bytes (99.89%) of diff not shown. | |||
| Offset 15193, 184 lines modified | Offset 15193, 184 lines modified | ||
| 0003b580:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b580:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b590:·6964·6d32·3837·3022·2074·6162·696e·6465··idm2870"·tabinde | 0003b590:·6964·6d32·3837·3022·2074·6162·696e·6465··idm2870"·tabinde | ||
| 0003b5a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b5a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b5b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b5b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b5c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b5c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b5d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b5d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b5e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b5e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b5f0:·656d·6564·6961·7469·6f6e·20 | 0003b5f0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b600:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b610:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b620:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b630:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b640:·7073·6522·2069·643d·2269·646d·3238·3730··pse"·id="idm2870 | |||
| 0003b600:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b610:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b620:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b630:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b640:·6d32·3837·3022·3e3c·7461·626c·6520·636c··m2870"><table·cl | |||
| 0003b650:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b660:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b670:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b680:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b690:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b6a0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b6b0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b6c0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b6d0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b6e0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b6f0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b700:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b710:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b720:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b | 0003b650:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 0003b660:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b670:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b680:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b690:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b6a0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b6b0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b6c0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b6d0:·2d74·6172·6765·743d·2223·6964·6d32·3837··-target="#idm287 | |||
| 0003b6e0:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | |||
| 0003b6f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b700:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b710:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b720:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b730:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b740:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003b740:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b750:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b760:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b770:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b780:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b790:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b7a0:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003b7b0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b7c0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b7d0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b7e0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b7f0:·6574·3d22·2369·646d·3238·3731·2220·7461··et="#idm2871"·ta | |||
| 0003b800:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b810:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b820:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b830:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b840:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b850:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b860:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b | 0003b750:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b | 0003b760:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b | 0003b770:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b | 0003b780:·2220·6964·3d22·6964·6d32·3837·3122·3e3c··"·id="idm2871">< | ||
| 0003b | 0003b790:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003b | 0003b7a0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003b | 0003b7b0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003b | 0003b7c0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003b | 0003b7d0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003b | 0003b7e0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003b | 0003b7f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b800:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003b | 0003b810:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b | 0003b820:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b | 0003b830:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b | 0003b840:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b850:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003b | 0003b860:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0003b | 0003b870:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003b9a0:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b9b0:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b9c0:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b9d0:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b9e0:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b9f0:·0a20·202d·2043·4345·2d39·3337·3538·2d31··.··-·CCE-93758-1 | |||
| 0003ba00:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003ba10:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003ba20:·2d53·4c45·4d2d·3035·2d36·3531·3031·300a··-SLEM-05-651010. | |||
| 0003ba30:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003ba40:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003ba50:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003ba60:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003ba70:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003ba80:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003ba90:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003baa0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003bab0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003bac0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003bad0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003bae0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003baf0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003bb00:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003bb10:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003bb20:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003bb30:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003bb40:·2077·6865·6e3a·2027·226b·6572·6e65·6c2d···when:·'"kernel- | |||
| 0003bb50:·6465·6661·756c·7422·2069·6e20·616e·7369··default"·in·ansi | |||
| 0003b | 0003b880:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 0003b890:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0003b8a0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0003b8b0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0003b8c0:·7270·6d20·2d2d·7175·6965·7420·2d71·206b··rpm·--quiet·-q·k | |||
| 0003b8d0:·6572·6e65·6c2d·6465·6661·756c·743b·2074··ernel-default;·t | |||
| 0003b8e0:·6865·6e0a·0a7a·7970·7065·7220·696e·7374··hen..zypper·inst | |||
| 0003b8f0:·616c·6c20·2d79·2022·6169·6465·220a·0a65··all·-y·"aide"..e | |||
| 0003b900:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | |||
| 0003b910:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | |||
| 0003b920:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | |||
| 0003b930:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | |||
| 0003b940:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | |||
| Max diff block lines reached; 18050743/18074783 bytes (99.87%) of diff not shown. | |||
| Offset 15186, 183 lines modified | Offset 15186, 183 lines modified | ||
| 0003b510:·6765·743d·2223·6964·6d32·3837·3022·2074··get="#idm2870"·t | 0003b510:·6765·743d·2223·6964·6d32·3837·3022·2074··get="#idm2870"·t | ||
| 0003b520:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b520:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b530:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b530:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b540:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b540:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b550:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b550:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b560:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b560:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b570:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b570:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b580:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b590:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b5a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b5b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b580:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003b590:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b5a0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b5b0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b5c0:·6964·3d22·6964·6d32·3837·3022·3e3c·7461··id="idm2870"><ta | |||
| 0003b5d0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b5e0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b5f0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b600:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b610:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b620:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b630:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b640:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b650:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b660:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b670:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b680:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b690:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b6a0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b6b0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b6c0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b6d0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b6e0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b6f0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b700:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b710:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b720:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003b730:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b740:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b750:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b | 0003b5c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b770:·612d·7461·7267·6574·3d22·2369·646d·3238··a-target="#idm28 | |||
| 0003b780:·3731·2220·7461·6269·6e64·6578·3d22·3022··71"·tabindex="0" | |||
| 0003b790:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b7a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b7b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b7c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b7d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b | 0003b5d0:·646d·3238·3730·223e·3c70·7265·3e3c·636f··dm2870"><pre><co | ||
| 0003b5e0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b5f0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b600:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b610:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b620:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b630:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b640:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b650:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b660:·6964·6d32·3837·3122·2074·6162·696e·6465··idm2871"·tabinde | |||
| 0003b670:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b680:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b690:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b6a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b6b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b6c0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b | 0003b6d0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0003b | 0003b6e0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b | 0003b6f0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b | 0003b700:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | ||
| 0003b | 0003b710:·3837·3122·3e3c·7461·626c·6520·636c·6173··871"><table·clas | ||
| 0003b | 0003b720:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b | 0003b730:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b | 0003b740:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b | 0003b750:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b | 0003b760:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b | 0003b770:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003b780:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b | 0003b790:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003b7a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b7b0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b | 0003b7c0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b | 0003b7d0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b | 0003b7e0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003b | 0003b7f0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003b | 0003b800:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | ||
| 0003b930:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b940:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b950:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b960:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b970:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | |||
| 0003b980:·3337·3538·2d31·0a20·202d·2043·4a49·532d··3758-1.··-·CJIS- | |||
| 0003b990:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b9a0:·412d·5354·4947·2d53·4c45·4d2d·3035·2d36··A-STIG-SLEM-05-6 | |||
| 0003b9b0:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b9c0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b9d0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b9e0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b9f0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003ba00:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003ba10:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003ba20:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003ba30:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003ba40:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003ba50:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003ba60:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003ba70:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003ba80:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003ba90:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003baa0:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003bab0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003bac0:·7365·6e74·0a20·2077·6865·6e3a·2027·226b··sent.··when:·'"k | |||
| 0003bad0:·6572·6e65·6c2d·6465·6661·756c·7422·2069··ernel-default"·i | |||
| 0003bae0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b | 0003b810:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 0003b820:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b830:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b840:·6d73·0a69·6620·7270·6d20·2d2d·7175·6965··ms.if·rpm·--quie | |||
| 0003b850:·7420·2d71·206b·6572·6e65·6c2d·6465·6661··t·-q·kernel-defa | |||
| 0003b860:·756c·743b·2074·6865·6e0a·0a7a·7970·7065··ult;·then..zyppe | |||
| 0003b870:·7220·696e·7374·616c·6c20·2d79·2022·6169··r·install·-y·"ai | |||
| 0003b880:·6465·220a·0a65·6c73·650a·2020·2020·2667··de"..else.····&g | |||
| 0003b890:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 0003b8a0:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 0003b8b0:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 0003b8c0:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 0003b8d0:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 0003b8e0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| Max diff block lines reached; 7487584/7511486 bytes (99.68%) of diff not shown. | |||
| Offset 130, 26 lines modified | Offset 130, 32 lines modified | ||
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 131 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 131 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 132 | ·············_\x8c_\x8i_\x8s············1.4.1 | 132 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 133 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 133 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 134 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 134 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 135 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 135 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 136 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 136 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | [[packages]] | ||
| 139 | name·=·"aide" | ||
| 140 | version·=·"*" | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 142 | incl | 146 | #·Remediation·is·applicable·only·in·certain·platforms |
| 147 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 143 | class·install_aide·{ | ||
| 144 | ··package·{·'aide': | ||
| 145 | ····ensure·=>·'installed', | ||
| 146 | ··} | ||
| 147 | 148 | zypper·install·-y·"aide" | |
| 149 | else | ||
| 150 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 151 | fi | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | -·name:·Gather·the·package·facts | 157 | -·name:·Gather·the·package·facts |
| 154 | ··package_facts: | 158 | ··package_facts: |
| Offset 182, 32 lines modified | Offset 188, 26 lines modified | ||
| 182 | ··-·PCI-DSSv4-11.5.2 | 188 | ··-·PCI-DSSv4-11.5.2 |
| 183 | ··-·enable_strategy | 189 | ··-·enable_strategy |
| 184 | ··-·low_complexity | 190 | ··-·low_complexity |
| 185 | ··-·low_disruption | 191 | ··-·low_disruption |
| 186 | ··-·medium_severity | 192 | ··-·medium_severity |
| 187 | ··-·no_reboot_needed | 193 | ··-·no_reboot_needed |
| 188 | ··-·package_aide_installed | 194 | ··-·package_aide_installed |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | [[packages]] | ||
| 191 | name·=·"aide" | ||
| 192 | version·=·"*" | ||
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 200 | include·install_aide | ||
| 198 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 199 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 200 | zypper·install·-y·"aide" | ||
| 201 | else | ||
| 202 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 203 | 201 | class·install_aide·{ | |
| 202 | ··package·{·'aide': | ||
| 203 | ····ensure·=>·'installed', | ||
| 204 | ··} | ||
| 205 | } | ||
| 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 205 | Run·the·following·command·to·generate·a·new·database: | 207 | Run·the·following·command·to·generate·a·new·database: |
| 206 | $·sudo·/usr/bin/aide·--init | 208 | $·sudo·/usr/bin/aide·--init |
| 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 209 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 208 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 210 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 209 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 211 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 210 | generated·database·can·be·installed·as·follows: | 212 | generated·database·can·be·installed·as·follows: |
| Offset 235, 14 lines modified | Offset 235, 26 lines modified | ||
| 235 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 235 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 236 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 236 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 237 | ·············_\x8c_\x8i_\x8s············1.4.1 | 237 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 238 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 238 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 239 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 239 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 240 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 240 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 241 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 241 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 242 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 243 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 244 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 245 | zypper·install·-y·"aide" | ||
| 246 | /usr/bin/aide·--init | ||
| 247 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 248 | else | ||
| 249 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 250 | fi | ||
| 242 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 251 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 243 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 252 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 244 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 253 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 245 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 254 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 246 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 255 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 247 | -·name:·Gather·the·package·facts | 256 | -·name:·Gather·the·package·facts |
| 248 | ··package_facts: | 257 | ··package_facts: |
| Offset 355, 26 lines modified | Offset 367, 14 lines modified | ||
| 355 | ··-·PCI-DSSv4-11.5.2 | 367 | ··-·PCI-DSSv4-11.5.2 |
| 356 | ··-·aide_build_database | 368 | ··-·aide_build_database |
| 357 | ··-·low_complexity | 369 | ··-·low_complexity |
| 358 | ··-·low_disruption | 370 | ··-·low_disruption |
| 359 | ··-·medium_severity | 371 | ··-·medium_severity |
| 360 | ··-·no_reboot_needed | 372 | ··-·no_reboot_needed |
| 361 | ··-·restrict_strategy | 373 | ··-·restrict_strategy |
| 362 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 363 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 364 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 365 | zypper·install·-y·"aide" | ||
| 366 | /usr/bin/aide·--init | ||
| 367 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 368 | else | ||
| 369 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 370 | fi | ||
| 371 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8md\x8d·T\x8Ti\x8im\x8me\x8er\x8r·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 374 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8md\x8d·T\x8Ti\x8im\x8me\x8er\x8r·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 372 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·systemd·service·and·a·timer | 375 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·systemd·service·and·a·timer |
| 373 | unit·to·run·the·service·periodically:·For·example,·if·a·systemd·timer·is·expected·to·be·started·every·day | 376 | unit·to·run·the·service·periodically:·For·example,·if·a·systemd·timer·is·expected·to·be·started·every·day |
| 374 | at·5AM | 377 | at·5AM |
| 375 | OnCalendar=*-*-*·05:00:0 | 378 | OnCalendar=*-*-*·05:00:0 |
| 376 | [Timer] | 379 | [Timer] |
| Max diff block lines reached; 906203/911360 bytes (99.43%) of diff not shown. | |||
| Offset 15172, 184 lines modified | Offset 15172, 184 lines modified | ||
| 0003b430:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b430:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b440:·3238·3730·2220·7461·6269·6e64·6578·3d22··2870"·tabindex=" | 0003b440:·3238·3730·2220·7461·6269·6e64·6578·3d22··2870"·tabindex=" | ||
| 0003b450:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b450:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b460:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b460:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b470:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b470:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b480:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b480:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b490:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b490:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b4a0:·6469·6174·696f·6e20· | 0003b4a0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b4b0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b4c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b4d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b4e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b4f0:·2220·6964·3d22·6964·6d32·3837·3022·3e3c··"·id="idm2870">< | |||
| 0003b500:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b510:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b520:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b530:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b540:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b550:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b4b0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b4c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b4d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b4e0:·6c61·7073·6522·2069·643d·2269·646d·3238··lapse"·id="idm28 | |||
| 0003b4f0:·3730·223e·3c74·6162·6c65·2063·6c61·7373··70"><table·class | |||
| 0003b500:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b510:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b520:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b530:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b540:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b550:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b560:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b570:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b580:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b590:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b5a0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b5b0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b5c0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b5d0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b5e0:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b5f0:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003b600:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b610:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b620:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b630:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b640:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b650:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b660:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b670:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b680:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b | 0003b560:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b6a0:·2223·6964·6d32·3837·3122·2074·6162·696e··"#idm2871"·tabin | |||
| 0003b6b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b6c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b6d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b6e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b6f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b700:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003b | 0003b570:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003b580:·7267·6574·3d22·2369·646d·3238·3731·2220··rget="#idm2871"· | |||
| 0003b590:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b5a0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b5b0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b5c0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b5d0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b5e0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b5f0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003b | 0003b600:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b | 0003b610:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b | 0003b620:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b | 0003b630:·643d·2269·646d·3238·3731·223e·3c74·6162··d="idm2871"><tab | ||
| 0003b | 0003b640:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003b | 0003b650:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003b | 0003b660:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003b | 0003b670:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003b | 0003b680:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003b | 0003b690:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b | 0003b6a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b | 0003b6b0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b | 0003b6c0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003b6d0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b | 0003b6e0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b | 0003b6f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b | 0003b700:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b | 0003b710:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 0003b | 0003b720:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b850:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003b860:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003b870:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003b880:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003b890:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003b8a0:·2d20·4343·452d·3933·3735·382d·310a·2020··-·CCE-93758-1.·· | |||
| 0003b8b0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b8c0:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 0003b8d0:·454d·2d30·352d·3635·3130·3130·0a20·202d··EM-05-651010.··- | |||
| 0003b8e0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b8f0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b900:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b910:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b920:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b930:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b940:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b950:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b960:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b970:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b980:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b990:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003b9a0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b9b0:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b9c0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b9d0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b9e0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b9f0:·656e·3a20·2722·6b65·726e·656c·2d64·6566··en:·'"kernel-def | |||
| 0003ba00:·6175·6c74·2220·696e·2061·6e73·6962·6c65··ault"·in·ansible | |||
| 0003b | 0003b730:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | ||
| 0003b740:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 0003b750:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 0003b760:·706c·6174·666f·726d·730a·6966·2072·706d··platforms.if·rpm | |||
| 0003b770:·202d·2d71·7569·6574·202d·7120·6b65·726e···--quiet·-q·kern | |||
| 0003b780:·656c·2d64·6566·6175·6c74·3b20·7468·656e··el-default;·then | |||
| 0003b790:·0a0a·7a79·7070·6572·2069·6e73·7461·6c6c··..zypper·install | |||
| 0003b7a0:·202d·7920·2261·6964·6522·0a0a·656c·7365···-y·"aide"..else | |||
| 0003b7b0:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003b7c0:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003b7d0:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003b7e0:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003b7f0:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003b800:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| Max diff block lines reached; 7225211/7249251 bytes (99.67%) of diff not shown. | |||
| Offset 127, 26 lines modified | Offset 127, 32 lines modified | ||
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 128 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 128 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 129 | ·············_\x8c_\x8i_\x8s············1.4.1 | 129 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 130 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 130 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 132 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 132 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | [[packages]] | ||
| 136 | name·=·"aide" | ||
| 137 | version·=·"*" | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 139 | incl | 143 | #·Remediation·is·applicable·only·in·certain·platforms |
| 144 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 140 | class·install_aide·{ | ||
| 141 | ··package·{·'aide': | ||
| 142 | ····ensure·=>·'installed', | ||
| 143 | ··} | ||
| 144 | 145 | zypper·install·-y·"aide" | |
| 146 | else | ||
| 147 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 148 | fi | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | -·name:·Gather·the·package·facts | 154 | -·name:·Gather·the·package·facts |
| 151 | ··package_facts: | 155 | ··package_facts: |
| Offset 179, 32 lines modified | Offset 185, 26 lines modified | ||
| 179 | ··-·PCI-DSSv4-11.5.2 | 185 | ··-·PCI-DSSv4-11.5.2 |
| 180 | ··-·enable_strategy | 186 | ··-·enable_strategy |
| 181 | ··-·low_complexity | 187 | ··-·low_complexity |
| 182 | ··-·low_disruption | 188 | ··-·low_disruption |
| 183 | ··-·medium_severity | 189 | ··-·medium_severity |
| 184 | ··-·no_reboot_needed | 190 | ··-·no_reboot_needed |
| 185 | ··-·package_aide_installed | 191 | ··-·package_aide_installed |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | [[packages]] | ||
| 188 | name·=·"aide" | ||
| 189 | version·=·"*" | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 197 | include·install_aide | ||
| 195 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 196 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 197 | zypper·install·-y·"aide" | ||
| 198 | else | ||
| 199 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 200 | 198 | class·install_aide·{ | |
| 199 | ··package·{·'aide': | ||
| 200 | ····ensure·=>·'installed', | ||
| 201 | ··} | ||
| 202 | } | ||
| 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 202 | Run·the·following·command·to·generate·a·new·database: | 204 | Run·the·following·command·to·generate·a·new·database: |
| 203 | $·sudo·/usr/bin/aide·--init | 205 | $·sudo·/usr/bin/aide·--init |
| 204 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 206 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 205 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 207 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 206 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 208 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 207 | generated·database·can·be·installed·as·follows: | 209 | generated·database·can·be·installed·as·follows: |
| Offset 232, 14 lines modified | Offset 232, 26 lines modified | ||
| 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 233 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 233 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 234 | ·············_\x8c_\x8i_\x8s············1.4.1 | 234 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 235 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 235 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 236 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 236 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 237 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 237 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 238 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 238 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 240 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 241 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 242 | zypper·install·-y·"aide" | ||
| 243 | /usr/bin/aide·--init | ||
| 244 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 245 | else | ||
| 246 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 247 | fi | ||
| 239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 248 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 240 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 249 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 241 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 250 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 242 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 251 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 243 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 252 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 244 | -·name:·Gather·the·package·facts | 253 | -·name:·Gather·the·package·facts |
| 245 | ··package_facts: | 254 | ··package_facts: |
| Offset 352, 26 lines modified | Offset 364, 14 lines modified | ||
| 352 | ··-·PCI-DSSv4-11.5.2 | 364 | ··-·PCI-DSSv4-11.5.2 |
| 353 | ··-·aide_build_database | 365 | ··-·aide_build_database |
| 354 | ··-·low_complexity | 366 | ··-·low_complexity |
| 355 | ··-·low_disruption | 367 | ··-·low_disruption |
| 356 | ··-·medium_severity | 368 | ··-·medium_severity |
| 357 | ··-·no_reboot_needed | 369 | ··-·no_reboot_needed |
| 358 | ··-·restrict_strategy | 370 | ··-·restrict_strategy |
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 360 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 361 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 362 | zypper·install·-y·"aide" | ||
| 363 | /usr/bin/aide·--init | ||
| 364 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 365 | else | ||
| 366 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 367 | fi | ||
| 368 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8md\x8d·T\x8Ti\x8im\x8me\x8er\x8r·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 371 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8md\x8d·T\x8Ti\x8im\x8me\x8er\x8r·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 369 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·systemd·service·and·a·timer | 372 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·systemd·service·and·a·timer |
| 370 | unit·to·run·the·service·periodically:·For·example,·if·a·systemd·timer·is·expected·to·be·started·every·day | 373 | unit·to·run·the·service·periodically:·For·example,·if·a·systemd·timer·is·expected·to·be·started·every·day |
| 371 | at·5AM | 374 | at·5AM |
| 372 | OnCalendar=*-*-*·05:00:0 | 375 | OnCalendar=*-*-*·05:00:0 |
| 373 | [Timer] | 376 | [Timer] |
| Max diff block lines reached; 877158/882315 bytes (99.42%) of diff not shown. | |||
| Offset 15185, 184 lines modified | Offset 15185, 184 lines modified | ||
| 0003b500:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b500:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b510:·6d32·3837·3022·2074·6162·696e·6465·783d··m2870"·tabindex= | 0003b510:·6d32·3837·3022·2074·6162·696e·6465·783d··m2870"·tabindex= | ||
| 0003b520:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b520:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b530:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b530:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b540:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b540:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b550:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b550:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b560:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b560:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b570:·6564·6961·7469·6f6e·20 | 0003b570:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b580:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b590:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b5a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b5b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b5c0:·6522·2069·643d·2269·646d·3238·3730·223e··e"·id="idm2870"> | |||
| 0003b5d0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b5e0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b5f0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b600:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b610:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b620:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b580:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b590:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b5a0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b5b0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003b5c0:·3837·3022·3e3c·7461·626c·6520·636c·6173··870"><table·clas | |||
| 0003b5d0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b5e0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b5f0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b600:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b610:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b620:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b630:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b640:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b650:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b660:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b670:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b680:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b690:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b6a0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b6b0:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003b6c0:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003b6d0:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003b6e0:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003b6f0:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003b700:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003b710:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003b720:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b730:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b740:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b750:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b | 0003b630:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003b770:·3d22·2369·646d·3238·3731·2220·7461·6269··="#idm2871"·tabi | |||
| 0003b780:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b790:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b7a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b7b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b7c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b7d0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b | 0003b640:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 0003b650:·6172·6765·743d·2223·6964·6d32·3837·3122··arget="#idm2871" | |||
| 0003b660:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b670:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b680:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b690:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b6a0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b6b0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b6c0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003b | 0003b6d0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b | 0003b6e0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b | 0003b6f0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b | 0003b700:·6964·3d22·6964·6d32·3837·3122·3e3c·7461··id="idm2871"><ta | ||
| 0003b | 0003b710:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003b | 0003b720:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003b | 0003b730:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003b | 0003b740:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003b | 0003b750:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b | 0003b760:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003b | 0003b770:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b780:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003b | 0003b790:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b | 0003b7a0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003b | 0003b7b0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003b | 0003b7c0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b7d0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b | 0003b7e0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | ||
| 0003b | 0003b7f0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b920:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003b930:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003b940:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003b950:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003b960:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003b970:·202d·2043·4345·2d39·3337·3538·2d31·0a20···-·CCE-93758-1.· | |||
| 0003b980:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b990:·0a20·202d·2044·4953·412d·5354·4947·2d53··.··-·DISA-STIG-S | |||
| 0003b9a0:·4c45·4d2d·3035·2d36·3531·3031·300a·2020··LEM-05-651010.·· | |||
| 0003b9b0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b9c0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b9d0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b9e0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b9f0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003ba00:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003ba10:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003ba20:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003ba30:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003ba40:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003ba50:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003ba60:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003ba70:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003ba80:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003ba90:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003baa0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003bab0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003bac0:·6865·6e3a·2027·226b·6572·6e65·6c2d·6465··hen:·'"kernel-de | |||
| 0003bad0:·6661·756c·7422·2069·6e20·616e·7369·626c··fault"·in·ansibl | |||
| 0003b | 0003b800:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 0003b810:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 0003b820:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 0003b830:·2070·6c61·7466·6f72·6d73·0a69·6620·7270···platforms.if·rp | |||
| 0003b840:·6d20·2d2d·7175·6965·7420·2d71·206b·6572··m·--quiet·-q·ker | |||
| 0003b850:·6e65·6c2d·6465·6661·756c·743b·2074·6865··nel-default;·the | |||
| 0003b860:·6e0a·0a7a·7970·7065·7220·696e·7374·616c··n..zypper·instal | |||
| 0003b870:·6c20·2d79·2022·6169·6465·220a·0a65·6c73··l·-y·"aide"..els | |||
| 0003b880:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0003b890:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0003b8a0:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0003b8b0:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0003b8c0:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0003b8d0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| Max diff block lines reached; 17967232/17991272 bytes (99.87%) of diff not shown. | |||
| Offset 15110, 184 lines modified | Offset 15110, 184 lines modified | ||
| 0003b050:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b050:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b060:·3d22·2369·646d·3238·3730·2220·7461·6269··="#idm2870"·tabi | 0003b060:·3d22·2369·646d·3238·3730·2220·7461·6269··="#idm2870"·tabi | ||
| 0003b070:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b070:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b080:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b080:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b090:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b090:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b0a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b0a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b0b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b0b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b0c0:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b0c0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b0d0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b0e0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b0 | 0003b0d0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003b0e0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b0f0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b100:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b110:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003b120:·3837·3022·3e3c·7072·653e·3c63·6f64·653e··870"><pre><code> | |||
| 0003b130:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b140:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b150:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b160:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b170:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b180:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b1 | 0003b190:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003b1a0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b1b0:·3238·3731·2220·7461·6269·6e64·6578·3d22··2871"·tabindex=" | |||
| 0003b1c0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b1d0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b1e0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b1f0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b200:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b210:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b110:·2269·646d·3238·3730·223e·3c74·6162·6c65··"idm2870"><table | |||
| 0003b120:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b130:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b140:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b150:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b160:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b170:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b180:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b190:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b1a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b1b0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b1c0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b1d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b1e0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b1f0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b200:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b210:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003b220:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003b230:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003b240:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b250:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003b260:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003b270:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003b280:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b290:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b2a0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b2b0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b2c0:·6172·6765·743d·2223·6964·6d32·3837·3122··arget="#idm2871" | |||
| 0003b2d0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b2e0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b2f0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b300:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b310:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b320:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b330:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b | 0003b220:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0003b | 0003b230:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b | 0003b240:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b | 0003b250:·7073·6522·2069·643d·2269·646d·3238·3731··pse"·id="idm2871 | ||
| 0003b | 0003b260:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003b | 0003b270:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003b | 0003b280:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b | 0003b290:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003b | 0003b2a0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003b | 0003b2b0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b | 0003b2c0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b | 0003b2d0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b | 0003b2e0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b2f0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b | 0003b300:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b | 0003b310:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b | 0003b320:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b | 0003b330:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | ||
| 0003b46 | 0003b340:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003b | 0003b350:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 0003b480:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b490:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b4a0:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b4b0:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b4c0:·6773·3a0a·2020·2d20·4343·452d·3933·3735··gs:.··-·CCE-9375 | |||
| 0003b4d0:·382d·310a·2020·2d20·434a·4953·2d35·2e31··8-1.··-·CJIS-5.1 | |||
| 0003b4e0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b4f0:·5449·472d·534c·454d·2d30·352d·3635·3130··TIG-SLEM-05-6510 | |||
| 0003b500:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b510:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b520:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b530:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b540:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b550:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b560:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b570:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b580:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b590:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b5a0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b5b0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b5c0:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b5d0:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b5e0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b5f0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b600:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b610:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003b620:·656c·2d64·6566·6175·6c74·2220·696e·2061··el-default"·in·a | |||
| 0003b | 0003b360:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 0003b370:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003b380:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003b390:·6966·2072·706d·202d·2d71·7569·6574·202d··if·rpm·--quiet·- | |||
| 0003b3a0:·7120·6b65·726e·656c·2d64·6566·6175·6c74··q·kernel-default | |||
| 0003b3b0:·3b20·7468·656e·0a0a·7a79·7070·6572·2069··;·then..zypper·i | |||
| 0003b3c0:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 0003b3d0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003b3e0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003b3f0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003b400:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003b410:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003b420:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b430:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| Max diff block lines reached; 13705554/13729594 bytes (99.82%) of diff not shown. | |||
| Offset 115, 26 lines modified | Offset 115, 32 lines modified | ||
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ·············_\x8c_\x8i_\x8s············1.4.1 | 117 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 121 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 121 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | incl | 131 | #·Remediation·is·applicable·only·in·certain·platforms |
| 132 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 128 | class·install_aide·{ | ||
| 129 | ··package·{·'aide': | ||
| 130 | ····ensure·=>·'installed', | ||
| 131 | ··} | ||
| 132 | 133 | zypper·install·-y·"aide" | |
| 134 | else | ||
| 135 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 136 | fi | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | -·name:·Gather·the·package·facts | 142 | -·name:·Gather·the·package·facts |
| 139 | ··package_facts: | 143 | ··package_facts: |
| Offset 167, 32 lines modified | Offset 173, 26 lines modified | ||
| 167 | ··-·PCI-DSSv4-11.5.2 | 173 | ··-·PCI-DSSv4-11.5.2 |
| 168 | ··-·enable_strategy | 174 | ··-·enable_strategy |
| 169 | ··-·low_complexity | 175 | ··-·low_complexity |
| 170 | ··-·low_disruption | 176 | ··-·low_disruption |
| 171 | ··-·medium_severity | 177 | ··-·medium_severity |
| 172 | ··-·no_reboot_needed | 178 | ··-·no_reboot_needed |
| 173 | ··-·package_aide_installed | 179 | ··-·package_aide_installed |
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | [[packages]] | ||
| 176 | name·=·"aide" | ||
| 177 | version·=·"*" | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 185 | include·install_aide | ||
| 183 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 184 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 185 | zypper·install·-y·"aide" | ||
| 186 | else | ||
| 187 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 188 | 186 | class·install_aide·{ | |
| 187 | ··package·{·'aide': | ||
| 188 | ····ensure·=>·'installed', | ||
| 189 | ··} | ||
| 190 | } | ||
| 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 190 | Run·the·following·command·to·generate·a·new·database: | 192 | Run·the·following·command·to·generate·a·new·database: |
| 191 | $·sudo·/usr/bin/aide·--init | 193 | $·sudo·/usr/bin/aide·--init |
| 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 193 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 195 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 194 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 196 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 195 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 197 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 220, 14 lines modified | Offset 220, 26 lines modified | ||
| 220 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 220 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 222 | ·············_\x8c_\x8i_\x8s············1.4.1 | 222 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 223 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 223 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 224 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 224 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 226 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 226 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 228 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 229 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 230 | zypper·install·-y·"aide" | ||
| 231 | /usr/bin/aide·--init | ||
| 232 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 233 | else | ||
| 234 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 235 | fi | ||
| 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 228 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 229 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 230 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 231 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 232 | -·name:·Gather·the·package·facts | 241 | -·name:·Gather·the·package·facts |
| 233 | ··package_facts: | 242 | ··package_facts: |
| Offset 340, 26 lines modified | Offset 352, 14 lines modified | ||
| 340 | ··-·PCI-DSSv4-11.5.2 | 352 | ··-·PCI-DSSv4-11.5.2 |
| 341 | ··-·aide_build_database | 353 | ··-·aide_build_database |
| 342 | ··-·low_complexity | 354 | ··-·low_complexity |
| 343 | ··-·low_disruption | 355 | ··-·low_disruption |
| 344 | ··-·medium_severity | 356 | ··-·medium_severity |
| 345 | ··-·no_reboot_needed | 357 | ··-·no_reboot_needed |
| 346 | ··-·restrict_strategy | 358 | ··-·restrict_strategy |
| 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 348 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 349 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 350 | zypper·install·-y·"aide" | ||
| 351 | /usr/bin/aide·--init | ||
| 352 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 353 | else | ||
| 354 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 355 | fi | ||
| 356 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 359 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 357 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit | 360 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit |
| 358 | tools. | 361 | tools. |
| 359 | ·············Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step | 362 | ·············Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step |
| 360 | ·············toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all | 363 | ·············toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all |
| 361 | ·············information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to | 364 | ·············information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to |
| Max diff block lines reached; 1249974/1255255 bytes (99.58%) of diff not shown. | |||
| Offset 15124, 184 lines modified | Offset 15124, 184 lines modified | ||
| 0003b130:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b130:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b140:·3d22·2369·646d·3238·3730·2220·7461·6269··="#idm2870"·tabi | 0003b140:·3d22·2369·646d·3238·3730·2220·7461·6269··="#idm2870"·tabi | ||
| 0003b150:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b150:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b160:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b160:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b170:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b170:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b180:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b180:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b190:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b190:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b1a0:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b1a0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b1b0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b1c0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b1 | 0003b1b0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003b1c0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b1d0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b1e0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b1f0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003b200:·3837·3022·3e3c·7072·653e·3c63·6f64·653e··870"><pre><code> | |||
| 0003b210:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b220:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b230:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b240:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b250:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b260:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b | 0003b270:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003b280:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b290:·3238·3731·2220·7461·6269·6e64·6578·3d22··2871"·tabindex=" | |||
| 0003b2a0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b2b0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b2c0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b2d0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b2e0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b2f0:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b1f0:·2269·646d·3238·3730·223e·3c74·6162·6c65··"idm2870"><table | |||
| 0003b200:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b210:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b220:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b230:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b240:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b250:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b260:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b270:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b280:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b290:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b2a0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b2b0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b2c0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b2d0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b2e0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b2f0:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003b300:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003b310:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003b320:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b330:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003b340:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003b350:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003b360:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b370:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b380:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b390:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b3a0:·6172·6765·743d·2223·6964·6d32·3837·3122··arget="#idm2871" | |||
| 0003b3b0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b3c0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b3d0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b3e0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b3f0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b400:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b410:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b | 0003b300:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0003b | 0003b310:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b | 0003b320:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b | 0003b330:·7073·6522·2069·643d·2269·646d·3238·3731··pse"·id="idm2871 | ||
| 0003b | 0003b340:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003b | 0003b350:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003b | 0003b360:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b | 0003b370:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003b | 0003b380:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003b | 0003b390:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b | 0003b3a0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b | 0003b3b0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b | 0003b3c0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b3d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b | 0003b3e0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b | 0003b3f0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b | 0003b400:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b | 0003b410:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | ||
| 0003b | 0003b420:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003b | 0003b430:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 0003b560:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b570:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b580:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b590:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b5a0:·6773·3a0a·2020·2d20·4343·452d·3933·3735··gs:.··-·CCE-9375 | |||
| 0003b5b0:·382d·310a·2020·2d20·434a·4953·2d35·2e31··8-1.··-·CJIS-5.1 | |||
| 0003b5c0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b5d0:·5449·472d·534c·454d·2d30·352d·3635·3130··TIG-SLEM-05-6510 | |||
| 0003b5e0:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b5f0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b600:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b610:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b620:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b630:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b640:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b650:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b660:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b670:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b680:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b690:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b6a0:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b6b0:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b6c0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b6d0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b6e0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b6f0:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003b700:·656c·2d64·6566·6175·6c74·2220·696e·2061··el-default"·in·a | |||
| 0003b | 0003b440:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 0003b450:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003b460:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003b470:·6966·2072·706d·202d·2d71·7569·6574·202d··if·rpm·--quiet·- | |||
| 0003b480:·7120·6b65·726e·656c·2d64·6566·6175·6c74··q·kernel-default | |||
| 0003b490:·3b20·7468·656e·0a0a·7a79·7070·6572·2069··;·then..zypper·i | |||
| 0003b4a0:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 0003b4b0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003b4c0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003b4d0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003b4e0:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003b4f0:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003b500:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b510:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| Max diff block lines reached; 14652732/14676772 bytes (99.84%) of diff not shown. | |||
| Offset 117, 26 lines modified | Offset 117, 32 lines modified | ||
| 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ·············_\x8c_\x8i_\x8s············1.4.1 | 119 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | [[packages]] | ||
| 126 | name·=·"aide" | ||
| 127 | version·=·"*" | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | incl | 133 | #·Remediation·is·applicable·only·in·certain·platforms |
| 134 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 130 | class·install_aide·{ | ||
| 131 | ··package·{·'aide': | ||
| 132 | ····ensure·=>·'installed', | ||
| 133 | ··} | ||
| 134 | 135 | zypper·install·-y·"aide" | |
| 136 | else | ||
| 137 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 138 | fi | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | -·name:·Gather·the·package·facts | 144 | -·name:·Gather·the·package·facts |
| 141 | ··package_facts: | 145 | ··package_facts: |
| Offset 169, 32 lines modified | Offset 175, 26 lines modified | ||
| 169 | ··-·PCI-DSSv4-11.5.2 | 175 | ··-·PCI-DSSv4-11.5.2 |
| 170 | ··-·enable_strategy | 176 | ··-·enable_strategy |
| 171 | ··-·low_complexity | 177 | ··-·low_complexity |
| 172 | ··-·low_disruption | 178 | ··-·low_disruption |
| 173 | ··-·medium_severity | 179 | ··-·medium_severity |
| 174 | ··-·no_reboot_needed | 180 | ··-·no_reboot_needed |
| 175 | ··-·package_aide_installed | 181 | ··-·package_aide_installed |
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | [[packages]] | ||
| 178 | name·=·"aide" | ||
| 179 | version·=·"*" | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | include·install_aide | ||
| 185 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 186 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 187 | zypper·install·-y·"aide" | ||
| 188 | else | ||
| 189 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 190 | 188 | class·install_aide·{ | |
| 189 | ··package·{·'aide': | ||
| 190 | ····ensure·=>·'installed', | ||
| 191 | ··} | ||
| 192 | } | ||
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 192 | Run·the·following·command·to·generate·a·new·database: | 194 | Run·the·following·command·to·generate·a·new·database: |
| 193 | $·sudo·/usr/bin/aide·--init | 195 | $·sudo·/usr/bin/aide·--init |
| 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 195 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 197 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 196 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 198 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 197 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 199 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 222, 14 lines modified | Offset 222, 26 lines modified | ||
| 222 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 222 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 223 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 223 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 224 | ·············_\x8c_\x8i_\x8s············1.4.1 | 224 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 225 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 225 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 226 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 226 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 227 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 227 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 228 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 228 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 230 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 231 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 232 | zypper·install·-y·"aide" | ||
| 233 | /usr/bin/aide·--init | ||
| 234 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 235 | else | ||
| 236 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 237 | fi | ||
| 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 230 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 231 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 232 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 233 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 234 | -·name:·Gather·the·package·facts | 243 | -·name:·Gather·the·package·facts |
| 235 | ··package_facts: | 244 | ··package_facts: |
| Offset 342, 26 lines modified | Offset 354, 14 lines modified | ||
| 342 | ··-·PCI-DSSv4-11.5.2 | 354 | ··-·PCI-DSSv4-11.5.2 |
| 343 | ··-·aide_build_database | 355 | ··-·aide_build_database |
| 344 | ··-·low_complexity | 356 | ··-·low_complexity |
| 345 | ··-·low_disruption | 357 | ··-·low_disruption |
| 346 | ··-·medium_severity | 358 | ··-·medium_severity |
| 347 | ··-·no_reboot_needed | 359 | ··-·no_reboot_needed |
| 348 | ··-·restrict_strategy | 360 | ··-·restrict_strategy |
| 349 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 350 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 351 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 352 | zypper·install·-y·"aide" | ||
| 353 | /usr/bin/aide·--init | ||
| 354 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 355 | else | ||
| 356 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 357 | fi | ||
| 358 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 361 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 359 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit | 362 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit |
| 360 | tools. | 363 | tools. |
| 361 | ·············Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step | 364 | ·············Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step |
| 362 | ·············toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all | 365 | ·············toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all |
| 363 | ·············information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to | 366 | ·············information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to |
| Max diff block lines reached; 1348442/1353731 bytes (99.61%) of diff not shown. | |||
| Offset 63, 274 lines modified | Offset 63, 274 lines modified | ||
| 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | ||
| 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | ||
| 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | ||
| 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | ||
| 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | ||
| 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | ||
| 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | ||
| 00000450:·3c74·643e·5072·6566·6572·2074·6f20·7573··<td>Prefer·to·us | |||
| 00000460:·6520·6120·3634·2d62·6974·204f·7065·7261··e·a·64-bit·Opera | |||
| 00000470:·7469·6e67·2053·7973·7465·6d20·7768·656e··ting·System·when | |||
| 00000480:·2073·7570·706f·7274·6564·3c2f·7464·3e0a···supported</td>. | |||
| 00000490:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | |||
| 000004a0:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | |||
| 000004b0:·2020·2020·5072·6566·6572·2069·6e73·7461······Prefer·insta | |||
| 000004c0:·6c6c·6174·696f·6e20·6f66·2036·342d·6269··llation·of·64-bi | |||
| 000004d0:·7420·6f70·6572·6174·696e·6720·7379·7374··t·operating·syst | |||
| 000004e0:·656d·7320·7768·656e·2074·6865·2043·5055··ems·when·the·CPU | |||
| 000004f0:·2073·7570·706f·7274·7320·6974·2e0a·2020···supports·it..·· | |||
| 00000500:·2020·2020·3c2f·7464·3e0a·2020·2020·2020······</td>.······ | |||
| 00000510:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | |||
| 00000520:·2d55·5322·3e0a·2020·2020·2020·2020·5573··-US">.········Us | |||
| 00000530:·6520·6f66·2061·2036·342d·6269·7420·6f70··e·of·a·64-bit·op | |||
| 00000540:·6572·6174·696e·6720·7379·7374·656d·206f··erating·system·o | |||
| 00000550:·6666·6572·7320·6120·6665·7720·6164·7661··ffers·a·few·adva | |||
| 00000560:·6e74·6167·6573·2c20·6c69·6b65·2061·206c··ntages,·like·a·l | |||
| 00000570:·6172·6765·7220·6164·6472·6573·7320·7370··arger·address·sp | |||
| 00000580:·6163·6520·7261·6e67·6520·666f·720a·4164··ace·range·for.Ad | |||
| 00000590:·6472·6573·7320·5370·6163·6520·4c61·796f··dress·Space·Layo | |||
| 000005a0:·7574·2052·616e·646f·6d69·7a61·7469·6f6e··ut·Randomization | |||
| 000005b0:·2028·4153·4c52·2920·616e·6420·7379·7374···(ASLR)·and·syst | |||
| 000005c0:·656d·6174·6963·2070·7265·7365·6e63·6520··ematic·presence· | |||
| 000005d0:·6f66·204e·6f20·6558·6563·7574·6520·616e··of·No·eXecute·an | |||
| 000005e0:·6420·4578·6563·7574·6520·4469·7361·626c··d·Execute·Disabl | |||
| 000005f0:·6520·284e·582f·5844·2920·7072·6f74·6563··e·(NX/XD)·protec | |||
| 00000600:·7469·6f6e·2062·6974·732e·0a20·2020·2020··tion·bits..····· | |||
| 00000610:·203c·2f74·643e·0a20·2020·203c·2f74·723e···</td>.····</tr> | |||
| 00000620:·0a20·2020·203c·7472·3e0a·2020·2020·2020··.····<tr>.······ | |||
| 00000630:·3c74·643e·5231·3c2f·7464·3e0a·2020·2020··<td>R1</td>.···· | |||
| 00000 | 00000450:·3c74·643e·456e·7375·7265·2053·4d41·5020··<td>Ensure·SMAP· | ||
| 00000 | 00000460:·6973·206e·6f74·2064·6973·6162·6c65·6420··is·not·disabled· | ||
| 00000 | 00000470:·6475·7269·6e67·2062·6f6f·743c·2f74·643e··during·boot</td> | ||
| 00000 | 00000480:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000 | 00000490:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 00000 | 000004a0:·2020·2020·2054·6865·2053·4d41·5020·6973·······The·SMAP·is | ||
| 00000 | 000004b0:·2075·7365·6420·746f·2070·7265·7665·6e74···used·to·prevent | ||
| 00000 | 000004c0:·2074·6865·2073·7570·6572·7669·736f·7220···the·supervisor· | ||
| 000006c0:·7220·6d6f·6465·2066·726f·6d20·6578·6563··r·mode·from·exec | |||
| 000006d0:·7574·696e·6720·7573·6572·2073·7061·6365··uting·user·space | |||
| 000006e0:·2063·6f64·652c·0a69·7420·6973·2065·6e61···code,.it·is·ena | |||
| 000006f0:·626c·6564·2062·7920·6465·6661·756c·7420··bled·by·default· | |||
| 00000700:·7369·6e63·6520·4c69·6e75·7820·6b65·726e··since·Linux·kern | |||
| 00000710:·656c·2033·2e30·2e20·4275·7420·6974·2063··el·3.0.·But·it·c | |||
| 00000720:·6f75·6c64·2062·6520·6469·7361·626c·6564··ould·be·disabled | |||
| 00000730:·2074·6872·6f75·6768·0a6b·6572·6e65·6c20···through.kernel· | |||
| 00000740:·626f·6f74·2070·6172·616d·6574·6572·732e··boot·parameters. | |||
| 00000750:·0a0a·456e·7375·7265·2074·6861·7420·5375··..Ensure·that·Su | |||
| 00000760:·7065·7276·6973·6f72·204d·6f64·6520·4578··pervisor·Mode·Ex | |||
| 00000770:·6563·7574·696f·6e20·5072·6576·656e·7469··ecution·Preventi | |||
| 00000780:·6f6e·2028·534d·4550·2920·6973·206e·6f74··on·(SMEP)·is·not | |||
| 00000790:·2064·6973·6162·6c65·6420·6279·0a74·6865···disabled·by.the | |||
| 00000 | 000004d0:·6d6f·6465·2066·726f·6d20·756e·696e·7465··mode·from·uninte | ||
| 000004e0:·6e74·696f·6e61·6c6c·7920·7265·6164·696e··ntionally·readin | |||
| 000004f0:·672f·7772·6974·696e·6720·696e·746f·0a6d··g/writing·into.m | |||
| 00000500:·656d·6f72·7920·7061·6765·7320·696e·2074··emory·pages·in·t | |||
| 00000510:·6865·2075·7365·7220·7370·6163·652c·2069··he·user·space,·i | |||
| 00000520:·7420·6973·2065·6e61·626c·6564·2062·7920··t·is·enabled·by· | |||
| 00000530:·6465·6661·756c·7420·7369·6e63·6520·4c69··default·since·Li | |||
| 00000540:·6e75·7820·6b65·726e·656c·2033·2e37·2e0a··nux·kernel·3.7.. | |||
| 00000550:·4275·7420·6974·2063·6f75·6c64·2062·6520··But·it·could·be· | |||
| 00000560:·6469·7361·626c·6564·2074·6872·6f75·6768··disabled·through | |||
| 00000570:·206b·6572·6e65·6c20·626f·6f74·2070·6172···kernel·boot·par | |||
| 00000580:·616d·6574·6572·732e·0a0a·456e·7375·7265··ameters...Ensure | |||
| 00000590:·2074·6861·7420·5375·7065·7276·6973·6f72···that·Supervisor | |||
| 000005a0:·204d·6f64·6520·4163·6365·7373·2050·7265···Mode·Access·Pre | |||
| 000005b0:·7665·6e74·696f·6e20·2853·4d41·5029·2069··vention·(SMAP)·i | |||
| 000005c0:·7320·6e6f·7420·6469·7361·626c·6564·2062··s·not·disabled·b | |||
| 000005d0:·790a·7468·6520·3c74·743e·6e6f·736d·6170··y.the·<tt>nosmap | |||
| 000005e0:·3c2f·7474·3e20·626f·6f74·2070·6172·616d··</tt>·boot·param | |||
| 000005f0:·656e·7465·7220·6f70·7469·6f6e·2e0a·0a43··enter·option...C | |||
| 00000600:·6865·636b·2074·6861·7420·7468·6520·6c69··heck·that·the·li | |||
| 00000610:·6e65·203c·7072·653e·4752·5542·5f43·4d44··ne·<pre>GRUB_CMD | |||
| 00000620:·4c49·4e45·5f4c·494e·5558·3d22·2e2e·2e22··LINE_LINUX="..." | |||
| 00000630:·3c2f·7072·653e·2077·6974·6869·6e20·3c74··</pre>·within·<t | |||
| 00000640:·743e·2f65·7463·2f64·6566·6175·6c74·2f67··t>/etc/default/g | |||
| 00000650:·7275·623c·2f74·743e·0a64·6f65·736e·2774··rub</tt>.doesn't | |||
| 00000660:·2063·6f6e·7461·696e·2074·6865·2061·7267···contain·the·arg | |||
| 00000670:·756d·656e·7420·3c74·743e·6e6f·736d·6170··ument·<tt>nosmap | |||
| 00000680:·3c2f·7474·3e2e·0a52·756e·2074·6865·2066··</tt>..Run·the·f | |||
| 00000690:·6f6c·6c6f·7769·6e67·2063·6f6d·6d61·6e64··ollowing·command | |||
| 000006a0:·2074·6f20·7570·6461·7465·2063·6f6d·6d61···to·update·comma | |||
| 000006b0:·6e64·206c·696e·6520·666f·7220·616c·7265··nd·line·for·alre | |||
| 000006c0:·6164·7920·696e·7374·616c·6c65·6420·6b65··ady·installed·ke | |||
| 000006d0:·726e·656c·733a·0a3c·7072·653e·2320·6772··rnels:.<pre>#·gr | |||
| 000006e0:·7562·6279·202d·2d75·7064·6174·652d·6b65··ubby·--update-ke | |||
| 000006f0:·726e·656c·3d41·4c4c·202d·2d72·656d·6f76··rnel=ALL·--remov | |||
| 00000700:·652d·6172·6773·3d22·6e6f·736d·6170·223c··e-args="nosmap"< | |||
| 00000710:·2f70·7265·3e0a·2020·2020·2020·3c2f·7464··/pre>.······</td | |||
| 00000720:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | |||
| 00000730:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | |||
| 00000740:·2020·2020·2020·4469·7361·626c·696e·6720········Disabling· | |||
| 00000750:·534d·4150·2063·616e·2066·6163·696c·6974··SMAP·can·facilit | |||
| 00000760:·6174·6520·6578·706c·6f69·7461·7469·6f6e··ate·exploitation | |||
| 00000770:·206f·6620·7675·6c6e·6572·6162·696c·6974···of·vulnerabilit | |||
| 00000780:·6965·7320·6361·7573·6564·2062·7920·756e··ies·caused·by·un | |||
| 00000790:·696e·7465·6e64·6564·2061·6363·6573·7320··intended·access· | |||
| 000007a0:·616e·640a·6d61·6e69·7075·6c61·7469·6f6e··and.manipulation | |||
| 000007b0:·206f·6620·6461·7461·2069·6e20·7468·6520···of·data·in·the· | |||
| 000007c0:·7573·6572·2073·7061·6365·2e0a·2020·2020··user·space..···· | |||
| 000007d0:·2020·3c2f·7464·3e0a·2020·2020·3c2f·7472····</td>.····</tr | |||
| 000007e0:·3e0a·2020·2020·3c74·723e·0a20·2020·2020··>.····<tr>.····· | |||
| 000007f0:·203c·7464·3e52·313c·2f74·643e·0a20·2020···<td>R1</td>.··· | |||
| 00000800:·2020·203c·7464·3e45·6e73·7572·6520·534d·····<td>Ensure·SM | |||
| 00000810:·4550·2069·7320·6e6f·7420·6469·7361·626c··EP·is·not·disabl | |||
| 00000820:·6564·2064·7572·696e·6720·626f·6f74·3c2f··ed·during·boot</ | |||
| 00000830:·7464·3e0a·2020·2020·2020·3c74·6420·786d··td>.······<td·xm | |||
| 00000840:·6c3a·6c61·6e67·3d22·656e·2d55·5322·3e0a··l:lang="en-US">. | |||
| 00000850:·2020·2020·2020·2020·5468·6520·534d·4550··········The·SMEP | |||
| 00000860:·2069·7320·7573·6564·2074·6f20·7072·6576···is·used·to·prev | |||
| 00000870:·656e·7420·7468·6520·7375·7065·7276·6973··ent·the·supervis | |||
| 00000880:·6f72·206d·6f64·6520·6672·6f6d·2065·7865··or·mode·from·exe | |||
| 00000890:·6375·7469·6e67·2075·7365·7220·7370·6163··cuting·user·spac | |||
| 000008a0:·6520·636f·6465·2c0a·6974·2069·7320·656e··e·code,.it·is·en | |||
| 000008b0:·6162·6c65·6420·6279·2064·6566·6175·6c74··abled·by·default | |||
| 000008c0:·2073·696e·6365·204c·696e·7578·206b·6572···since·Linux·ker | |||
| 000008d0:·6e65·6c20·332e·302e·2042·7574·2069·7420··nel·3.0.·But·it· | |||
| 000008e0:·636f·756c·6420·6265·2064·6973·6162·6c65··could·be·disable | |||
| 000008f0:·6420·7468·726f·7567·680a·6b65·726e·656c··d·through.kernel | |||
| Max diff block lines reached; 2984745/3021199 bytes (98.79%) of diff not shown. | |||
| Offset 1, 44 lines modified | Offset 1, 13 lines modified | ||
| 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux | 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux |
| 2 | 7 | 2 | 7 |
| 3 | ···········································································Use·of·a·64-bit·operating·system | ||
| 4 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 5 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 6 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 7 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 8 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 9 | ···········································································bits. | ||
| 10 | ······························The·SMEP·is·used·to·prevent·the·supervisor | ||
| 11 | ······························mode·from·executing·user·space·code,·it·is | ||
| 12 | ······························enabled·by·default·since·Linux·kernel·3.0. | ||
| 13 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 14 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 15 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | ||
| 16 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | ||
| 17 | R1··disabled·during·boot······that·the·line································vulnerabilities·because·it·allows·the | ||
| 18 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | ||
| 19 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | ||
| 20 | ······························argument·nosmep.·Run·the·following·command | ||
| 21 | ······························to·update·command·line·for·already·installed | ||
| 22 | ······························kernels: | ||
| 23 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 24 | ······························args="nosmep" | ||
| 25 | ···········································································Use·of·weak·or·untested·encryption | ||
| 26 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 27 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 28 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 29 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 30 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 31 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 32 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 33 | ···········································································validated. | ||
| 34 | ······························The·SMAP·is·used·to·prevent·the·supervisor | 3 | ······························The·SMAP·is·used·to·prevent·the·supervisor |
| 35 | ······························mode·from·unintentionally·reading/writing | 4 | ······························mode·from·unintentionally·reading/writing |
| 36 | ······························into·memory·pages·in·the·user·space,·it·is | 5 | ······························into·memory·pages·in·the·user·space,·it·is |
| 37 | ······························enabled·by·default·since·Linux·kernel·3.7. | 6 | ······························enabled·by·default·since·Linux·kernel·3.7. |
| 38 | ······························But·it·could·be·disabled·through·kernel·boot | 7 | ······························But·it·could·be·disabled·through·kernel·boot |
| 39 | ······························parameters.·Ensure·that·Supervisor·Mode | 8 | ······························parameters.·Ensure·that·Supervisor·Mode |
| 40 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | 9 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate |
| Offset 47, 14 lines modified | Offset 16, 29 lines modified | ||
| 47 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | 16 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. |
| 48 | ······························within·/etc/default/grub·doesn't·contain·the | 17 | ······························within·/etc/default/grub·doesn't·contain·the |
| 49 | ······························argument·nosmap.·Run·the·following·command | 18 | ······························argument·nosmap.·Run·the·following·command |
| 50 | ······························to·update·command·line·for·already·installed | 19 | ······························to·update·command·line·for·already·installed |
| 51 | ······························kernels: | 20 | ······························kernels: |
| 52 | ······························#·grubby·--update-kernel=ALL·--remove- | 21 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 53 | ······························args="nosmap" | 22 | ······························args="nosmap" |
| 23 | ······························The·SMEP·is·used·to·prevent·the·supervisor | ||
| 24 | ······························mode·from·executing·user·space·code,·it·is | ||
| 25 | ······························enabled·by·default·since·Linux·kernel·3.0. | ||
| 26 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 27 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 28 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | ||
| 29 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | ||
| 30 | R1··disabled·during·boot······that·the·line································vulnerabilities·because·it·allows·the | ||
| 31 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | ||
| 32 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | ||
| 33 | ······························argument·nosmep.·Run·the·following·command | ||
| 34 | ······························to·update·command·line·for·already·installed | ||
| 35 | ······························kernels: | ||
| 36 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 37 | ······························args="nosmep" | ||
| 54 | ······························Systems·that·are·using·the·64-bit·x86·kernel | 38 | ······························Systems·that·are·using·the·64-bit·x86·kernel |
| 55 | ······························package·do·not·need·to·install·the·kernel- | 39 | ······························package·do·not·need·to·install·the·kernel- |
| 56 | ······························PAE·package·because·the·64-bit·x86·kernel | 40 | ······························PAE·package·because·the·64-bit·x86·kernel |
| 57 | ······························already·includes·this·support.·However,·if | 41 | ······························already·includes·this·support.·However,·if |
| 58 | ······························the·system·is·32-bit·and·also·supports·the | 42 | ······························the·system·is·32-bit·and·also·supports·the |
| 59 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD | 43 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD |
| 60 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE | 44 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE |
| Offset 62, 14 lines modified | Offset 46, 30 lines modified | ||
| 62 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute | 46 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute |
| 63 | ······························installed·with·the·following·command:········(NX)·support. | 47 | ······························installed·with·the·following·command:········(NX)·support. |
| 64 | ······························$·sudo·yum·install·kernel-PAE | 48 | ······························$·sudo·yum·install·kernel-PAE |
| 65 | ······························The·installation·process·should·also·have | 49 | ······························The·installation·process·should·also·have |
| 66 | ······························configured·the·bootloader·to·load·the·new | 50 | ······························configured·the·bootloader·to·load·the·new |
| 67 | ······························kernel·at·boot.·Verify·this·after·reboot·and | 51 | ······························kernel·at·boot.·Verify·this·after·reboot·and |
| 68 | ······························modify·/etc/default/grub·if·necessary. | 52 | ······························modify·/etc/default/grub·if·necessary. |
| 53 | ···········································································Use·of·a·64-bit·operating·system | ||
| 54 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 55 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 56 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 57 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 58 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 59 | ···········································································bits. | ||
| 60 | ···········································································Use·of·weak·or·untested·encryption | ||
| 61 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 62 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 63 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 64 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 65 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 66 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 67 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 68 | ···········································································validated. | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·the·UEFI·Boot·Loader··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter | 73 | ····Set·the·UEFI·Boot·Loader··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5··Password··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These | 74 | R5··Password··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| Offset 99, 171 lines modified | Offset 99, 27 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ······························To·set·the·runtime·status·of·the·············The·vm.mmap_min_addr·parameter | ||
| 107 | ······························vm.mmap_min_addr·kernel·parameter,·run·the···specifies·the·minimum·virtual·address | ||
| 108 | ····Prevent·applications·from·following·command:···························that·a·process·is·allowed·to·mmap. | ||
| 109 | R8··mapping·low·portion·of····$·sudo·sysctl·-w·vm.mmap_min_addr=65536······Allowing·a·process·to·mmap·low·portion | ||
| 110 | ····virtual·memory············To·make·sure·that·the·setting·is·persistent,·of·virtual·memory·can·have·security | ||
| 111 | ······························add·the·following·line·to·a·file·in·the······implications·such·as·such·as | ||
| 112 | ······························directory·/etc/sysctl.d:·····················heightened·risk·of·kernel·null·pointer | ||
| 113 | ······························vm.mmap_min_addr·=·65536·····················dereference·defects. | ||
| 114 | ···········································································The·CONFIG_SHUFFLE_PAGE_ALLOCATOR | ||
| 115 | ······························To·enable·randomization·of·the·page··········config·option·is·primarily·focused·on | ||
| 116 | ······························allocator·in·the·kernel,·add·the·············improving·the·average·utilization·of·a | ||
| 117 | ······························page_alloc.shuffle=1·argument·to·the·default·direct-mapped·memory-side-cache.·Aside | ||
| 118 | ······························GRUB·2·command·line.·To·ensure·that··········of·this·performance·effect,·it·also | ||
| 119 | ······························page_alloc.shuffle=1·is·added·as·a·kernel····reduces·predictability·of·page | ||
| Max diff block lines reached; 676262/694252 bytes (97.41%) of diff not shown. | |||
| Offset 41, 63 lines modified | Offset 41, 68 lines modified | ||
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1<br/>3.1.5</td> | 47 | ······<td>3.1.1<br/>3.1.5</td> |
| 48 | ······<td> | 48 | ······<td>Disable·SSH·Root·Login</td> |
| 49 | ······<td·xml:lang="en-US"> | 49 | ······<td·xml:lang="en-US"> |
| 50 | ········To·restrict·root·logins·on·serial·ports, | ||
| 51 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 52 | <pre>ttyS0 | ||
| 53 | t | 50 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| 51 | system·directly·over·a·network. | ||
| 52 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | ||
| 53 | <tt>/etc/ssh/sshd_config</tt>: | ||
| 54 | <pre>PermitRootLogin·no</pre> | ||
| 54 | ······</td> | 55 | ······</td> |
| 55 | ······<td·xml:lang="en-US"> | 56 | ······<td·xml:lang="en-US"> |
| 56 | ········Preventing·direct·root·login·to·serial·port·interfaces | ||
| 57 | helps·ensure·accountability·for·actions·taken·on·the·systems | ||
| 58 | 57 | ········Even·though·the·communications·channel·may·be·encrypted,·an·additional·layer·of | |
| 58 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | ||
| 59 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | ||
| 60 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | ||
| 61 | direct·attack·attempts·on·root's·password. | ||
| 59 | ······</td> | 62 | ······</td> |
| 60 | ····</tr> | 63 | ····</tr> |
| 61 | ····<tr> | 64 | ····<tr> |
| 62 | ······<td>3.1.1< | 65 | ······<td>3.1.1</td> |
| 63 | ······<td> | 66 | ······<td>Disable·GDM·Guest·Login</td> |
| 64 | ······<td·xml:lang="en-US"> | 67 | ······<td·xml:lang="en-US"> |
| 65 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 66 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 67 | <pre>vc/1 | ||
| 68 | vc/2 | ||
| 69 | vc/3 | ||
| 70 | 68 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·login·without·credentials | |
| 69 | which·can·be·useful·for·public·kiosk·scenarios.·Allowing·users·to·login·without·credentials | ||
| 70 | or·"guest"·account·access·has·inherent·security·risks·and·should·be·disabled.·To·do·disable | ||
| 71 | timed·logins·or·guest·account·access,·set·the·<tt>TimedLoginEnable</tt>·to·<tt>false</tt>·in | ||
| 72 | the·<tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | ||
| 73 | <pre>[daemon] | ||
| 74 | TimedLoginEnable=false</pre> | ||
| 71 | ······</td> | 75 | ······</td> |
| 72 | ······<td·xml:lang="en-US"> | 76 | ······<td·xml:lang="en-US"> |
| 77 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | ||
| 78 | system·security. | ||
| 73 | ········Preventing·direct·root·login·to·virtual·console·devices | ||
| 74 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 75 | using·the·root·account. | ||
| 76 | ······</td> | 79 | ······</td> |
| 77 | ····</tr> | 80 | ····</tr> |
| 78 | ····<tr> | 81 | ····<tr> |
| 79 | ······<td>3.1.1<br/>3.1.5</td> | 82 | ······<td>3.1.1<br/>3.1.5</td> |
| 80 | ······<td> | 83 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> |
| 81 | ······<td·xml:lang="en-US"> | 84 | ······<td·xml:lang="en-US"> |
| 82 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | ||
| 83 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | ||
| 84 | their·UID·changed. | ||
| 85 | <br·/> | ||
| 86 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | ||
| 87 | should·be·changed·to·one·greater·than·"0"·but·less·than·"1000." | ||
| 88 | Otherwise·assign·a·UID·greater·than·"1000"·that·has·not·already·been | ||
| 89 | as | 85 | ········If·an·account·is·configured·for·password·authentication |
| 86 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 87 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 88 | <tt>nullok</tt>·in | ||
| 89 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| 90 | <tt>/etc/pam.d/password-auth</tt> | ||
| 91 | to·prevent·logins·with·empty·passwords. | ||
| 90 | ······</td> | 92 | ······</td> |
| 91 | ······<td·xml:lang="en-US"> | 93 | ······<td·xml:lang="en-US"> |
| 94 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | ||
| 95 | run·commands·with·the·privileges·of·that·account.·Accounts·with | ||
| 96 | empty·passwords·should·never·be·used·in·operational·environments. | ||
| 92 | ········An·account·has·root·authority·if·it·has·a·UID·of·0.·Multiple·accounts | ||
| 93 | with·a·UID·of·0·afford·more·opportunity·for·potential·intruders·to | ||
| 94 | guess·a·password·for·a·privileged·account.·Proper·configuration·of | ||
| 95 | sudo·is·recommended·to·afford·multiple·system·administrators | ||
| 96 | access·to·root·privileges·in·an·accountable·manner. | ||
| 97 | ······</td> | 97 | ······</td> |
| 98 | ····</tr> | 98 | ····</tr> |
| 99 | ····<tr> | 99 | ····<tr> |
| 100 | ······<td>3.1.1<br/>3.1.6</td> | 100 | ······<td>3.1.1<br/>3.1.6</td> |
| 101 | ······<td>Direct·root·Logins·Not·Allowed</td> | 101 | ······<td>Direct·root·Logins·Not·Allowed</td> |
| 102 | ······<td·xml:lang="en-US"> | 102 | ······<td·xml:lang="en-US"> |
| 103 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators | 103 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators |
| Offset 120, 68 lines modified | Offset 125, 65 lines modified | ||
| 120 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate | 125 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate |
| 121 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low | 126 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low |
| 122 | and·FISMA·Moderate·systems. | 127 | and·FISMA·Moderate·systems. |
| 123 | ······</td> | 128 | ······</td> |
| 124 | ····</tr> | 129 | ····</tr> |
| 125 | ····<tr> | 130 | ····<tr> |
| 126 | ······<td>3.1.1</td> | 131 | ······<td>3.1.1</td> |
| 127 | ······<td>Disable·GDM· | 132 | ······<td>Disable·GDM·Automatic·Login</td> |
| 128 | ······<td·xml:lang="en-US"> | 133 | ······<td·xml:lang="en-US"> |
| 129 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to· | 134 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without |
| 130 | which·can·be·useful·for·public·kiosk·scenarios.·Allowing·users·to·login·without·credentials | ||
| 131 | or·"guest"·account·access·has·inherent·security·risks·and·should·be·disabled.·To·do·disable | ||
| 132 | 135 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | |
| 136 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 137 | login·to·the·system,·set·the·<tt>AutomaticLoginEnable</tt>·to·<tt>false</tt>·in·the | ||
| 133 | 138 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | |
| 134 | <pre>[daemon] | 139 | <pre>[daemon] |
| 135 | 140 | AutomaticLoginEnable=false</pre> | |
| 136 | ······</td> | 141 | ······</td> |
| 137 | ······<td·xml:lang="en-US"> | 142 | ······<td·xml:lang="en-US"> |
| 138 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | 143 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating |
| 139 | system·security. | 144 | system·security. |
| 140 | ······</td> | 145 | ······</td> |
| 141 | ····</tr> | 146 | ····</tr> |
| 142 | ····<tr> | 147 | ····<tr> |
| 143 | ······<td>3.1.1<br/>3.1.5</td> | 148 | ······<td>3.1.1<br/>3.1.5</td> |
| 144 | ······<td> | 149 | ······<td>Verify·Only·Root·Has·UID·0</td> |
| 145 | ······<td·xml:lang="en-US"> | 150 | ······<td·xml:lang="en-US"> |
| 151 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | ||
| 152 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | ||
| 153 | their·UID·changed. | ||
| 154 | <br·/> | ||
| 155 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | ||
| Max diff block lines reached; 462196/468781 bytes (98.60%) of diff not shown. | |||
| Offset 1, 85 lines modified | Offset 1, 13 lines modified | ||
| 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of | 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of |
| 2 | Oracle·Linux·7 | 2 | Oracle·Linux·7 |
| 3 | ······························································································Preventing·direct | ||
| 4 | ······························································································root·login·to·serial | ||
| 5 | ·······································To·restrict·root·logins·on·serial·ports,·ensure·lines··port·interfaces | ||
| 6 | 3.1.1···Restrict·Serial·Port·Root······of·this·form·do·not·appear·in·/etc/securetty:··········helps·ensure | ||
| 7 | 3.1.5···Logins·························ttyS0··················································accountability·for | ||
| 8 | ·······································ttyS1··················································actions·taken·on·the | ||
| 9 | ······························································································systems·using·the | ||
| 10 | ······························································································root·account. | ||
| 11 | ·······································To·restrict·root·logins·through·the·(deprecated)·······Preventing·direct | ||
| 12 | ·······································virtual·console·devices,·ensure·lines·of·this·form·do··root·login·to | ||
| 13 | ·······································not·appear·in·/etc/securetty:··························virtual·console | ||
| 14 | 3.1.1···Restrict·Virtual·Console·Root··vc/1···················································devices·helps·ensure | ||
| 15 | 3.1.5···Logins·························vc/2···················································accountability·for | ||
| 16 | ·······································vc/3···················································actions·taken·on·the | ||
| 17 | ·······································vc/4···················································system·using·the | ||
| 18 | ······························································································root·account. | ||
| 19 | ······························································································An·account·has·root | ||
| 20 | ······························································································authority·if·it·has | ||
| 21 | ······························································································a·UID·of·0.·Multiple | ||
| 22 | ······························································································accounts·with·a·UID | ||
| 23 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more | ||
| 24 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for | ||
| 25 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders | ||
| 26 | ·······································their·UID·changed.·····································to·guess·a·password | ||
| 27 | 3.1.1···Verify·Only·Root·Has·UID·0·····If·the·account·is·associated·with·system·commands·or···for·a·privileged | ||
| 28 | 3.1.5··································applications·the·UID·should·be·changed·to·one·greater··account.·Proper | ||
| 29 | ·······································than·"0"·but·less·than·"1000."·Otherwise·assign·a·UID··configuration·of | ||
| 30 | ·······································greater·than·"1000"·that·has·not·already·been··········sudo·is·recommended | ||
| 31 | ·······································assigned.··············································to·afford·multiple | ||
| 32 | ······························································································system | ||
| 33 | ······························································································administrators | ||
| 34 | ······························································································access·to·root | ||
| 35 | ······························································································privileges·in·an | ||
| 36 | ······························································································accountable·manner. | ||
| 37 | ·······································To·further·limit·access·to·the·root·account, | ||
| 38 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 39 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 40 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 41 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| 42 | ·······································login·through·any·communication·device·on·the·system,··multifactor | ||
| 43 | ·······································whether·via·the·console·or·via·a·raw·network···········authentication·to | ||
| 44 | 3.1.1··································interface.·This·is·dangerous·as·user·can·login·to·the··privileged·accounts. | ||
| 45 | 3.1.6···Direct·root·Logins·Not·Allowed·system·as·root·via·Telnet,·which·sends·the·password·in·Users·will·first | ||
| 46 | ·······································plain·text·over·the·network.·By·default,·Oracle·Linux··login,·then·escalate | ||
| 47 | ·······································7's·/etc/securetty·file·only·allows·the·root·user·to···to·privileged·(root) | ||
| 48 | ·······································login·at·the·console·physically·attached·to·the········access·via·su·/ | ||
| 49 | ·······································system.·To·prevent·root·from·logging·in,·remove·the····sudo.·This·is | ||
| 50 | ·······································contents·of·this·file.·To·prevent·direct·root·logins,··required·for·FISMA | ||
| 51 | ·······································remove·the·contents·of·this·file·by·typing·the·········Low·and·FISMA | ||
| 52 | ·······································following·command:·····································Moderate·systems. | ||
| 53 | ·······································$·sudo·echo·>·/etc/securetty | ||
| 54 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 55 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 56 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 57 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 58 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 59 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | ||
| 60 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | ||
| 61 | ·······································etc/gdm/custom.conf.·For·example:······················security. | ||
| 62 | ·······································[daemon] | ||
| 63 | ·······································TimedLoginEnable=false | ||
| 64 | ······························································································If·an·account·has·an | ||
| 65 | ······························································································empty·password, | ||
| 66 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | ||
| 67 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | ||
| 68 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | ||
| 69 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | ||
| 70 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | ||
| 71 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | ||
| 72 | ······························································································never·be·used·in | ||
| 73 | ······························································································operational | ||
| 74 | ······························································································environments. | ||
| 75 | ······························································································Even·though·the | 3 | ······························································································Even·though·the |
| 76 | ······························································································communications | 4 | ······························································································communications |
| 77 | ······························································································channel·may·be | 5 | ······························································································channel·may·be |
| 78 | ······························································································encrypted,·an | 6 | ······························································································encrypted,·an |
| 79 | ······························································································additional·layer·of | 7 | ······························································································additional·layer·of |
| 80 | ······························································································security·is·gained | 8 | ······························································································security·is·gained |
| 81 | ······························································································by·extending·the | 9 | ······························································································by·extending·the |
| Offset 93, 58 lines modified | Offset 21, 210 lines modified | ||
| 93 | ······························································································accountability·of | 21 | ······························································································accountability·of |
| 94 | ······························································································actions·performed·on | 22 | ······························································································actions·performed·on |
| 95 | ······························································································the·system·and·also | 23 | ······························································································the·system·and·also |
| 96 | ······························································································helps·to·minimize | 24 | ······························································································helps·to·minimize |
| 97 | ······························································································direct·attack | 25 | ······························································································direct·attack |
| 98 | ······························································································attempts·on·root's | 26 | ······························································································attempts·on·root's |
| 99 | ······························································································password. | 27 | ······························································································password. |
| 28 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 29 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 30 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 31 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 32 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 33 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | ||
| 34 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | ||
| 35 | ·······································etc/gdm/custom.conf.·For·example:······················security. | ||
| 36 | ·······································[daemon] | ||
| 37 | ·······································TimedLoginEnable=false | ||
| 38 | ······························································································If·an·account·has·an | ||
| 39 | ······························································································empty·password, | ||
| 40 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | ||
| 41 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | ||
| 42 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | ||
| 43 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | ||
| 44 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | ||
| 45 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | ||
| 46 | ······························································································never·be·used·in | ||
| 47 | ······························································································operational | ||
| 48 | ······························································································environments. | ||
| 49 | ·······································To·further·limit·access·to·the·root·account, | ||
| 50 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 51 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 52 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 53 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| 54 | ·······································login·through·any·communication·device·on·the·system,··multifactor | ||
| 55 | ·······································whether·via·the·console·or·via·a·raw·network···········authentication·to | ||
| 56 | 3.1.1··································interface.·This·is·dangerous·as·user·can·login·to·the··privileged·accounts. | ||
| 57 | 3.1.6···Direct·root·Logins·Not·Allowed·system·as·root·via·Telnet,·which·sends·the·password·in·Users·will·first | ||
| 58 | ·······································plain·text·over·the·network.·By·default,·Oracle·Linux··login,·then·escalate | ||
| 59 | ·······································7's·/etc/securetty·file·only·allows·the·root·user·to···to·privileged·(root) | ||
| 60 | ·······································login·at·the·console·physically·attached·to·the········access·via·su·/ | ||
| 61 | ·······································system.·To·prevent·root·from·logging·in,·remove·the····sudo.·This·is | ||
| Max diff block lines reached; 800828/818757 bytes (97.81%) of diff not shown. | |||
| Offset 8560, 18 lines modified | Offset 8560, 18 lines modified | ||
| 000216f0:·6b0a·616e·6420·7573·6520·7468·6520·696e··k.and·use·the·in | 000216f0:·6b0a·616e·6420·7573·6520·7468·6520·696e··k.and·use·the·in | ||
| 00021700:·666f·726d·6174·696f·6e20·746f·2070·6f74··formation·to·pot | 00021700:·666f·726d·6174·696f·6e20·746f·2070·6f74··formation·to·pot | ||
| 00021710:·656e·7469·616c·6c79·2063·6f6d·7072·6f6d··entially·comprom | 00021710:·656e·7469·616c·6c79·2063·6f6d·7072·6f6d··entially·comprom | ||
| 00021720:·6973·6520·7468·6520·696e·7465·6772·6974··ise·the·integrit | 00021720:·6973·6520·7468·6520·696e·7465·6772·6974··ise·the·integrit | ||
| 00021730:·7920·6f66·2074·6865·2073·7973·7465·6d20··y·of·the·system· | 00021730:·7920·6f66·2074·6865·2073·7973·7465·6d20··y·of·the·system· | ||
| 00021740:·616e·640a·6e65·7477·6f72·6b28·7329·2e0a··and.network(s).. | 00021740:·616e·640a·6e65·7477·6f72·6b28·7329·2e0a··and.network(s).. | ||
| 00021750:·2020·3c2f·7464·3e0a·2020·3c74·643e·7661····</td>.··<td>va | 00021750:·2020·3c2f·7464·3e0a·2020·3c74·643e·7661····</td>.··<td>va | ||
| 00021760:·725f·736e·6d70·645f·72 | 00021760:·725f·736e·6d70·645f·7277·5f73·7472·696e··r_snmpd_rw_strin | ||
| 00021770:·673d·6368·616e·6765·6d65·72 | 00021770:·673d·6368·616e·6765·6d65·7277·3c62·722f··g=changemerw<br/ | ||
| 00021780:·3e76·6172·5f73·6e6d·7064·5f72· | 00021780:·3e76·6172·5f73·6e6d·7064·5f72·6f5f·7374··>var_snmpd_ro_st | ||
| 00021790:·7269·6e67·3d63·6861·6e67·656d·6572· | 00021790:·7269·6e67·3d63·6861·6e67·656d·6572·6f3c··ring=changemero< | ||
| 000217a0:·2f74·643e·0a3c·2f74·723e·0a3c·7472·3e0a··/td>.</tr>.<tr>. | 000217a0:·2f74·643e·0a3c·2f74·723e·0a3c·7472·3e0a··/td>.</tr>.<tr>. | ||
| 000217b0:·2020·3c74·643e·5343·2d35·3c2f·7464·3e0a····<td>SC-5</td>. | 000217b0:·2020·3c74·643e·5343·2d35·3c2f·7464·3e0a····<td>SC-5</td>. | ||
| 000217c0:·2020·3c74·643e·4e2f·413c·2f74·643e·0a20····<td>N/A</td>.· | 000217c0:·2020·3c74·643e·4e2f·413c·2f74·643e·0a20····<td>N/A</td>.· | ||
| 000217d0:·203c·7464·3e43·6f6e·6669·6775·7265·204b···<td>Configure·K | 000217d0:·203c·7464·3e43·6f6e·6669·6775·7265·204b···<td>Configure·K | ||
| 000217e0:·6572·6e65·6c20·746f·2052·6174·6520·4c69··ernel·to·Rate·Li | 000217e0:·6572·6e65·6c20·746f·2052·6174·6520·4c69··ernel·to·Rate·Li | ||
| 000217f0:·6d69·7420·5365·6e64·696e·6720·6f66·2044··mit·Sending·of·D | 000217f0:·6d69·7420·5365·6e64·696e·6720·6f66·2044··mit·Sending·of·D | ||
| 00021800:·7570·6c69·6361·7465·2054·4350·2041·636b··uplicate·TCP·Ack | 00021800:·7570·6c69·6361·7465·2054·4350·2041·636b··uplicate·TCP·Ack |
| Offset 2919, 16 lines modified | Offset 2919, 16 lines modified | ||
| 2919 | ··············································································network·management | 2919 | ··············································································network·management |
| 2920 | ··············································································protocol·(SNMP) | 2920 | ··············································································protocol·(SNMP) |
| 2921 | ··············································································community·strings | 2921 | ··············································································community·strings |
| 2922 | ··············································································must·be·changed·to | 2922 | ··············································································must·be·changed·to |
| 2923 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. | 2923 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. |
| 2924 | ··································the·default·community·strings·of·public·and·If·the·service·is | 2924 | ··································the·default·community·strings·of·public·and·If·the·service·is |
| 2925 | ··································private.·This·profile·configures·new·read-··running·with·the | 2925 | ··································private.·This·profile·configures·new·read-··running·with·the |
| 2926 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_r | 2926 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_rw_string=changemerw |
| 2927 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_r | 2927 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_ro_string=changemero |
| 2928 | ··································Once·the·default·community·strings·have·····then·anyone·can | 2928 | ··································Once·the·default·community·strings·have·····then·anyone·can |
| 2929 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about | 2929 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about |
| 2930 | ··································$·sudo·systemctl·restart·snmpd··············the·system·and·the | 2930 | ··································$·sudo·systemctl·restart·snmpd··············the·system·and·the |
| 2931 | ··············································································network·and·use·the | 2931 | ··············································································network·and·use·the |
| 2932 | ··············································································information·to | 2932 | ··············································································information·to |
| 2933 | ··············································································potentially | 2933 | ··············································································potentially |
| 2934 | ··············································································compromise·the | 2934 | ··············································································compromise·the |
| Offset 63, 15662 lines modified | Offset 63, 15662 lines modified | ||
| 000003e0:·2020·2020·3c74·683e·5275·6c65·2054·6974······<th>Rule·Tit | 000003e0:·2020·2020·3c74·683e·5275·6c65·2054·6974······<th>Rule·Tit | ||
| 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | ||
| 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | ||
| 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | ||
| 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | ||
| 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | Diff chunk too large, falling back to line-by-line diff (3285 lines added, 3285 lines removed) | |
| 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | ||
| 00000450:·2d32·286 | 00000450:·2d32·2861·293c·2f74·643e·0a20·2020·2020··-2(a)</td>.····· | ||
| 00000460:· | 00000460:·203c·7464·3e43·6f6e·6669·6775·7265·2061···<td>Configure·a | ||
| 00000470:·7 | 00000470:·7564·6974·696e·6720·6f66·2075·6e73·7563··uditing·of·unsuc | ||
| 00000480:· | 00000480:·6365·7373·6675·6c20·6669·6c65·2064·656c··cessful·file·del | ||
| 00000490:· | 00000490:·6574·696f·6e73·2028·4141·7263·6836·3429··etions·(AArch64) | ||
| 000004a0:· | 000004a0:·3c2f·7464·3e0a·2020·2020·2020·3c74·6420··</td>.······<td· | ||
| 000004b0:·7 | 000004b0:·786d·6c3a·6c61·6e67·3d22·656e·2d55·5322··xml:lang="en-US" | ||
| 000004c0:·3e0a·2020·2020·2020· | 000004c0:·3e0a·2020·2020·2020·2020·456e·7375·7265··>.········Ensure | ||
| 000004d0:· | 000004d0:·2074·6861·7420·756e·7375·6363·6573·7366···that·unsuccessf | ||
| 000004e0:· | 000004e0:·756c·2061·7474·656d·7074·7320·746f·2064··ul·attempts·to·d | ||
| 000004f0:· | 000004f0:·656c·6574·6520·6120·6669·6c65·2061·7265··elete·a·file·are | ||
| 00000500:· | 00000500:·2061·7564·6974·6564·2e0a·0a54·6865·2066···audited...The·f | ||
| 00000510:·6 | 00000510:·6f6c·6c6f·7769·6e67·2072·756c·6573·2063··ollowing·rules·c | ||
| 00000520:· | 00000520:·6f6e·6669·6775·7265·2061·7564·6974·2061··onfigure·audit·a | ||
| 00000530:· | 00000530:·7320·6465·7363·7269·6265·6420·6162·6f76··s·described·abov | ||
| 00000540:· | 00000540:·653a·0a3c·7072·653e·2323·2055·6e73·7563··e:.<pre>##·Unsuc | ||
| 00000550:·6 | 00000550:·6365·7373·6675·6c20·6669·6c65·2064·656c··cessful·file·del | ||
| 00000560:· | 00000560:·6574·650a·2d61·2061·6c77·6179·732c·6578··ete.-a·always,ex | ||
| 00000570:· | 00000570:·6974·202d·4620·6172·6368·3d62·3332·202d··it·-F·arch=b32·- | ||
| 00000580:· | 00000580:·5320·756e·6c69·6e6b·2c75·6e6c·696e·6b61··S·unlink,unlinka | ||
| 00000590:· | 00000590:·742c·7265·6e61·6d65·2c72·656e·616d·6561··t,rename,renamea | ||
| 000005a0:·74 | 000005a0:·7420·2d46·2065·7869·743d·2d45·4143·4345··t·-F·exit=-EACCE | ||
| 000005b0:· | 000005b0:·5320·2d46·2061·7569·643e·3d31·3030·3020··S·-F·auid>=1000· | ||
| 000005c0:· | 000005c0:·2d46·2061·7569·6421·3d75·6e73·6574·202d··-F·auid!=unset·- | ||
| 000005d0:· | 000005d0:·4620·6b65·793d·756e·7375·6363·6573·7366··F·key=unsuccessf | ||
| 000005e0:· | 000005e0:·756c·2d64·656c·6574·650a·2d61·2061·6c77··ul-delete.-a·alw | ||
| 000005f0:· | 000005f0:·6179·732c·6578·6974·202d·4620·6172·6368··ays,exit·-F·arch | ||
| 00000600:· | 00000600:·3d62·3634·202d·5320·756e·6c69·6e6b·6174··=b64·-S·unlinkat | ||
| 00000610:· | 00000610:·2c72·656e·616d·6561·7420·2d46·2065·7869··,renameat·-F·exi | ||
| 00000620:·7 | 00000620:·743d·2d45·4143·4345·5320·2d46·2061·7569··t=-EACCES·-F·aui | ||
| 00000630:·6 | 00000630:·643e·3d31·3030·3020·2d46·2061·7569·6421··d>=1000·-F·auid! | ||
| 00000640:· | 00000640:·3d75·6e73·6574·202d·4620·6b65·793d·756e··=unset·-F·key=un | ||
| 00000650:· | 00000650:·7375·6363·6573·7366·756c·2d64·656c·6574··successful-delet | ||
| 00000660:·6 | 00000660:·650a·2d61·2061·6c77·6179·732c·6578·6974··e.-a·always,exit | ||
| 00000670:· | 00000670:·202d·4620·6172·6368·3d62·3332·202d·5320···-F·arch=b32·-S· | ||
| 00000680:· | 00000680:·756e·6c69·6e6b·2c75·6e6c·696e·6b61·742c··unlink,unlinkat, | ||
| 00000690:· | 00000690:·7265·6e61·6d65·2c72·656e·616d·6561·7420··rename,renameat· | ||
| 000006a0:· | 000006a0:·2d46·2065·7869·743d·2d45·5045·524d·202d··-F·exit=-EPERM·- | ||
| 000006b0:· | 000006b0:·4620·6175·6964·3e3d·3130·3030·202d·4620··F·auid>=1000·-F· | ||
| 000006c0:·6 | 000006c0:·6175·6964·213d·756e·7365·7420·2d46·206b··auid!=unset·-F·k | ||
| 000006d0:· | 000006d0:·6579·3d75·6e73·7563·6365·7373·6675·6c2d··ey=unsuccessful- | ||
| 000006e0:·6 | 000006e0:·6465·6c65·7465·0a2d·6120·616c·7761·7973··delete.-a·always | ||
| 000006f0:· | 000006f0:·2c65·7869·7420·2d46·2061·7263·683d·6236··,exit·-F·arch=b6 | ||
| 00000700:· | 00000700:·3420·2d53·2075·6e6c·696e·6b61·742c·7265··4·-S·unlinkat,re | ||
| 00000710:· | 00000710:·6e61·6d65·6174·202d·4620·6578·6974·3d2d··nameat·-F·exit=- | ||
| 00000720:· | 00000720:·4550·4552·4d20·2d46·2061·7569·643e·3d31··EPERM·-F·auid>=1 | ||
| 00000730:· | 00000730:·3030·3020·2d46·2061·7569·6421·3d75·6e73··000·-F·auid!=uns | ||
| 00000740:· | 00000740:·6574·202d·4620·6b65·793d·756e·7375·6363··et·-F·key=unsucc | ||
| 00000750:·6 | 00000750:·6573·7366·756c·2d64·656c·6574·6520·2020··essful-delete··· | ||
| 00000760:· | 00000760:·203c·2f70·7265·3e0a·0a4c·6f61·6420·6e65···</pre>..Load·ne | ||
| 00000770:·7 | 00000770:·7720·4175·6469·7420·7275·6c65·7320·696e··w·Audit·rules·in | ||
| 00000780:· | 00000780:·746f·206b·6572·6e65·6c20·6279·2072·756e··to·kernel·by·run | ||
| 00000790:· | 00000790:·6e69·6e67·3a0a·3c70·7265·3e61·7567·656e··ning:.<pre>augen | ||
| 000007a0:· | 000007a0:·7275·6c65·7320·2d2d·6c6f·6164·3c2f·7072··rules·--load</pr | ||
| 000007b0:· | 000007b0:·653e·0a0a·4e6f·7465·3a20·5468·6973·2072··e>..Note:·This·r | ||
| 000007c0:·7 | 000007c0:·756c·6520·7573·6573·2061·2073·7065·6369··ule·uses·a·speci | ||
| 000007d0:· | 000007d0:·616c·2073·6574·206f·6620·4175·6469·7420··al·set·of·Audit· | ||
| 000007e0:· | 000007e0:·7275·6c65·7320·746f·2063·6f6d·706c·7920··rules·to·comply· | ||
| 000007f0:· | 000007f0:·7769·7468·204f·5350·5020·342e·322e·312e··with·OSPP·4.2.1. | ||
| 00000800:· | 00000800:·2059·6f75·206d·6179·2072·6575·7365·2074···You·may·reuse·t | ||
| 00000810:·6 | 00000810:·6869·7320·7275·6c65·2069·6e20·6469·6666··his·rule·in·diff | ||
| 00000820:·65 | 00000820:·6572·656e·7420·7072·6f66·696c·6573·2e20··erent·profiles.· | ||
| 00000830:· | 00000830:·4966·2079·6f75·2064·6563·6964·6520·746f··If·you·decide·to | ||
| 00000840:· | 00000840:·2064·6f20·736f·2c20·6974·2069·7320·7265···do·so,·it·is·re | ||
| 00000850:·6 | 00000850:·636f·6d6d·656e·6465·6420·7468·6174·2079··commended·that·y | ||
| 00000860:·6520· | 00000860:·6f75·2069·6e73·7065·6374·2063·6f6e·7465··ou·inspect·conte | ||
| 00000870:·6 | 00000870:·6e74·7320·6f66·2074·6865·2066·696c·6520··nts·of·the·file· | ||
| 00000880:·6 | 00000880:·636c·6f73·656c·7920·616e·6420·6d61·6b65··closely·and·make | ||
| 00000890:·20 | 00000890:·2073·7572·6520·7468·6174·2074·6865·7920···sure·that·they· | ||
| 000008a0:· | 000008a0:·6172·6520·616c·6c69·676e·6564·2077·6974··are·alligned·wit | ||
| 000008b0:· | 000008b0:·6820·796f·7572·206e·6565·6473·2e0a·2020··h·your·needs..·· | ||
| 000008c0:·20 | 000008c0:·2020·2020·3c2f·7464·3e0a·2020·2020·2020······</td>.······ | ||
| 000008d0:· | 000008d0:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | ||
| 000008e0:· | 000008e0:·2d55·5322·3e0a·2020·2020·2020·2020·556e··-US">.········Un | ||
| 000008f0:· | 000008f0:·7375·6363·6573·7366·756c·2061·7474·656d··successful·attem | ||
| 00000900:·7 | 00000900:·7074·7320·746f·2064·656c·6574·6520·6120··pts·to·delete·a· | ||
| 00000910:· | 00000910:·6669·6c65·206d·6967·6874·2062·6520·7369··file·might·be·si | ||
| 00000920:·6 | 00000920:·676e·7320·6f66·206d·616c·6963·696f·7573··gns·of·malicious | ||
| 00000930:· | 00000930:·2061·6374·6976·6974·6965·732e·2041·7564···activities.·Aud | ||
| 00000940:· | 00000940:·6974·696e·6720·6f66·2073·7563·6820·6576··iting·of·such·ev | ||
| 00000950:· | 00000950:·656e·7473·2068·656c·7020·696e·206d·6f6e··ents·help·in·mon | ||
| 00000960:· | 00000960:·6974·6f72·696e·6720·616e·6420·696e·7665··itoring·and·inve | ||
| 00000970:· | 00000970:·7374·6967·6174·696e·6720·6f66·2073·7563··stigating·of·suc | ||
| 00000980:· | 00000980:·6820·6163·7469·7669·7469·6573·2e0a·2020··h·activities..·· | ||
| 00000990:· | 00000990:·2020·2020·3c2f·7464·3e0a·2020·2020·3c2f······</td>.····</ | ||
| 000009a0:· | 000009a0:·7472·3e0a·2020·2020·3c74·723e·0a20·2020··tr>.····<tr>.··· | ||
| 000009b0:· | 000009b0:·2020·203c·7464·3e41·552d·3228·6429·3c62·····<td>AU-2(d)<b | ||
| 000009c0:· | 000009c0:·722f·3e41·552d·3132·2863·293c·6272·2f3e··r/>AU-12(c)<br/> | ||
| 000009d0:· | 000009d0:·434d·2d36·2861·293c·2f74·643e·0a20·2020··CM-6(a)</td>.··· | ||
| 000009e0:· | 000009e0:·2020·203c·7464·3e52·6563·6f72·6420·4576·····<td>Record·Ev | ||
| 000009f0:· | 000009f0:·656e·7473·2074·6861·7420·4d6f·6469·6679··ents·that·Modify | ||
| 00000a00:· | 00000a00:·2074·6865·2053·7973·7465·6d27·7320·4d61···the·System's·Ma | ||
| 00000a10:·6 | 00000a10:·6e64·6174·6f72·7920·4163·6365·7373·2043··ndatory·Access·C | ||
| 00000a20:·6 | 00000a20:·6f6e·7472·6f6c·7320·696e·2075·7372·2f73··ontrols·in·usr/s | ||
| 00000a30:·6 | 00000a30:·6861·7265·3c2f·7464·3e0a·2020·2020·2020··hare</td>.······ | ||
| 00000a40:· | 00000a40:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | ||
| 00000a50:· | 00000a50:·2d55·5322·3e0a·2020·2020·2020·2020·4966··-US">.········If | ||
| 00000a60:·20 | 00000a60:·2074·6865·203c·7474·3e61·7564·6974·643c···the·<tt>auditd< | ||
| 00000a70:·2 | 00000a70:·2f74·743e·2064·6165·6d6f·6e20·6973·2063··/tt>·daemon·is·c | ||
| 00000a80:· | 00000a80:·6f6e·6669·6775·7265·6420·746f·2075·7365··onfigured·to·use | ||
| 00000a90:· | 00000a90:·2074·6865·0a3c·7474·3e61·7567·656e·7275···the.<tt>augenru | ||
| 00000aa0:· | 00000aa0:·6c65·733c·2f74·743e·2070·726f·6772·616d··les</tt>·program | ||
| 00000ab0:·202 | 00000ab0:·2074·6f20·7265·6164·2061·7564·6974·2072···to·read·audit·r | ||
| 00000ac0:· | 00000ac0:·756c·6573·2064·7572·696e·6720·6461·656d··ules·during·daem | ||
| 00000ad0:· | 00000ad0:·6f6e·2073·7461·7274·7570·2028·7468·650a··on·startup·(the. | ||
| 00000ae0:· | 00000ae0:·6465·6661·756c·7429·2c20·6164·6420·7468··default),·add·th | ||
| 00000af0:·6 | 00000af0:·6520·666f·6c6c·6f77·696e·6720·6c69·6e65··e·following·line | ||
| 00000b00:·20 | 00000b00:·2074·6f20·6120·6669·6c65·2077·6974·6820···to·a·file·with· | ||
| 00000b10:· | 00000b10:·7375·6666·6978·203c·7474·3e2e·7275·6c65··suffix·<tt>.rule | ||
| 00000b20:· | 00000b20:·733c·2f74·743e·2069·6e20·7468·650a·6469··s</tt>·in·the.di | ||
| 00000b30:·7 | 00000b30:·7265·6374·6f72·7920·3c74·743e·2f65·7463··rectory·<tt>/etc | ||
| 00000b40:· | 00000b40:·2f61·7564·6974·2f72·756c·6573·2e64·3c2f··/audit/rules.d</ | ||
| 00000b50:· | 00000b50:·7474·3e3a·0a3c·7072·653e·2d77·202f·7573··tt>:.<pre>-w·/us | ||
| 00000b60:· | 00000b60:·722f·7368·6172·652f·7365·6c69·6e75·782f··r/share/selinux/ | ||
| 00000b70:· | 00000b70:·202d·7020·7761·202d·6b20·4d41·432d·706f···-p·wa·-k·MAC-po | ||
| 00000b80:·6c6 | 00000b80:·6c69·6379·3c2f·7072·653e·0a49·6620·7468··licy</pre>.If·th | ||
| 00000b90:· | 00000b90:·6520·3c74·743e·6175·6469·7464·3c2f·7474··e·<tt>auditd</tt | ||
| 00000ba0:· | 00000ba0:·3e20·6461·656d·6f6e·2069·7320·636f·6e66··>·daemon·is·conf | ||
| 00000bb0:·6 | 00000bb0:·6967·7572·6564·2074·6f20·7573·6520·7468··igured·to·use·th | ||
| Max diff block lines reached; 7065812/7519720 bytes (93.96%) of diff not shown. | |||
| Offset 75, 40 lines modified | Offset 75, 14 lines modified | ||
| 75 | package,·or·the·SCAP·Workbench·GUI·tool·from·the·<tt>scap-workbench</tt>·package,·to·verify | 75 | package,·or·the·SCAP·Workbench·GUI·tool·from·the·<tt>scap-workbench</tt>·package,·to·verify |
| 76 | that·the·system·conforms·to·provided·guidelines.·Refer·to·the·scap-security-guide(8)·manual | 76 | that·the·system·conforms·to·provided·guidelines.·Refer·to·the·scap-security-guide(8)·manual |
| 77 | page·for·futher·information. | 77 | page·for·futher·information. |
| 78 | ······</td> | 78 | ······</td> |
| 79 | ····</tr> | 79 | ····</tr> |
| 80 | ····<tr> | 80 | ····<tr> |
| 81 | ······<td>AVA_VAN.1</td> | 81 | ······<td>AVA_VAN.1</td> |
| 82 | ······<td>Enable·randomization·of·the·page·allocator</td> | ||
| 83 | ······<td·xml:lang="en-US"> | ||
| 84 | ········To·enable·randomization·of·the·page·allocator·in·the·kernel,·add·the | ||
| 85 | <tt>page_alloc.shuffle=1</tt>·argument·to·the·default·GRUB·2·command·line. | ||
| 86 | To·ensure·that·<tt>page_alloc.shuffle=1</tt>·is·added·as·a·kernel·command·line | ||
| 87 | argument·to·newly·installed·kernels,·add·<tt>page_alloc.shuffle=1</tt>·to·the | ||
| 88 | default·Grub2·command·line·for·Linux·operating·systems.·Modify·the·line·within | ||
| 89 | <tt>/etc/default/grub</tt>·as·shown·below: | ||
| 90 | <pre>GRUB_CMDLINE_LINUX="...·page_alloc.shuffle=1·..."</pre> | ||
| 91 | Run·the·following·command·to·update·command·line·for·already·installed·kernels:<pre>#·grubby·--update-kernel=ALL·--args="page_alloc.shuffle=1"</pre> | ||
| 92 | ······</td> | ||
| 93 | ······<td·xml:lang="en-US"> | ||
| 94 | ········The·<tt>CONFIG_SHUFFLE_PAGE_ALLOCATOR</tt>·config·option·is·primarily | ||
| 95 | focused·on·improving·the·average·utilization·of·a·direct-mapped | ||
| 96 | memory-side-cache.·Aside·of·this·performance·effect,·it·also·reduces | ||
| 97 | predictability·of·page·allocations·in·situations·when·the·bad·actor·can | ||
| 98 | crash·the·system·and·somehow·leverage·knowledge·of·(page)·allocation·order | ||
| 99 | right·after·a·fresh·reboot,·or·can·control·the·timing·between·a | ||
| 100 | hot-pluggable·memory·node·(as·in·NUMA·node)·and·applications·allocating | ||
| 101 | memory·ouf·of·that·node.·The·<tt>page_alloc.shuffle=1</tt>·kernel·command | ||
| 102 | line·parameter·then·forces·this·functionality·irrespectively·of·memory·cache | ||
| 103 | architecture. | ||
| 104 | ······</td> | ||
| 105 | ····</tr> | ||
| 106 | ····<tr> | ||
| 107 | ······<td>AVA_VAN.1</td> | ||
| 108 | ······<td>Configure·kernel·to·zero·out·memory·before·allocation</td> | 82 | ······<td>Configure·kernel·to·zero·out·memory·before·allocation</td> |
| 109 | ······<td·xml:lang="en-US"> | 83 | ······<td·xml:lang="en-US"> |
| 110 | ········To·configure·the·kernel·to·zero·out·memory·before·allocating·it,·add·the | 84 | ········To·configure·the·kernel·to·zero·out·memory·before·allocating·it,·add·the |
| 111 | <tt>init_on_alloc=1</tt>·argument·to·the·default·GRUB·2·command·line. | 85 | <tt>init_on_alloc=1</tt>·argument·to·the·default·GRUB·2·command·line. |
| 112 | To·ensure·that·<tt>init_on_alloc=1</tt>·is·added·as·a·kernel·command·line | 86 | To·ensure·that·<tt>init_on_alloc=1</tt>·is·added·as·a·kernel·command·line |
| 113 | argument·to·newly·installed·kernels,·add·<tt>init_on_alloc=1</tt>·to·the | 87 | argument·to·newly·installed·kernels,·add·<tt>init_on_alloc=1</tt>·to·the |
| 114 | default·Grub2·command·line·for·Linux·operating·systems.·Modify·the·line·within | 88 | default·Grub2·command·line·for·Linux·operating·systems.·Modify·the·line·within |
| Offset 121, 14 lines modified | Offset 95, 33 lines modified | ||
| 121 | all·page·allocator·and·slab·allocator·memory·will·be·zeroed·when·allocated, | 95 | all·page·allocator·and·slab·allocator·memory·will·be·zeroed·when·allocated, |
| 122 | eliminating·many·kinds·of·"uninitialized·heap·memory"·flaws,·effectively | 96 | eliminating·many·kinds·of·"uninitialized·heap·memory"·flaws,·effectively |
| 123 | preventing·data·leaks. | 97 | preventing·data·leaks. |
| 124 | ······</td> | 98 | ······</td> |
| 125 | ····</tr> | 99 | ····</tr> |
| 126 | ····<tr> | 100 | ····<tr> |
| 127 | ······<td>AVA_VAN.1</td> | 101 | ······<td>AVA_VAN.1</td> |
| 102 | ······<td>Configure·kernel·to·zero·out·memory·before·allocation·in·zIPL</td> | ||
| 103 | ······<td·xml:lang="en-US"> | ||
| 104 | ········To·ensure·that·the·kernel·is·configured·to·zero·out·memory·before | ||
| 105 | allocation,·check·that·all·boot·entries·in | ||
| 106 | <tt>/boot/loader/entries/*.conf</tt>·have·<tt>init_on_alloc=1</tt> | ||
| 107 | included·in·its·options.<br·/> | ||
| 108 | To·ensure·that·new·kernels·and·boot·entries·continue·to·zero·out·memory | ||
| 109 | before·allocation,·add·<tt>init_on_alloc=1</tt>·to·<tt>/etc/kernel/cmdline</tt>. | ||
| 110 | ······</td> | ||
| 111 | ······<td·xml:lang="en-US"> | ||
| 112 | ········When·the·kernel·configuration·option·<tt>init_on_alloc</tt>·is·enabled, | ||
| 113 | all·page·allocator·and·slab·allocator·memory·will·be·zeroed·when·allocated, | ||
| 114 | eliminating·many·kinds·of·"uninitialized·heap·memory"·flaws,·effectively | ||
| 115 | preventing·data·leaks. | ||
| 116 | ······</td> | ||
| 117 | ····</tr> | ||
| 118 | ····<tr> | ||
| 119 | ······<td>AVA_VAN.1</td> | ||
| 128 | ······<td>Enable·randomization·of·the·page·allocator·in·zIPL</td> | 120 | ······<td>Enable·randomization·of·the·page·allocator·in·zIPL</td> |
| 129 | ······<td·xml:lang="en-US"> | 121 | ······<td·xml:lang="en-US"> |
| 130 | ········To·enable·the·randomization·of·the·page·allocator·in·the·kernel,·check·that | 122 | ········To·enable·the·randomization·of·the·page·allocator·in·the·kernel,·check·that |
| 131 | all·boot·entries·in·<tt>/boot/loader/entries/*.conf</tt>·have | 123 | all·boot·entries·in·<tt>/boot/loader/entries/*.conf</tt>·have |
| 132 | <tt>page_alloc.shuffle=1</tt>·included·in·its·options.<br·/> | 124 | <tt>page_alloc.shuffle=1</tt>·included·in·its·options.<br·/> |
| 133 | To·enable·randomization·of·the·page·allocator·also·for··newly·installed | 125 | To·enable·randomization·of·the·page·allocator·also·for··newly·installed |
| Offset 145, 54 lines modified | Offset 138, 103 lines modified | ||
| 145 | memory·ouf·of·that·node.·The·<tt>page_alloc.shuffle=1</tt>·kernel·command | 138 | memory·ouf·of·that·node.·The·<tt>page_alloc.shuffle=1</tt>·kernel·command |
| 146 | line·parameter·then·forces·this·functionality·irrespectively·of·memory·cache | 139 | line·parameter·then·forces·this·functionality·irrespectively·of·memory·cache |
| 147 | architecture. | 140 | architecture. |
| 148 | ······</td> | 141 | ······</td> |
| 149 | ····</tr> | 142 | ····</tr> |
| 150 | ····<tr> | 143 | ····<tr> |
| 151 | ······<td>AVA_VAN.1</td> | 144 | ······<td>AVA_VAN.1</td> |
| 152 | ······<td> | 145 | ······<td>Enable·randomization·of·the·page·allocator</td> |
| 153 | ······<td·xml:lang="en-US"> | 146 | ······<td·xml:lang="en-US"> |
| 154 | ········To·ensure·that·the·kernel·is·configured·to·zero·out·memory·before | ||
| 155 | allocation,·check·that·all·boot·entries·in | ||
| 156 | <tt>/boot/loader/entries/*.conf</tt>·have·<tt>init_on_alloc=1</tt> | ||
| 157 | 147 | ········To·enable·randomization·of·the·page·allocator·in·the·kernel,·add·the | |
| 148 | <tt>page_alloc.shuffle=1</tt>·argument·to·the·default·GRUB·2·command·line. | ||
| 149 | To·ensure·that·<tt>page_alloc.shuffle=1</tt>·is·added·as·a·kernel·command·line | ||
| 150 | argument·to·newly·installed·kernels,·add·<tt>page_alloc.shuffle=1</tt>·to·the | ||
| 151 | default·Grub2·command·line·for·Linux·operating·systems.·Modify·the·line·within | ||
| 152 | <tt>/etc/default/grub</tt>·as·shown·below: | ||
| 153 | <pre>GRUB_CMDLINE_LINUX="...·page_alloc.shuffle=1·..."</pre> | ||
| 154 | Run·the·following·command·to·update·command·line·for·already·installed·kernels:<pre>#·grubby·--update-kernel=ALL·--args="page_alloc.shuffle=1"</pre> | ||
| 155 | ······</td> | ||
| 156 | ······<td·xml:lang="en-US"> | ||
| 157 | ········The·<tt>CONFIG_SHUFFLE_PAGE_ALLOCATOR</tt>·config·option·is·primarily | ||
| 158 | focused·on·improving·the·average·utilization·of·a·direct-mapped | ||
| 159 | memory-side-cache.·Aside·of·this·performance·effect,·it·also·reduces | ||
| 160 | predictability·of·page·allocations·in·situations·when·the·bad·actor·can | ||
| 161 | crash·the·system·and·somehow·leverage·knowledge·of·(page)·allocation·order | ||
| 162 | right·after·a·fresh·reboot,·or·can·control·the·timing·between·a | ||
| 163 | hot-pluggable·memory·node·(as·in·NUMA·node)·and·applications·allocating | ||
| 164 | memory·ouf·of·that·node.·The·<tt>page_alloc.shuffle=1</tt>·kernel·command | ||
| 165 | line·parameter·then·forces·this·functionality·irrespectively·of·memory·cache | ||
| 166 | architecture. | ||
| 167 | ······</td> | ||
| 168 | ····</tr> | ||
| 169 | ····<tr> | ||
| 170 | ······<td>FAU_GEN.1</td> | ||
| 171 | ······<td>Disable·SSH·Root·Login</td> | ||
| 172 | ······<td·xml:lang="en-US"> | ||
| 173 | ········The·root·user·should·never·be·allowed·to·login·to·a | ||
| 174 | system·directly·over·a·network. | ||
| 175 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | ||
| 158 | To·ensure·that·new·kernels·and·boot·entries·continue·to·zero·out·memory | ||
| 159 | before·allocation,·add·<tt>init_on_alloc=1</tt>·to·<tt>/etc/kernel/cmdline</tt>. | ||
| 176 | <tt>/etc/ssh/sshd_config</tt>: | ||
| 177 | <pre>PermitRootLogin·no</pre> | ||
| 160 | ······</td> | 178 | ······</td> |
| 161 | ······<td·xml:lang="en-US"> | 179 | ······<td·xml:lang="en-US"> |
| 162 | ········When·the·kernel·configuration·option·<tt>init_on_alloc</tt>·is·enabled, | ||
| 163 | all·page·allocator·and·slab·allocator·memory·will·be·zeroed·when·allocated, | ||
| 164 | eliminating·many·kinds·of·"uninitialized·heap·memory"·flaws,·effectively | ||
| Max diff block lines reached; 211149/218099 bytes (96.81%) of diff not shown. | |||
| Offset 34, 48 lines modified | Offset 34, 32 lines modified | ||
| 34 | ·························································································································the·SCAP·Workbench·GUI·tool | 34 | ·························································································································the·SCAP·Workbench·GUI·tool |
| 35 | ·························································································································from·the·scap-workbench | 35 | ·························································································································from·the·scap-workbench |
| 36 | ·························································································································package,·to·verify·that·the | 36 | ·························································································································package,·to·verify·that·the |
| 37 | ·························································································································system·conforms·to·provided | 37 | ·························································································································system·conforms·to·provided |
| 38 | ·························································································································guidelines.·Refer·to·the | 38 | ·························································································································guidelines.·Refer·to·the |
| 39 | ·························································································································scap-security-guide(8)·manual | 39 | ·························································································································scap-security-guide(8)·manual |
| 40 | ·························································································································page·for·futher·information. | 40 | ·························································································································page·for·futher·information. |
| 41 | ·························································································································The | ||
| 42 | ·························································································································CONFIG_SHUFFLE_PAGE_ALLOCATOR | ||
| 43 | ·························································································································config·option·is·primarily | ||
| 44 | ·························································································································focused·on·improving·the | ||
| 45 | ·························································································································average·utilization·of·a | ||
| 46 | ·························································································································direct-mapped·memory-side- | ||
| 47 | ·························································································································cache.·Aside·of·this | ||
| 48 | ·························································································································performance·effect,·it·also | ||
| 49 | ································To·enable·randomization·of·the·page·allocator·in·the·kernel,·add·the·····················reduces·predictability·of | ||
| 50 | ································page_alloc.shuffle=1·argument·to·the·default·GRUB·2·command·line.·To·ensure·that·········page·allocations·in | ||
| 51 | ·················Enable·········page_alloc.shuffle=1·is·added·as·a·kernel·command·line·argument·to·newly·installed·······situations·when·the·bad·actor | ||
| 52 | ·················randomization··kernels,·add·page_alloc.shuffle=1·to·the·default·Grub2·command·line·for·Linux·operating··can·crash·the·system·and | ||
| 53 | AVA_VAN.1········of·the·page····systems.·Modify·the·line·within·/etc/default/grub·as·shown·below:························somehow·leverage·knowledge·of | ||
| 54 | ·················allocator······GRUB_CMDLINE_LINUX="...·page_alloc.shuffle=1·..."········································(page)·allocation·order·right | ||
| 55 | ································Run·the·following·command·to·update·command·line·for·already·installed·kernels:··········after·a·fresh·reboot,·or·can | ||
| 56 | ································#·grubby·--update-kernel=ALL·--args="page_alloc.shuffle=1"·······························control·the·timing·between·a | ||
| 57 | ·························································································································hot-pluggable·memory·node·(as | ||
| 58 | ·························································································································in·NUMA·node)·and | ||
| 59 | ·························································································································applications·allocating | ||
| 60 | ·························································································································memory·ouf·of·that·node.·The | ||
| 61 | ·························································································································page_alloc.shuffle=1·kernel | ||
| 62 | ·························································································································command·line·parameter·then | ||
| 63 | ·························································································································forces·this·functionality | ||
| 64 | ·························································································································irrespectively·of·memory | ||
| 65 | ·························································································································cache·architecture. | ||
| 66 | ································To·configure·the·kernel·to·zero·out·memory·before·allocating·it,·add·the·init_on_alloc=1·When·the·kernel·configuration | 41 | ································To·configure·the·kernel·to·zero·out·memory·before·allocating·it,·add·the·init_on_alloc=1·When·the·kernel·configuration |
| 67 | ································argument·to·the·default·GRUB·2·command·line.·To·ensure·that·init_on_alloc=1·is·added·as··option·init_on_alloc·is | 42 | ································argument·to·the·default·GRUB·2·command·line.·To·ensure·that·init_on_alloc=1·is·added·as··option·init_on_alloc·is |
| 68 | ·················Configure······a·kernel·command·line·argument·to·newly·installed·kernels,·add·init_on_alloc=1·to·the····enabled,·all·page·allocator | 43 | ·················Configure······a·kernel·command·line·argument·to·newly·installed·kernels,·add·init_on_alloc=1·to·the····enabled,·all·page·allocator |
| 69 | ·················kernel·to·zero·default·Grub2·command·line·for·Linux·operating·systems.·Modify·the·line·within·/etc/·····and·slab·allocator·memory | 44 | ·················kernel·to·zero·default·Grub2·command·line·for·Linux·operating·systems.·Modify·the·line·within·/etc/·····and·slab·allocator·memory |
| 70 | AVA_VAN.1········out·memory·····default/grub·as·shown·below:·····························································will·be·zeroed·when | 45 | AVA_VAN.1········out·memory·····default/grub·as·shown·below:·····························································will·be·zeroed·when |
| 71 | ·················before·········GRUB_CMDLINE_LINUX="...·init_on_alloc=1·..."·············································allocated,·eliminating·many | 46 | ·················before·········GRUB_CMDLINE_LINUX="...·init_on_alloc=1·..."·············································allocated,·eliminating·many |
| 72 | ·················allocation·····Run·the·following·command·to·update·command·line·for·already·installed·kernels:··········kinds·of·"uninitialized·heap | 47 | ·················allocation·····Run·the·following·command·to·update·command·line·for·already·installed·kernels:··········kinds·of·"uninitialized·heap |
| 73 | ································#·grubby·--update-kernel=ALL·--args="init_on_alloc=1"····································memory"·flaws,·effectively | 48 | ································#·grubby·--update-kernel=ALL·--args="init_on_alloc=1"····································memory"·flaws,·effectively |
| 74 | ·························································································································preventing·data·leaks. | 49 | ·························································································································preventing·data·leaks. |
| 50 | ·························································································································When·the·kernel·configuration | ||
| 51 | ·················Configure·······························································································option·init_on_alloc·is | ||
| 52 | ·················kernel·to·zero·To·ensure·that·the·kernel·is·configured·to·zero·out·memory·before·allocation,·check·that·enabled,·all·page·allocator | ||
| 53 | ·················out·memory·····all·boot·entries·in·/boot/loader/entries/*.conf·have·init_on_alloc=1·included·in·its·····and·slab·allocator·memory | ||
| 54 | AVA_VAN.1········before·········options.·················································································will·be·zeroed·when | ||
| 55 | ·················allocation·in··To·ensure·that·new·kernels·and·boot·entries·continue·to·zero·out·memory·before···········allocated,·eliminating·many | ||
| 56 | ·················zIPL···········allocation,·add·init_on_alloc=1·to·/etc/kernel/cmdline.··································kinds·of·"uninitialized·heap | ||
| 57 | ·························································································································memory"·flaws,·effectively | ||
| 58 | ·························································································································preventing·data·leaks. | ||
| 75 | ·························································································································The | 59 | ·························································································································The |
| 76 | ·························································································································CONFIG_SHUFFLE_PAGE_ALLOCATOR | 60 | ·························································································································CONFIG_SHUFFLE_PAGE_ALLOCATOR |
| 77 | ·························································································································config·option·is·primarily | 61 | ·························································································································config·option·is·primarily |
| 78 | ·························································································································focused·on·improving·the | 62 | ·························································································································focused·on·improving·the |
| 79 | ·························································································································average·utilization·of·a | 63 | ·························································································································average·utilization·of·a |
| 80 | ·························································································································direct-mapped·memory-side- | 64 | ·························································································································direct-mapped·memory-side- |
| 81 | ·························································································································cache.·Aside·of·this | 65 | ·························································································································cache.·Aside·of·this |
| Offset 93, 34 lines modified | Offset 77, 77 lines modified | ||
| 93 | ·························································································································applications·allocating | 77 | ·························································································································applications·allocating |
| 94 | ·························································································································memory·ouf·of·that·node.·The | 78 | ·························································································································memory·ouf·of·that·node.·The |
| 95 | ·························································································································page_alloc.shuffle=1·kernel | 79 | ·························································································································page_alloc.shuffle=1·kernel |
| 96 | ·························································································································command·line·parameter·then | 80 | ·························································································································command·line·parameter·then |
| 97 | ·························································································································forces·this·functionality | 81 | ·························································································································forces·this·functionality |
| 98 | ·························································································································irrespectively·of·memory | 82 | ·························································································································irrespectively·of·memory |
| 99 | ·························································································································cache·architecture. | 83 | ·························································································································cache·architecture. |
| 100 | ························································································································· | 84 | ·························································································································The |
| 101 | ·················Configure·······························································································option·init_on_alloc·is | ||
| 102 | ·················kernel·to·zero·To·ensure·that·the·kernel·is·configured·to·zero·out·memory·before·allocation,·check·that·enabled,·all·page·allocator | ||
| 103 | ·················out·memory·····all·boot·entries·in·/boot/loader/entries/*.conf·have·init_on_alloc=1·included·in·its·····and·slab·allocator·memory | ||
| 104 | AVA_VAN.1········before·········options.·················································································will·be·zeroed·when | ||
| 105 | ·················allocation·in··To·ensure·that·new·kernels·and·boot·entries·continue·to·zero·out·memory·before···········allocated,·eliminating·many | ||
| 106 | ················· | 85 | ·························································································································CONFIG_SHUFFLE_PAGE_ALLOCATOR |
| 86 | ·························································································································config·option·is·primarily | ||
| 87 | ·························································································································focused·on·improving·the | ||
| 88 | ·························································································································average·utilization·of·a | ||
| 89 | ·························································································································direct-mapped·memory-side- | ||
| 90 | ·························································································································cache.·Aside·of·this | ||
| 107 | ························································································································· | 91 | ·························································································································performance·effect,·it·also |
| 92 | ································To·enable·randomization·of·the·page·allocator·in·the·kernel,·add·the·····················reduces·predictability·of | ||
| 93 | ································page_alloc.shuffle=1·argument·to·the·default·GRUB·2·command·line.·To·ensure·that·········page·allocations·in | ||
| 94 | ·················Enable·········page_alloc.shuffle=1·is·added·as·a·kernel·command·line·argument·to·newly·installed·······situations·when·the·bad·actor | ||
| 95 | ·················randomization··kernels,·add·page_alloc.shuffle=1·to·the·default·Grub2·command·line·for·Linux·operating··can·crash·the·system·and | ||
| 96 | AVA_VAN.1········of·the·page····systems.·Modify·the·line·within·/etc/default/grub·as·shown·below:························somehow·leverage·knowledge·of | ||
| 97 | ·················allocator······GRUB_CMDLINE_LINUX="...·page_alloc.shuffle=1·..."········································(page)·allocation·order·right | ||
| 98 | ································Run·the·following·command·to·update·command·line·for·already·installed·kernels:··········after·a·fresh·reboot,·or·can | ||
| 99 | ································#·grubby·--update-kernel=ALL·--args="page_alloc.shuffle=1"·······························control·the·timing·between·a | ||
| 100 | ·························································································································hot-pluggable·memory·node·(as | ||
| 101 | ·························································································································in·NUMA·node)·and | ||
| 102 | ·························································································································applications·allocating | ||
| 103 | ·························································································································memory·ouf·of·that·node.·The | ||
| 104 | ·························································································································page_alloc.shuffle=1·kernel | ||
| 105 | ·························································································································command·line·parameter·then | ||
| 106 | ·························································································································forces·this·functionality | ||
| 107 | ·························································································································irrespectively·of·memory | ||
| 108 | ·························································································································cache·architecture. | ||
| 108 | ························································································································· | 109 | ·························································································································Even·though·the |
| 110 | ·························································································································communications·channel·may·be | ||
| 111 | ·························································································································encrypted,·an·additional | ||
| 112 | ·························································································································layer·of·security·is·gained | ||
| 113 | ·························································································································by·extending·the·policy·of | ||
| 114 | ································The·root·user·should·never·be·allowed·to·login·to·a·system·directly·over·a·network.·To···not·logging·directly·on·as | ||
| 115 | FAU_GEN.1········Disable·SSH····disable·root·login·via·SSH,·add·or·correct·the·following·line·in·/etc/ssh/sshd_config:···root.·In·addition,·logging·in | ||
| 116 | ·················Root·Login·····PermitRootLogin·no·······································································with·a·user-specific·account | ||
| 117 | ·························································································································provides·individual | ||
| 118 | ·························································································································accountability·of·actions | ||
| 119 | ·························································································································performed·on·the·system·and | ||
| 120 | ·························································································································also·helps·to·minimize·direct | ||
| 121 | ·························································································································attack·attempts·on·root's | ||
| 122 | ·························································································································password. | ||
| 109 | ·························································································································Each·process·on·the·system | 123 | ·························································································································Each·process·on·the·system |
| 124 | ·························································································································carries·an·"auditable"·flag | ||
| 125 | ·························································································································which·indicates·whether·its | ||
| 110 | ················· | 126 | ·················Enable·········To·ensure·all·processes·can·be·audited,·even·those·which·start·prior·to·the·audit········activities·can·be·audited. |
| 127 | ·················Auditing·to····daemon,·check·that·all·boot·entries·in·/boot/loader/entries/*.conf·have·audit=1·included·Although·auditd·takes·care·of | ||
| 128 | FAU_GEN.1········Start·Prior·to·in·its·options.··········································································enabling·this·for·all | ||
| 129 | ·················the·Audit······To·ensure·that·new·kernels·and·boot·entries·continue·to·enable·audit,·add·audit=1·to·/···processes·which·launch·after | ||
| 130 | ·················Daemon·in·zIPL·etc/kernel/cmdline.······································································it·does,·adding·the·kernel | ||
| 131 | ·························································································································argument·ensures·it·is·set | ||
| 111 | ·················Enable·········daemon,·add·the·argument·audit=1·to·the·default·GRUB·2·command·line·for·the·Linux········which·indicates·whether·its | ||
| 112 | ·················Auditing·for···operating·system.·To·ensure·that·audit=1·is·added·as·a·kernel·command·line·argument·to···activities·can·be·audited. | ||
| 113 | ·················Processes······newly·installed·kernels,·add·audit=1·to·the·default·Grub2·command·line·for·Linux·········Although·auditd·takes·care·of | ||
| 114 | FAU_GEN.1········Which·Start····operating·systems.·Modify·the·line·within·/etc/default/grub·as·shown·below:··············enabling·this·for·all | ||
| 115 | ·················Prior·to·the···GRUB_CMDLINE_LINUX="...·audit=1·..."·····················································processes·which·launch·after | ||
| 116 | ·················Audit·Daemon···Run·the·following·command·to·update·command·line·for·already·installed·kernels:··········it·does,·adding·the·kernel | ||
| 117 | ································#·grubby·--update-kernel=ALL·--args="audit=1"············································argument·ensures·it·is·set | ||
| 118 | ·························································································································for·every·process·during | 132 | ·························································································································for·every·process·during |
| 119 | ·························································································································boot. | 133 | ·························································································································boot. |
| Max diff block lines reached; 365975/387399 bytes (94.47%) of diff not shown. | |||
| Offset 73, 14 lines modified | Offset 73, 28 lines modified | ||
| 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all | 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all |
| 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an | 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 75 | anti-spoofing·measure. | 75 | anti-spoofing·measure. |
| 76 | ······</td> | 76 | ······</td> |
| 77 | ····</tr> | 77 | ····</tr> |
| 78 | ····<tr> | 78 | ····<tr> |
| 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> |
| 80 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 81 | ······<td·xml:lang="en-US"> | ||
| 82 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 83 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 84 | ······</td> | ||
| 85 | ······<td·xml:lang="en-US"> | ||
| 86 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 87 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 88 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 89 | the·network. | ||
| 90 | ······</td> | ||
| 91 | ····</tr> | ||
| 92 | ····<tr> | ||
| 93 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 80 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> | 94 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> |
| 81 | ······<td·xml:lang="en-US"> | 95 | ······<td·xml:lang="en-US"> |
| 82 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, | 96 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, |
| 83 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default | 97 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default |
| 84 | GRUB2·command·line·for·the·Linux·operating·system. | 98 | GRUB2·command·line·for·the·Linux·operating·system. |
| 85 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line | 99 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line |
| 86 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the | 100 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the |
| Offset 91, 28 lines modified | Offset 105, 14 lines modified | ||
| 91 | ······</td> | 105 | ······</td> |
| 92 | ······<td·xml:lang="en-US"> | 106 | ······<td·xml:lang="en-US"> |
| 93 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce | 107 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce |
| 94 | the·vulnerability·to·exploitation. | 108 | the·vulnerability·to·exploitation. |
| 95 | ······</td> | 109 | ······</td> |
| 96 | ····</tr> | 110 | ····</tr> |
| 97 | ····<tr> | 111 | ····<tr> |
| 98 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 99 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 100 | ······<td·xml:lang="en-US"> | ||
| 101 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 102 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 103 | ······</td> | ||
| 104 | ······<td·xml:lang="en-US"> | ||
| 105 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 106 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 107 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 108 | the·network. | ||
| 109 | ······</td> | ||
| 110 | ····</tr> | ||
| 111 | ····<tr> | ||
| 112 | ······<td>Req-1.3.3</td> | 112 | ······<td>Req-1.3.3</td> |
| 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> | 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> |
| 114 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless | 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless |
| 116 | capability. | 116 | capability. |
| 117 | <br·/><br·/> | 117 | <br·/><br·/> |
| Offset 127, 14 lines modified | Offset 127, 26 lines modified | ||
| 127 | attacker·to·monitor·and·record·network·traffic.·These·malicious·APs·can·also | 127 | attacker·to·monitor·and·record·network·traffic.·These·malicious·APs·can·also |
| 128 | serve·to·create·a·man-in-the-middle·attack·or·be·used·to·create·a·denial·of | 128 | serve·to·create·a·man-in-the-middle·attack·or·be·used·to·create·a·denial·of |
| 129 | service·to·valid·network·resources. | 129 | service·to·valid·network·resources. |
| 130 | ······</td> | 130 | ······</td> |
| 131 | ····</tr> | 131 | ····</tr> |
| 132 | ····<tr> | 132 | ····<tr> |
| 133 | ······<td>Req-1.4</td> | 133 | ······<td>Req-1.4</td> |
| 134 | ······<td>Ensure·firewall·rules·exist·for·all·open·ports</td> | ||
| 135 | ······<td·xml:lang="en-US"> | ||
| 136 | ········Any·ports·that·have·been·opened·on·non-loopback·addresses·need·firewall·rules·to·govern | ||
| 137 | traffic. | ||
| 138 | ······</td> | ||
| 139 | ······<td·xml:lang="en-US"> | ||
| 140 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | ||
| 141 | packets·to·these·ports. | ||
| 142 | ······</td> | ||
| 143 | ····</tr> | ||
| 144 | ····<tr> | ||
| 145 | ······<td>Req-1.4</td> | ||
| 134 | ······<td>Set·Default·firewalld·Zone·for·Incoming·Packets</td> | 146 | ······<td>Set·Default·firewalld·Zone·for·Incoming·Packets</td> |
| 135 | ······<td·xml:lang="en-US"> | 147 | ······<td·xml:lang="en-US"> |
| 136 | ········To·set·the·default·zone·to·<tt>drop</tt>·for | 148 | ········To·set·the·default·zone·to·<tt>drop</tt>·for |
| 137 | the·built-in·default·zone·which·processes·incoming·IPv4·and·IPv6·packets, | 149 | the·built-in·default·zone·which·processes·incoming·IPv4·and·IPv6·packets, |
| 138 | modify·the·following·line·in | 150 | modify·the·following·line·in |
| 139 | <tt>/etc/firewalld/firewalld.conf</tt>·to·be: | 151 | <tt>/etc/firewalld/firewalld.conf</tt>·to·be: |
| 140 | <pre>DefaultZone=drop</pre> | 152 | <pre>DefaultZone=drop</pre> |
| Offset 144, 26 lines modified | Offset 156, 14 lines modified | ||
| 144 | the·applicable·rules·in·the·table·are·examined·for·a·match.·Setting·the | 156 | the·applicable·rules·in·the·table·are·examined·for·a·match.·Setting·the |
| 145 | default·zone·to·<tt>drop</tt>·implements·proper·design·for·a·firewall,·i.e. | 157 | default·zone·to·<tt>drop</tt>·implements·proper·design·for·a·firewall,·i.e. |
| 146 | any·packets·which·are·not·explicitly·permitted·should·not·be | 158 | any·packets·which·are·not·explicitly·permitted·should·not·be |
| 147 | accepted. | 159 | accepted. |
| 148 | ······</td> | 160 | ······</td> |
| 149 | ····</tr> | 161 | ····</tr> |
| 150 | ····<tr> | 162 | ····<tr> |
| 151 | ······<td>Req-1.4</td> | ||
| 152 | ······<td>Ensure·firewall·rules·exist·for·all·open·ports</td> | ||
| 153 | ······<td·xml:lang="en-US"> | ||
| 154 | ········Any·ports·that·have·been·opened·on·non-loopback·addresses·need·firewall·rules·to·govern | ||
| 155 | traffic. | ||
| 156 | ······</td> | ||
| 157 | ······<td·xml:lang="en-US"> | ||
| 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | ||
| 159 | packets·to·these·ports. | ||
| 160 | ······</td> | ||
| 161 | ····</tr> | ||
| 162 | ····<tr> | ||
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | 164 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> |
| 165 | ······<td·xml:lang="en-US"> | 165 | ······<td·xml:lang="en-US"> |
| 166 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | 166 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> |
| 167 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> | 167 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> |
| 168 | ······</td> | 168 | ······</td> |
| 169 | ······<td·xml:lang="en-US"> | 169 | ······<td·xml:lang="en-US"> |
| Offset 173, 14 lines modified | Offset 173, 28 lines modified | ||
| 173 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | 173 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood |
| 174 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | 174 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and |
| 175 | enables·the·system·to·continue·servicing·valid·connection·requests. | 175 | enables·the·system·to·continue·servicing·valid·connection·requests. |
| 176 | ······</td> | 176 | ······</td> |
| 177 | ····</tr> | 177 | ····</tr> |
| 178 | ····<tr> | 178 | ····<tr> |
| 179 | ······<td>Req-1.4.1</td> | 179 | ······<td>Req-1.4.1</td> |
| 180 | ······<td>Install·iptables·Package</td> | ||
| 181 | ······<td·xml:lang="en-US"> | ||
| 182 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | ||
| 183 | <pre> | ||
| 184 | $·sudo·yum·install·iptables</pre> | ||
| 185 | ······</td> | ||
| 186 | ······<td·xml:lang="en-US"> | ||
| 187 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| Max diff block lines reached; 317079/322884 bytes (98.20%) of diff not shown. | |||
| Offset 34, 26 lines modified | Offset 34, 14 lines modified | ||
| 34 | ····················································································network·traffic | 34 | ····················································································network·traffic |
| 35 | ····················································································should·be·seen,·all | 35 | ····················································································should·be·seen,·all |
| 36 | ····················································································other·interfaces | 36 | ····················································································other·interfaces |
| 37 | ····················································································should·ignore | 37 | ····················································································should·ignore |
| 38 | ····················································································traffic·on·this | 38 | ····················································································traffic·on·this |
| 39 | ····················································································network·as·an·anti- | 39 | ····················································································network·as·an·anti- |
| 40 | ····················································································spoofing·measure. | 40 | ····················································································spoofing·measure. |
| 41 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 42 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 43 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 44 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 45 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 46 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 47 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 48 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 49 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 50 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 51 | ·····························already·installed·kernels: | ||
| 52 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 53 | ····················································································Routing·protocol | 41 | ····················································································Routing·protocol |
| 54 | ····················································································daemons·are | 42 | ····················································································daemons·are |
| 55 | ····················································································typically·used·on | 43 | ····················································································typically·used·on |
| 56 | ····················································································routers·to·exchange | 44 | ····················································································routers·to·exchange |
| 57 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology | 45 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology |
| 58 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with | 46 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with |
| 59 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If | 47 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If |
| Offset 61, 14 lines modified | Offset 49, 26 lines modified | ||
| 61 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not | 49 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not |
| 62 | ·····························sysctl.d:··············································required,·system | 50 | ·····························sysctl.d:··············································required,·system |
| 63 | ·····························net.ipv4.ip_forward·=·0································network·information | 51 | ·····························net.ipv4.ip_forward·=·0································network·information |
| 64 | ····················································································may·be | 52 | ····················································································may·be |
| 65 | ····················································································unnecessarily | 53 | ····················································································unnecessarily |
| 66 | ····················································································transmitted·across | 54 | ····················································································transmitted·across |
| 67 | ····················································································the·network. | 55 | ····················································································the·network. |
| 56 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 57 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 58 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 59 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 60 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 61 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 62 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 63 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 64 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 65 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 66 | ·····························already·installed·kernels: | ||
| 67 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 68 | ····················································································The·use·of·wireless | 68 | ····················································································The·use·of·wireless |
| 69 | ····················································································networking·can | 69 | ····················································································networking·can |
| 70 | ····················································································introduce·many | 70 | ····················································································introduce·many |
| 71 | ····················································································different·attack | 71 | ····················································································different·attack |
| 72 | ····················································································vectors·into·the | 72 | ····················································································vectors·into·the |
| 73 | ····················································································organization's | 73 | ····················································································organization's |
| 74 | ····················································································network.·Common | 74 | ····················································································network.·Common |
| Offset 90, 14 lines modified | Offset 90, 21 lines modified | ||
| 90 | ····················································································also·serve·to | 90 | ····················································································also·serve·to |
| 91 | ····················································································create·a·man-in- | 91 | ····················································································create·a·man-in- |
| 92 | ····················································································the-middle·attack | 92 | ····················································································the-middle·attack |
| 93 | ····················································································or·be·used·to | 93 | ····················································································or·be·used·to |
| 94 | ····················································································create·a·denial·of | 94 | ····················································································create·a·denial·of |
| 95 | ····················································································service·to·valid | 95 | ····················································································service·to·valid |
| 96 | ····················································································network·resources. | 96 | ····················································································network·resources. |
| 97 | ····················································································Without·a·firewall | ||
| 98 | ····················································································rule·configured·for | ||
| 99 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | ||
| 100 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | ||
| 101 | ·········open·ports·································································will·drop·all | ||
| 102 | ····················································································packets·to·these | ||
| 103 | ····················································································ports. | ||
| 97 | ····················································································In·firewalld·the | 104 | ····················································································In·firewalld·the |
| 98 | ····················································································default·zone·is | 105 | ····················································································default·zone·is |
| 99 | ····················································································applied·only·after | 106 | ····················································································applied·only·after |
| 100 | ····················································································all·the·applicable | 107 | ····················································································all·the·applicable |
| 101 | ····················································································rules·in·the·table | 108 | ····················································································rules·in·the·table |
| 102 | ·····························To·set·the·default·zone·to·drop·for·the·built-in·······are·examined·for·a | 109 | ·····························To·set·the·default·zone·to·drop·for·the·built-in·······are·examined·for·a |
| 103 | ·········Set·Default·········default·zone·which·processes·incoming·IPv4·and·IPv6····match.·Setting·the | 110 | ·········Set·Default·········default·zone·which·processes·incoming·IPv4·and·IPv6····match.·Setting·the |
| Offset 105, 21 lines modified | Offset 112, 14 lines modified | ||
| 105 | ·········Incoming·Packets····firewalld.conf·to·be:··································drop·implements | 112 | ·········Incoming·Packets····firewalld.conf·to·be:··································drop·implements |
| 106 | ·····························DefaultZone=drop·······································proper·design·for·a | 113 | ·····························DefaultZone=drop·······································proper·design·for·a |
| 107 | ····················································································firewall,·i.e.·any | 114 | ····················································································firewall,·i.e.·any |
| 108 | ····················································································packets·which·are | 115 | ····················································································packets·which·are |
| 109 | ····················································································not·explicitly | 116 | ····················································································not·explicitly |
| 110 | ····················································································permitted·should | 117 | ····················································································permitted·should |
| 111 | ····················································································not·be·accepted. | 118 | ····················································································not·be·accepted. |
| 112 | ····················································································Without·a·firewall | ||
| 113 | ····················································································rule·configured·for | ||
| 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | ||
| 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | ||
| 116 | ·········open·ports·································································will·drop·all | ||
| 117 | ····················································································packets·to·these | ||
| 118 | ····················································································ports. | ||
| 119 | ····················································································A·TCP·SYN·flood | 119 | ····················································································A·TCP·SYN·flood |
| 120 | ····················································································attack·can·cause·a | 120 | ····················································································attack·can·cause·a |
| 121 | ····················································································denial·of·service | 121 | ····················································································denial·of·service |
| 122 | ····················································································by·filling·a | 122 | ····················································································by·filling·a |
| 123 | ····················································································system's·TCP | 123 | ····················································································system's·TCP |
| 124 | ····················································································connection·table | 124 | ····················································································connection·table |
| 125 | ····················································································with·connections·in | 125 | ····················································································with·connections·in |
| Offset 138, 14 lines modified | Offset 138, 23 lines modified | ||
| 138 | ····················································································flood·condition·is | 138 | ····················································································flood·condition·is |
| 139 | ····················································································detected,·and | 139 | ····················································································detected,·and |
| 140 | ····················································································enables·the·system | 140 | ····················································································enables·the·system |
| 141 | ····················································································to·continue | 141 | ····················································································to·continue |
| 142 | ····················································································servicing·valid | 142 | ····················································································servicing·valid |
| 143 | ····················································································connection | 143 | ····················································································connection |
| 144 | ····················································································requests. | 144 | ····················································································requests. |
| 145 | ····················································································iptables·controls | ||
| 146 | ····················································································the·Linux·kernel | ||
| 147 | ····················································································network·packet | ||
| 148 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 149 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 150 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 151 | ····················································································set·up·firewalls | ||
| 152 | ····················································································and·IP | ||
| 153 | ····················································································masquerading,·etc. | ||
| 145 | ····················································································Loopback·traffic·is | 154 | ····················································································Loopback·traffic·is |
| 146 | ····················································································generated·between | 155 | ····················································································generated·between |
| 147 | ····················································································processes·on | 156 | ····················································································processes·on |
| 148 | ····················································································machine·and·is | 157 | ····················································································machine·and·is |
| 149 | ····················································································typically·critical | 158 | ····················································································typically·critical |
| 150 | ····················································································to·operation·of·the | 159 | ····················································································to·operation·of·the |
| 151 | ····················································································system.·The | 160 | ····················································································system.·The |
| Offset 155, 46 lines modified | Offset 164, 37 lines modified | ||
| 155 | ····················································································network·traffic | 164 | ····················································································network·traffic |
| 156 | ····················································································should·be·seen,·all | 165 | ····················································································should·be·seen,·all |
| 157 | ····················································································other·interfaces | 166 | ····················································································other·interfaces |
| 158 | ····················································································should·ignore | 167 | ····················································································should·ignore |
| 159 | ····················································································traffic·on·this | 168 | ····················································································traffic·on·this |
| Max diff block lines reached; 521398/533766 bytes (97.68%) of diff not shown. | |||
| Offset 63, 274 lines modified | Offset 63, 274 lines modified | ||
| 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | ||
| 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | ||
| 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | ||
| 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | ||
| 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | ||
| 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | ||
| 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | ||
| 00000450:·3c74·643e·5072·6566·6572·2074·6f20·7573··<td>Prefer·to·us | |||
| 00000460:·6520·6120·3634·2d62·6974·204f·7065·7261··e·a·64-bit·Opera | |||
| 00000470:·7469·6e67·2053·7973·7465·6d20·7768·656e··ting·System·when | |||
| 00000480:·2073·7570·706f·7274·6564·3c2f·7464·3e0a···supported</td>. | |||
| 00000490:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | |||
| 000004a0:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | |||
| 000004b0:·2020·2020·5072·6566·6572·2069·6e73·7461······Prefer·insta | |||
| 000004c0:·6c6c·6174·696f·6e20·6f66·2036·342d·6269··llation·of·64-bi | |||
| 000004d0:·7420·6f70·6572·6174·696e·6720·7379·7374··t·operating·syst | |||
| 000004e0:·656d·7320·7768·656e·2074·6865·2043·5055··ems·when·the·CPU | |||
| 000004f0:·2073·7570·706f·7274·7320·6974·2e0a·2020···supports·it..·· | |||
| 00000500:·2020·2020·3c2f·7464·3e0a·2020·2020·2020······</td>.······ | |||
| 00000510:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | |||
| 00000520:·2d55·5322·3e0a·2020·2020·2020·2020·5573··-US">.········Us | |||
| 00000530:·6520·6f66·2061·2036·342d·6269·7420·6f70··e·of·a·64-bit·op | |||
| 00000540:·6572·6174·696e·6720·7379·7374·656d·206f··erating·system·o | |||
| 00000550:·6666·6572·7320·6120·6665·7720·6164·7661··ffers·a·few·adva | |||
| 00000560:·6e74·6167·6573·2c20·6c69·6b65·2061·206c··ntages,·like·a·l | |||
| 00000570:·6172·6765·7220·6164·6472·6573·7320·7370··arger·address·sp | |||
| 00000580:·6163·6520·7261·6e67·6520·666f·720a·4164··ace·range·for.Ad | |||
| 00000590:·6472·6573·7320·5370·6163·6520·4c61·796f··dress·Space·Layo | |||
| 000005a0:·7574·2052·616e·646f·6d69·7a61·7469·6f6e··ut·Randomization | |||
| 000005b0:·2028·4153·4c52·2920·616e·6420·7379·7374···(ASLR)·and·syst | |||
| 000005c0:·656d·6174·6963·2070·7265·7365·6e63·6520··ematic·presence· | |||
| 000005d0:·6f66·204e·6f20·6558·6563·7574·6520·616e··of·No·eXecute·an | |||
| 000005e0:·6420·4578·6563·7574·6520·4469·7361·626c··d·Execute·Disabl | |||
| 000005f0:·6520·284e·582f·5844·2920·7072·6f74·6563··e·(NX/XD)·protec | |||
| 00000600:·7469·6f6e·2062·6974·732e·0a20·2020·2020··tion·bits..····· | |||
| 00000610:·203c·2f74·643e·0a20·2020·203c·2f74·723e···</td>.····</tr> | |||
| 00000620:·0a20·2020·203c·7472·3e0a·2020·2020·2020··.····<tr>.······ | |||
| 00000630:·3c74·643e·5231·3c2f·7464·3e0a·2020·2020··<td>R1</td>.···· | |||
| 00000 | 00000450:·3c74·643e·456e·7375·7265·2053·4d41·5020··<td>Ensure·SMAP· | ||
| 00000 | 00000460:·6973·206e·6f74·2064·6973·6162·6c65·6420··is·not·disabled· | ||
| 00000 | 00000470:·6475·7269·6e67·2062·6f6f·743c·2f74·643e··during·boot</td> | ||
| 00000 | 00000480:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000 | 00000490:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 00000 | 000004a0:·2020·2020·2054·6865·2053·4d41·5020·6973·······The·SMAP·is | ||
| 00000 | 000004b0:·2075·7365·6420·746f·2070·7265·7665·6e74···used·to·prevent | ||
| 00000 | 000004c0:·2074·6865·2073·7570·6572·7669·736f·7220···the·supervisor· | ||
| 000006c0:·7220·6d6f·6465·2066·726f·6d20·6578·6563··r·mode·from·exec | |||
| 000006d0:·7574·696e·6720·7573·6572·2073·7061·6365··uting·user·space | |||
| 000006e0:·2063·6f64·652c·0a69·7420·6973·2065·6e61···code,.it·is·ena | |||
| 000006f0:·626c·6564·2062·7920·6465·6661·756c·7420··bled·by·default· | |||
| 00000700:·7369·6e63·6520·4c69·6e75·7820·6b65·726e··since·Linux·kern | |||
| 00000710:·656c·2033·2e30·2e20·4275·7420·6974·2063··el·3.0.·But·it·c | |||
| 00000720:·6f75·6c64·2062·6520·6469·7361·626c·6564··ould·be·disabled | |||
| 00000730:·2074·6872·6f75·6768·0a6b·6572·6e65·6c20···through.kernel· | |||
| 00000740:·626f·6f74·2070·6172·616d·6574·6572·732e··boot·parameters. | |||
| 00000750:·0a0a·456e·7375·7265·2074·6861·7420·5375··..Ensure·that·Su | |||
| 00000760:·7065·7276·6973·6f72·204d·6f64·6520·4578··pervisor·Mode·Ex | |||
| 00000770:·6563·7574·696f·6e20·5072·6576·656e·7469··ecution·Preventi | |||
| 00000780:·6f6e·2028·534d·4550·2920·6973·206e·6f74··on·(SMEP)·is·not | |||
| 00000790:·2064·6973·6162·6c65·6420·6279·0a74·6865···disabled·by.the | |||
| 00000 | 000004d0:·6d6f·6465·2066·726f·6d20·756e·696e·7465··mode·from·uninte | ||
| 000004e0:·6e74·696f·6e61·6c6c·7920·7265·6164·696e··ntionally·readin | |||
| 000004f0:·672f·7772·6974·696e·6720·696e·746f·0a6d··g/writing·into.m | |||
| 00000500:·656d·6f72·7920·7061·6765·7320·696e·2074··emory·pages·in·t | |||
| 00000510:·6865·2075·7365·7220·7370·6163·652c·2069··he·user·space,·i | |||
| 00000520:·7420·6973·2065·6e61·626c·6564·2062·7920··t·is·enabled·by· | |||
| 00000530:·6465·6661·756c·7420·7369·6e63·6520·4c69··default·since·Li | |||
| 00000540:·6e75·7820·6b65·726e·656c·2033·2e37·2e0a··nux·kernel·3.7.. | |||
| 00000550:·4275·7420·6974·2063·6f75·6c64·2062·6520··But·it·could·be· | |||
| 00000560:·6469·7361·626c·6564·2074·6872·6f75·6768··disabled·through | |||
| 00000570:·206b·6572·6e65·6c20·626f·6f74·2070·6172···kernel·boot·par | |||
| 00000580:·616d·6574·6572·732e·0a0a·456e·7375·7265··ameters...Ensure | |||
| 00000590:·2074·6861·7420·5375·7065·7276·6973·6f72···that·Supervisor | |||
| 000005a0:·204d·6f64·6520·4163·6365·7373·2050·7265···Mode·Access·Pre | |||
| 000005b0:·7665·6e74·696f·6e20·2853·4d41·5029·2069··vention·(SMAP)·i | |||
| 000005c0:·7320·6e6f·7420·6469·7361·626c·6564·2062··s·not·disabled·b | |||
| 000005d0:·790a·7468·6520·3c74·743e·6e6f·736d·6170··y.the·<tt>nosmap | |||
| 000005e0:·3c2f·7474·3e20·626f·6f74·2070·6172·616d··</tt>·boot·param | |||
| 000005f0:·656e·7465·7220·6f70·7469·6f6e·2e0a·0a43··enter·option...C | |||
| 00000600:·6865·636b·2074·6861·7420·7468·6520·6c69··heck·that·the·li | |||
| 00000610:·6e65·203c·7072·653e·4752·5542·5f43·4d44··ne·<pre>GRUB_CMD | |||
| 00000620:·4c49·4e45·5f4c·494e·5558·3d22·2e2e·2e22··LINE_LINUX="..." | |||
| 00000630:·3c2f·7072·653e·2077·6974·6869·6e20·3c74··</pre>·within·<t | |||
| 00000640:·743e·2f65·7463·2f64·6566·6175·6c74·2f67··t>/etc/default/g | |||
| 00000650:·7275·623c·2f74·743e·0a64·6f65·736e·2774··rub</tt>.doesn't | |||
| 00000660:·2063·6f6e·7461·696e·2074·6865·2061·7267···contain·the·arg | |||
| 00000670:·756d·656e·7420·3c74·743e·6e6f·736d·6170··ument·<tt>nosmap | |||
| 00000680:·3c2f·7474·3e2e·0a52·756e·2074·6865·2066··</tt>..Run·the·f | |||
| 00000690:·6f6c·6c6f·7769·6e67·2063·6f6d·6d61·6e64··ollowing·command | |||
| 000006a0:·2074·6f20·7570·6461·7465·2063·6f6d·6d61···to·update·comma | |||
| 000006b0:·6e64·206c·696e·6520·666f·7220·616c·7265··nd·line·for·alre | |||
| 000006c0:·6164·7920·696e·7374·616c·6c65·6420·6b65··ady·installed·ke | |||
| 000006d0:·726e·656c·733a·0a3c·7072·653e·2320·6772··rnels:.<pre>#·gr | |||
| 000006e0:·7562·6279·202d·2d75·7064·6174·652d·6b65··ubby·--update-ke | |||
| 000006f0:·726e·656c·3d41·4c4c·202d·2d72·656d·6f76··rnel=ALL·--remov | |||
| 00000700:·652d·6172·6773·3d22·6e6f·736d·6170·223c··e-args="nosmap"< | |||
| 00000710:·2f70·7265·3e0a·2020·2020·2020·3c2f·7464··/pre>.······</td | |||
| 00000720:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | |||
| 00000730:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | |||
| 00000740:·2020·2020·2020·4469·7361·626c·696e·6720········Disabling· | |||
| 00000750:·534d·4150·2063·616e·2066·6163·696c·6974··SMAP·can·facilit | |||
| 00000760:·6174·6520·6578·706c·6f69·7461·7469·6f6e··ate·exploitation | |||
| 00000770:·206f·6620·7675·6c6e·6572·6162·696c·6974···of·vulnerabilit | |||
| 00000780:·6965·7320·6361·7573·6564·2062·7920·756e··ies·caused·by·un | |||
| 00000790:·696e·7465·6e64·6564·2061·6363·6573·7320··intended·access· | |||
| 000007a0:·616e·640a·6d61·6e69·7075·6c61·7469·6f6e··and.manipulation | |||
| 000007b0:·206f·6620·6461·7461·2069·6e20·7468·6520···of·data·in·the· | |||
| 000007c0:·7573·6572·2073·7061·6365·2e0a·2020·2020··user·space..···· | |||
| 000007d0:·2020·3c2f·7464·3e0a·2020·2020·3c2f·7472····</td>.····</tr | |||
| 000007e0:·3e0a·2020·2020·3c74·723e·0a20·2020·2020··>.····<tr>.····· | |||
| 000007f0:·203c·7464·3e52·313c·2f74·643e·0a20·2020···<td>R1</td>.··· | |||
| 00000800:·2020·203c·7464·3e45·6e73·7572·6520·534d·····<td>Ensure·SM | |||
| 00000810:·4550·2069·7320·6e6f·7420·6469·7361·626c··EP·is·not·disabl | |||
| 00000820:·6564·2064·7572·696e·6720·626f·6f74·3c2f··ed·during·boot</ | |||
| 00000830:·7464·3e0a·2020·2020·2020·3c74·6420·786d··td>.······<td·xm | |||
| 00000840:·6c3a·6c61·6e67·3d22·656e·2d55·5322·3e0a··l:lang="en-US">. | |||
| 00000850:·2020·2020·2020·2020·5468·6520·534d·4550··········The·SMEP | |||
| 00000860:·2069·7320·7573·6564·2074·6f20·7072·6576···is·used·to·prev | |||
| 00000870:·656e·7420·7468·6520·7375·7065·7276·6973··ent·the·supervis | |||
| 00000880:·6f72·206d·6f64·6520·6672·6f6d·2065·7865··or·mode·from·exe | |||
| 00000890:·6375·7469·6e67·2075·7365·7220·7370·6163··cuting·user·spac | |||
| 000008a0:·6520·636f·6465·2c0a·6974·2069·7320·656e··e·code,.it·is·en | |||
| 000008b0:·6162·6c65·6420·6279·2064·6566·6175·6c74··abled·by·default | |||
| 000008c0:·2073·696e·6365·204c·696e·7578·206b·6572···since·Linux·ker | |||
| 000008d0:·6e65·6c20·332e·302e·2042·7574·2069·7420··nel·3.0.·But·it· | |||
| 000008e0:·636f·756c·6420·6265·2064·6973·6162·6c65··could·be·disable | |||
| 000008f0:·6420·7468·726f·7567·680a·6b65·726e·656c··d·through.kernel | |||
| Max diff block lines reached; 3001394/3037848 bytes (98.80%) of diff not shown. | |||
| Offset 1, 44 lines modified | Offset 1, 13 lines modified | ||
| 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux | 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux |
| 2 | 8 | 2 | 8 |
| 3 | ···········································································Use·of·a·64-bit·operating·system | ||
| 4 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 5 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 6 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 7 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 8 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 9 | ···········································································bits. | ||
| 10 | ······························The·SMEP·is·used·to·prevent·the·supervisor | ||
| 11 | ······························mode·from·executing·user·space·code,·it·is | ||
| 12 | ······························enabled·by·default·since·Linux·kernel·3.0. | ||
| 13 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 14 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 15 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | ||
| 16 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | ||
| 17 | R1··disabled·during·boot······that·the·line································vulnerabilities·because·it·allows·the | ||
| 18 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | ||
| 19 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | ||
| 20 | ······························argument·nosmep.·Run·the·following·command | ||
| 21 | ······························to·update·command·line·for·already·installed | ||
| 22 | ······························kernels: | ||
| 23 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 24 | ······························args="nosmep" | ||
| 25 | ···········································································Use·of·weak·or·untested·encryption | ||
| 26 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 27 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 28 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 29 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 30 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 31 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 32 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 33 | ···········································································validated. | ||
| 34 | ······························The·SMAP·is·used·to·prevent·the·supervisor | 3 | ······························The·SMAP·is·used·to·prevent·the·supervisor |
| 35 | ······························mode·from·unintentionally·reading/writing | 4 | ······························mode·from·unintentionally·reading/writing |
| 36 | ······························into·memory·pages·in·the·user·space,·it·is | 5 | ······························into·memory·pages·in·the·user·space,·it·is |
| 37 | ······························enabled·by·default·since·Linux·kernel·3.7. | 6 | ······························enabled·by·default·since·Linux·kernel·3.7. |
| 38 | ······························But·it·could·be·disabled·through·kernel·boot | 7 | ······························But·it·could·be·disabled·through·kernel·boot |
| 39 | ······························parameters.·Ensure·that·Supervisor·Mode | 8 | ······························parameters.·Ensure·that·Supervisor·Mode |
| 40 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | 9 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate |
| Offset 47, 14 lines modified | Offset 16, 29 lines modified | ||
| 47 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | 16 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. |
| 48 | ······························within·/etc/default/grub·doesn't·contain·the | 17 | ······························within·/etc/default/grub·doesn't·contain·the |
| 49 | ······························argument·nosmap.·Run·the·following·command | 18 | ······························argument·nosmap.·Run·the·following·command |
| 50 | ······························to·update·command·line·for·already·installed | 19 | ······························to·update·command·line·for·already·installed |
| 51 | ······························kernels: | 20 | ······························kernels: |
| 52 | ······························#·grubby·--update-kernel=ALL·--remove- | 21 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 53 | ······························args="nosmap" | 22 | ······························args="nosmap" |
| 23 | ······························The·SMEP·is·used·to·prevent·the·supervisor | ||
| 24 | ······························mode·from·executing·user·space·code,·it·is | ||
| 25 | ······························enabled·by·default·since·Linux·kernel·3.0. | ||
| 26 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 27 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 28 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | ||
| 29 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | ||
| 30 | R1··disabled·during·boot······that·the·line································vulnerabilities·because·it·allows·the | ||
| 31 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | ||
| 32 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | ||
| 33 | ······························argument·nosmep.·Run·the·following·command | ||
| 34 | ······························to·update·command·line·for·already·installed | ||
| 35 | ······························kernels: | ||
| 36 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 37 | ······························args="nosmep" | ||
| 54 | ······························Systems·that·are·using·the·64-bit·x86·kernel | 38 | ······························Systems·that·are·using·the·64-bit·x86·kernel |
| 55 | ······························package·do·not·need·to·install·the·kernel- | 39 | ······························package·do·not·need·to·install·the·kernel- |
| 56 | ······························PAE·package·because·the·64-bit·x86·kernel | 40 | ······························PAE·package·because·the·64-bit·x86·kernel |
| 57 | ······························already·includes·this·support.·However,·if | 41 | ······························already·includes·this·support.·However,·if |
| 58 | ······························the·system·is·32-bit·and·also·supports·the | 42 | ······························the·system·is·32-bit·and·also·supports·the |
| 59 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD | 43 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD |
| 60 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE | 44 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE |
| Offset 62, 14 lines modified | Offset 46, 30 lines modified | ||
| 62 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute | 46 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute |
| 63 | ······························installed·with·the·following·command:········(NX)·support. | 47 | ······························installed·with·the·following·command:········(NX)·support. |
| 64 | ······························$·sudo·yum·install·kernel-PAE | 48 | ······························$·sudo·yum·install·kernel-PAE |
| 65 | ······························The·installation·process·should·also·have | 49 | ······························The·installation·process·should·also·have |
| 66 | ······························configured·the·bootloader·to·load·the·new | 50 | ······························configured·the·bootloader·to·load·the·new |
| 67 | ······························kernel·at·boot.·Verify·this·after·reboot·and | 51 | ······························kernel·at·boot.·Verify·this·after·reboot·and |
| 68 | ······························modify·/etc/default/grub·if·necessary. | 52 | ······························modify·/etc/default/grub·if·necessary. |
| 53 | ···········································································Use·of·a·64-bit·operating·system | ||
| 54 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 55 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 56 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 57 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 58 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 59 | ···········································································bits. | ||
| 60 | ···········································································Use·of·weak·or·untested·encryption | ||
| 61 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 62 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 63 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 64 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 65 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 66 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 67 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 68 | ···········································································validated. | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·the·UEFI·Boot·Loader··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter | 73 | ····Set·the·UEFI·Boot·Loader··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5··Password··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These | 74 | R5··Password··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| Offset 99, 171 lines modified | Offset 99, 27 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ······························To·set·the·runtime·status·of·the·············The·vm.mmap_min_addr·parameter | ||
| 107 | ······························vm.mmap_min_addr·kernel·parameter,·run·the···specifies·the·minimum·virtual·address | ||
| 108 | ····Prevent·applications·from·following·command:···························that·a·process·is·allowed·to·mmap. | ||
| 109 | R8··mapping·low·portion·of····$·sudo·sysctl·-w·vm.mmap_min_addr=65536······Allowing·a·process·to·mmap·low·portion | ||
| 110 | ····virtual·memory············To·make·sure·that·the·setting·is·persistent,·of·virtual·memory·can·have·security | ||
| 111 | ······························add·the·following·line·to·a·file·in·the······implications·such·as·such·as | ||
| 112 | ······························directory·/etc/sysctl.d:·····················heightened·risk·of·kernel·null·pointer | ||
| 113 | ······························vm.mmap_min_addr·=·65536·····················dereference·defects. | ||
| 114 | ···········································································The·CONFIG_SHUFFLE_PAGE_ALLOCATOR | ||
| 115 | ······························To·enable·randomization·of·the·page··········config·option·is·primarily·focused·on | ||
| 116 | ······························allocator·in·the·kernel,·add·the·············improving·the·average·utilization·of·a | ||
| 117 | ······························page_alloc.shuffle=1·argument·to·the·default·direct-mapped·memory-side-cache.·Aside | ||
| 118 | ······························GRUB·2·command·line.·To·ensure·that··········of·this·performance·effect,·it·also | ||
| 119 | ······························page_alloc.shuffle=1·is·added·as·a·kernel····reduces·predictability·of·page | ||
| Max diff block lines reached; 680962/698952 bytes (97.43%) of diff not shown. | |||
| Offset 41, 63 lines modified | Offset 41, 68 lines modified | ||
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1<br/>3.1.5</td> | 47 | ······<td>3.1.1<br/>3.1.5</td> |
| 48 | ······<td> | 48 | ······<td>Disable·SSH·Root·Login</td> |
| 49 | ······<td·xml:lang="en-US"> | 49 | ······<td·xml:lang="en-US"> |
| 50 | ········To·restrict·root·logins·on·serial·ports, | ||
| 51 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 52 | <pre>ttyS0 | ||
| 53 | t | 50 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| 51 | system·directly·over·a·network. | ||
| 52 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | ||
| 53 | <tt>/etc/ssh/sshd_config</tt>: | ||
| 54 | <pre>PermitRootLogin·no</pre> | ||
| 54 | ······</td> | 55 | ······</td> |
| 55 | ······<td·xml:lang="en-US"> | 56 | ······<td·xml:lang="en-US"> |
| 56 | ········Preventing·direct·root·login·to·serial·port·interfaces | ||
| 57 | helps·ensure·accountability·for·actions·taken·on·the·systems | ||
| 58 | 57 | ········Even·though·the·communications·channel·may·be·encrypted,·an·additional·layer·of | |
| 58 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | ||
| 59 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | ||
| 60 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | ||
| 61 | direct·attack·attempts·on·root's·password. | ||
| 59 | ······</td> | 62 | ······</td> |
| 60 | ····</tr> | 63 | ····</tr> |
| 61 | ····<tr> | 64 | ····<tr> |
| 62 | ······<td>3.1.1< | 65 | ······<td>3.1.1</td> |
| 63 | ······<td> | 66 | ······<td>Disable·GDM·Guest·Login</td> |
| 64 | ······<td·xml:lang="en-US"> | 67 | ······<td·xml:lang="en-US"> |
| 65 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 66 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 67 | <pre>vc/1 | ||
| 68 | vc/2 | ||
| 69 | vc/3 | ||
| 70 | 68 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·login·without·credentials | |
| 69 | which·can·be·useful·for·public·kiosk·scenarios.·Allowing·users·to·login·without·credentials | ||
| 70 | or·"guest"·account·access·has·inherent·security·risks·and·should·be·disabled.·To·do·disable | ||
| 71 | timed·logins·or·guest·account·access,·set·the·<tt>TimedLoginEnable</tt>·to·<tt>false</tt>·in | ||
| 72 | the·<tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | ||
| 73 | <pre>[daemon] | ||
| 74 | TimedLoginEnable=false</pre> | ||
| 71 | ······</td> | 75 | ······</td> |
| 72 | ······<td·xml:lang="en-US"> | 76 | ······<td·xml:lang="en-US"> |
| 77 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | ||
| 78 | system·security. | ||
| 73 | ········Preventing·direct·root·login·to·virtual·console·devices | ||
| 74 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 75 | using·the·root·account. | ||
| 76 | ······</td> | 79 | ······</td> |
| 77 | ····</tr> | 80 | ····</tr> |
| 78 | ····<tr> | 81 | ····<tr> |
| 79 | ······<td>3.1.1<br/>3.1.5</td> | 82 | ······<td>3.1.1<br/>3.1.5</td> |
| 80 | ······<td> | 83 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> |
| 81 | ······<td·xml:lang="en-US"> | 84 | ······<td·xml:lang="en-US"> |
| 82 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | ||
| 83 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | ||
| 84 | their·UID·changed. | ||
| 85 | <br·/> | ||
| 86 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | ||
| 87 | should·be·changed·to·one·greater·than·"0"·but·less·than·"1000." | ||
| 88 | Otherwise·assign·a·UID·greater·than·"1000"·that·has·not·already·been | ||
| 89 | as | 85 | ········If·an·account·is·configured·for·password·authentication |
| 86 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 87 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 88 | <tt>nullok</tt>·in | ||
| 89 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| 90 | <tt>/etc/pam.d/password-auth</tt> | ||
| 91 | to·prevent·logins·with·empty·passwords. | ||
| 90 | ······</td> | 92 | ······</td> |
| 91 | ······<td·xml:lang="en-US"> | 93 | ······<td·xml:lang="en-US"> |
| 94 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | ||
| 95 | run·commands·with·the·privileges·of·that·account.·Accounts·with | ||
| 96 | empty·passwords·should·never·be·used·in·operational·environments. | ||
| 92 | ········An·account·has·root·authority·if·it·has·a·UID·of·0.·Multiple·accounts | ||
| 93 | with·a·UID·of·0·afford·more·opportunity·for·potential·intruders·to | ||
| 94 | guess·a·password·for·a·privileged·account.·Proper·configuration·of | ||
| 95 | sudo·is·recommended·to·afford·multiple·system·administrators | ||
| 96 | access·to·root·privileges·in·an·accountable·manner. | ||
| 97 | ······</td> | 97 | ······</td> |
| 98 | ····</tr> | 98 | ····</tr> |
| 99 | ····<tr> | 99 | ····<tr> |
| 100 | ······<td>3.1.1<br/>3.1.6</td> | 100 | ······<td>3.1.1<br/>3.1.6</td> |
| 101 | ······<td>Direct·root·Logins·Not·Allowed</td> | 101 | ······<td>Direct·root·Logins·Not·Allowed</td> |
| 102 | ······<td·xml:lang="en-US"> | 102 | ······<td·xml:lang="en-US"> |
| 103 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators | 103 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators |
| Offset 120, 68 lines modified | Offset 125, 65 lines modified | ||
| 120 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate | 125 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate |
| 121 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low | 126 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low |
| 122 | and·FISMA·Moderate·systems. | 127 | and·FISMA·Moderate·systems. |
| 123 | ······</td> | 128 | ······</td> |
| 124 | ····</tr> | 129 | ····</tr> |
| 125 | ····<tr> | 130 | ····<tr> |
| 126 | ······<td>3.1.1</td> | 131 | ······<td>3.1.1</td> |
| 127 | ······<td>Disable·GDM· | 132 | ······<td>Disable·GDM·Automatic·Login</td> |
| 128 | ······<td·xml:lang="en-US"> | 133 | ······<td·xml:lang="en-US"> |
| 129 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to· | 134 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without |
| 130 | which·can·be·useful·for·public·kiosk·scenarios.·Allowing·users·to·login·without·credentials | ||
| 131 | or·"guest"·account·access·has·inherent·security·risks·and·should·be·disabled.·To·do·disable | ||
| 132 | 135 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | |
| 136 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 137 | login·to·the·system,·set·the·<tt>AutomaticLoginEnable</tt>·to·<tt>false</tt>·in·the | ||
| 133 | 138 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | |
| 134 | <pre>[daemon] | 139 | <pre>[daemon] |
| 135 | 140 | AutomaticLoginEnable=false</pre> | |
| 136 | ······</td> | 141 | ······</td> |
| 137 | ······<td·xml:lang="en-US"> | 142 | ······<td·xml:lang="en-US"> |
| 138 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | 143 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating |
| 139 | system·security. | 144 | system·security. |
| 140 | ······</td> | 145 | ······</td> |
| 141 | ····</tr> | 146 | ····</tr> |
| 142 | ····<tr> | 147 | ····<tr> |
| 143 | ······<td>3.1.1<br/>3.1.5</td> | 148 | ······<td>3.1.1<br/>3.1.5</td> |
| 144 | ······<td> | 149 | ······<td>Verify·Only·Root·Has·UID·0</td> |
| 145 | ······<td·xml:lang="en-US"> | 150 | ······<td·xml:lang="en-US"> |
| 151 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | ||
| 152 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | ||
| 153 | their·UID·changed. | ||
| 154 | <br·/> | ||
| 155 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | ||
| Max diff block lines reached; 461553/468138 bytes (98.59%) of diff not shown. | |||
| Offset 1, 85 lines modified | Offset 1, 13 lines modified | ||
| 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of | 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of |
| 2 | Oracle·Linux·8 | 2 | Oracle·Linux·8 |
| 3 | ······························································································Preventing·direct | ||
| 4 | ······························································································root·login·to·serial | ||
| 5 | ·······································To·restrict·root·logins·on·serial·ports,·ensure·lines··port·interfaces | ||
| 6 | 3.1.1···Restrict·Serial·Port·Root······of·this·form·do·not·appear·in·/etc/securetty:··········helps·ensure | ||
| 7 | 3.1.5···Logins·························ttyS0··················································accountability·for | ||
| 8 | ·······································ttyS1··················································actions·taken·on·the | ||
| 9 | ······························································································systems·using·the | ||
| 10 | ······························································································root·account. | ||
| 11 | ·······································To·restrict·root·logins·through·the·(deprecated)·······Preventing·direct | ||
| 12 | ·······································virtual·console·devices,·ensure·lines·of·this·form·do··root·login·to | ||
| 13 | ·······································not·appear·in·/etc/securetty:··························virtual·console | ||
| 14 | 3.1.1···Restrict·Virtual·Console·Root··vc/1···················································devices·helps·ensure | ||
| 15 | 3.1.5···Logins·························vc/2···················································accountability·for | ||
| 16 | ·······································vc/3···················································actions·taken·on·the | ||
| 17 | ·······································vc/4···················································system·using·the | ||
| 18 | ······························································································root·account. | ||
| 19 | ······························································································An·account·has·root | ||
| 20 | ······························································································authority·if·it·has | ||
| 21 | ······························································································a·UID·of·0.·Multiple | ||
| 22 | ······························································································accounts·with·a·UID | ||
| 23 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more | ||
| 24 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for | ||
| 25 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders | ||
| 26 | ·······································their·UID·changed.·····································to·guess·a·password | ||
| 27 | 3.1.1···Verify·Only·Root·Has·UID·0·····If·the·account·is·associated·with·system·commands·or···for·a·privileged | ||
| 28 | 3.1.5··································applications·the·UID·should·be·changed·to·one·greater··account.·Proper | ||
| 29 | ·······································than·"0"·but·less·than·"1000."·Otherwise·assign·a·UID··configuration·of | ||
| 30 | ·······································greater·than·"1000"·that·has·not·already·been··········sudo·is·recommended | ||
| 31 | ·······································assigned.··············································to·afford·multiple | ||
| 32 | ······························································································system | ||
| 33 | ······························································································administrators | ||
| 34 | ······························································································access·to·root | ||
| 35 | ······························································································privileges·in·an | ||
| 36 | ······························································································accountable·manner. | ||
| 37 | ·······································To·further·limit·access·to·the·root·account, | ||
| 38 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 39 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 40 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 41 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| 42 | ·······································login·through·any·communication·device·on·the·system,··multifactor | ||
| 43 | ·······································whether·via·the·console·or·via·a·raw·network···········authentication·to | ||
| 44 | 3.1.1··································interface.·This·is·dangerous·as·user·can·login·to·the··privileged·accounts. | ||
| 45 | 3.1.6···Direct·root·Logins·Not·Allowed·system·as·root·via·Telnet,·which·sends·the·password·in·Users·will·first | ||
| 46 | ·······································plain·text·over·the·network.·By·default,·Oracle·Linux··login,·then·escalate | ||
| 47 | ·······································8's·/etc/securetty·file·only·allows·the·root·user·to···to·privileged·(root) | ||
| 48 | ·······································login·at·the·console·physically·attached·to·the········access·via·su·/ | ||
| 49 | ·······································system.·To·prevent·root·from·logging·in,·remove·the····sudo.·This·is | ||
| 50 | ·······································contents·of·this·file.·To·prevent·direct·root·logins,··required·for·FISMA | ||
| 51 | ·······································remove·the·contents·of·this·file·by·typing·the·········Low·and·FISMA | ||
| 52 | ·······································following·command:·····································Moderate·systems. | ||
| 53 | ·······································$·sudo·echo·>·/etc/securetty | ||
| 54 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 55 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 56 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 57 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 58 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 59 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | ||
| 60 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | ||
| 61 | ·······································etc/gdm/custom.conf.·For·example:······················security. | ||
| 62 | ·······································[daemon] | ||
| 63 | ·······································TimedLoginEnable=false | ||
| 64 | ······························································································If·an·account·has·an | ||
| 65 | ······························································································empty·password, | ||
| 66 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | ||
| 67 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | ||
| 68 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | ||
| 69 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | ||
| 70 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | ||
| 71 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | ||
| 72 | ······························································································never·be·used·in | ||
| 73 | ······························································································operational | ||
| 74 | ······························································································environments. | ||
| 75 | ······························································································Even·though·the | 3 | ······························································································Even·though·the |
| 76 | ······························································································communications | 4 | ······························································································communications |
| 77 | ······························································································channel·may·be | 5 | ······························································································channel·may·be |
| 78 | ······························································································encrypted,·an | 6 | ······························································································encrypted,·an |
| 79 | ······························································································additional·layer·of | 7 | ······························································································additional·layer·of |
| 80 | ······························································································security·is·gained | 8 | ······························································································security·is·gained |
| 81 | ······························································································by·extending·the | 9 | ······························································································by·extending·the |
| Offset 93, 58 lines modified | Offset 21, 210 lines modified | ||
| 93 | ······························································································accountability·of | 21 | ······························································································accountability·of |
| 94 | ······························································································actions·performed·on | 22 | ······························································································actions·performed·on |
| 95 | ······························································································the·system·and·also | 23 | ······························································································the·system·and·also |
| 96 | ······························································································helps·to·minimize | 24 | ······························································································helps·to·minimize |
| 97 | ······························································································direct·attack | 25 | ······························································································direct·attack |
| 98 | ······························································································attempts·on·root's | 26 | ······························································································attempts·on·root's |
| 99 | ······························································································password. | 27 | ······························································································password. |
| 28 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 29 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 30 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 31 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 32 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 33 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | ||
| 34 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | ||
| 35 | ·······································etc/gdm/custom.conf.·For·example:······················security. | ||
| 36 | ·······································[daemon] | ||
| 37 | ·······································TimedLoginEnable=false | ||
| 38 | ······························································································If·an·account·has·an | ||
| 39 | ······························································································empty·password, | ||
| 40 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | ||
| 41 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | ||
| 42 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | ||
| 43 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | ||
| 44 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | ||
| 45 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | ||
| 46 | ······························································································never·be·used·in | ||
| 47 | ······························································································operational | ||
| 48 | ······························································································environments. | ||
| 49 | ·······································To·further·limit·access·to·the·root·account, | ||
| 50 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 51 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 52 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 53 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| 54 | ·······································login·through·any·communication·device·on·the·system,··multifactor | ||
| 55 | ·······································whether·via·the·console·or·via·a·raw·network···········authentication·to | ||
| 56 | 3.1.1··································interface.·This·is·dangerous·as·user·can·login·to·the··privileged·accounts. | ||
| 57 | 3.1.6···Direct·root·Logins·Not·Allowed·system·as·root·via·Telnet,·which·sends·the·password·in·Users·will·first | ||
| 58 | ·······································plain·text·over·the·network.·By·default,·Oracle·Linux··login,·then·escalate | ||
| 59 | ·······································8's·/etc/securetty·file·only·allows·the·root·user·to···to·privileged·(root) | ||
| 60 | ·······································login·at·the·console·physically·attached·to·the········access·via·su·/ | ||
| 61 | ·······································system.·To·prevent·root·from·logging·in,·remove·the····sudo.·This·is | ||
| Max diff block lines reached; 795653/813582 bytes (97.80%) of diff not shown. | |||
| Offset 4070, 15 lines modified | Offset 4070, 15 lines modified | ||
| 4070 | <tt>RekeyLimit</tt>. | 4070 | <tt>RekeyLimit</tt>. |
| 4071 | ··</td> | 4071 | ··</td> |
| 4072 | ··<td·xml:lang="en-US"> | 4072 | ··<td·xml:lang="en-US"> |
| 4073 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling | 4073 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling |
| 4074 | time-based·limit,·effects·of·potential·attacks·against | 4074 | time-based·limit,·effects·of·potential·attacks·against |
| 4075 | encryption·keys·are·limited. | 4075 | encryption·keys·are·limited. |
| 4076 | ··</td> | 4076 | ··</td> |
| 4077 | ··<td>var_ssh_client_rekey_limit_ | 4077 | ··<td>var_ssh_client_rekey_limit_size=1G<br/>var_ssh_client_rekey_limit_time=1hour</td> |
| 4078 | </tr> | 4078 | </tr> |
| 4079 | <tr> | 4079 | <tr> |
| 4080 | ··<td></td> | 4080 | ··<td></td> |
| 4081 | ··<td>N/A</td> | 4081 | ··<td>N/A</td> |
| 4082 | ··<td>SSH·client·uses·strong·entropy·to·seed·(for·CSH·like·shells)</td> | 4082 | ··<td>SSH·client·uses·strong·entropy·to·seed·(for·CSH·like·shells)</td> |
| 4083 | ··<td·xml:lang="en-US"> | 4083 | ··<td·xml:lang="en-US"> |
| 4084 | To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure | 4084 | To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure |
| Offset 4133, 15 lines modified | Offset 4133, 15 lines modified | ||
| 4133 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> | 4133 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> |
| 4134 | ··</td> | 4134 | ··</td> |
| 4135 | ··<td·xml:lang="en-US"> | 4135 | ··<td·xml:lang="en-US"> |
| 4136 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling | 4136 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling |
| 4137 | time-based·limit,·effects·of·potential·attacks·against | 4137 | time-based·limit,·effects·of·potential·attacks·against |
| 4138 | encryption·keys·are·limited. | 4138 | encryption·keys·are·limited. |
| 4139 | ··</td> | 4139 | ··</td> |
| 4140 | ··<td>var_rekey_limit_ | 4140 | ··<td>var_rekey_limit_size=1G<br/>var_rekey_limit_time=1hour</td> |
| 4141 | </tr> | 4141 | </tr> |
| 4142 | <tr> | 4142 | <tr> |
| 4143 | ··<td></td> | 4143 | ··<td></td> |
| 4144 | ··<td>N/A</td> | 4144 | ··<td>N/A</td> |
| 4145 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> | 4145 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> |
| 4146 | ··<td·xml:lang="en-US"> | 4146 | ··<td·xml:lang="en-US"> |
| 4147 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. | 4147 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. |
| Offset 3341, 16 lines modified | Offset 3341, 16 lines modified | ||
| 3341 | ··················································································································options,·which·can | 3341 | ··················································································································options,·which·can |
| 3342 | ··················································································································help·protect | 3342 | ··················································································································help·protect |
| 3343 | ··················································································································programs·which·use | 3343 | ··················································································································programs·which·use |
| 3344 | ··················································································································it. | 3344 | ··················································································································it. |
| 3345 | ·························The·RekeyLimit·parameter·specifies·how·often·the·session·key·is·renegotiated,·both·in····By·decreasing·the | 3345 | ·························The·RekeyLimit·parameter·specifies·how·often·the·session·key·is·renegotiated,·both·in····By·decreasing·the |
| 3346 | ·························terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.·To·decrease·the····limit·based·on·the | 3346 | ·························terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.·To·decrease·the····limit·based·on·the |
| 3347 | ········Configure········default·limits,·put·line·RekeyLimit·1G·1hour·to·file·/etc/ssh/ssh_config.d/02-rekey-·····amount·of·data·and | 3347 | ········Configure········default·limits,·put·line·RekeyLimit·1G·1hour·to·file·/etc/ssh/ssh_config.d/02-rekey-·····amount·of·data·and |
| 3348 | ·····N/·session··········limit.conf.·Make·sure·that·there·is·no·other·RekeyLimit·configuration·preceding·the······enabling·time-based·var_ssh_client_rekey_limit_ | 3348 | ·····N/·session··········limit.conf.·Make·sure·that·there·is·no·other·RekeyLimit·configuration·preceding·the······enabling·time-based·var_ssh_client_rekey_limit_size=1G |
| 3349 | ·····A··renegotiation····include·directive·in·the·main·config·file·/etc/ssh/ssh_config.·Check·also·other·files·in·limit,·effects·of···var_ssh_client_rekey_limit_ | 3349 | ·····A··renegotiation····include·directive·in·the·main·config·file·/etc/ssh/ssh_config.·Check·also·other·files·in·limit,·effects·of···var_ssh_client_rekey_limit_time=1hour |
| 3350 | ········for·SSH·client···/etc/ssh/ssh_config.d·directory.·Files·are·processed·according·to·lexicographical·order··potential·attacks | 3350 | ········for·SSH·client···/etc/ssh/ssh_config.d·directory.·Files·are·processed·according·to·lexicographical·order··potential·attacks |
| 3351 | ·························of·file·names.·Make·sure·that·there·is·no·file·processed·before·02-rekey-limit.conf······against·encryption | 3351 | ·························of·file·names.·Make·sure·that·there·is·no·file·processed·before·02-rekey-limit.conf······against·encryption |
| 3352 | ·························containing·definition·of·RekeyLimit.·····················································keys·are·limited. | 3352 | ·························containing·definition·of·RekeyLimit.·····················································keys·are·limited. |
| 3353 | ··················································································································Some·SSH | 3353 | ··················································································································Some·SSH |
| 3354 | ··················································································································implementations·use | 3354 | ··················································································································implementations·use |
| 3355 | ··················································································································the·openssl·library | 3355 | ··················································································································the·openssl·library |
| 3356 | ··················································································································for·entropy,·which | 3356 | ··················································································································for·entropy,·which |
| Offset 3401, 16 lines modified | Offset 3401, 16 lines modified | ||
| 3401 | ··················································································································generator·used·by | 3401 | ··················································································································generator·used·by |
| 3402 | ··················································································································SSH·would·be·known | 3402 | ··················································································································SSH·would·be·known |
| 3403 | ··················································································································to·potential | 3403 | ··················································································································to·potential |
| 3404 | ··················································································································attackers. | 3404 | ··················································································································attackers. |
| 3405 | ··················································································································By·decreasing·the | 3405 | ··················································································································By·decreasing·the |
| 3406 | ·························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated,·····limit·based·on·the | 3406 | ·························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated,·····limit·based·on·the |
| 3407 | ········Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············amount·of·data·and | 3407 | ········Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············amount·of·data·and |
| 3408 | ·····N/·session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·var_rekey_limit_ | 3408 | ·····N/·session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·var_rekey_limit_size=1G |
| 3409 | ·····A··renegotiation····sshd_config:·············································································limit,·effects·of···var_rekey_limit_ | 3409 | ·····A··renegotiation····sshd_config:·············································································limit,·effects·of···var_rekey_limit_time=1hour |
| 3410 | ·························RekeyLimit·1G·1hour······································································potential·attacks | 3410 | ·························RekeyLimit·1G·1hour······································································potential·attacks |
| 3411 | ··················································································································against·encryption | 3411 | ··················································································································against·encryption |
| 3412 | ··················································································································keys·are·limited. | 3412 | ··················································································································keys·are·limited. |
| 3413 | ··················································································································SSH·implementation | 3413 | ··················································································································SSH·implementation |
| 3414 | ··················································································································in·Oracle·Linux·8 | 3414 | ··················································································································in·Oracle·Linux·8 |
| 3415 | ··················································································································uses·the·openssl | 3415 | ··················································································································uses·the·openssl |
| 3416 | ··················································································································library,·which | 3416 | ··················································································································library,·which |
| Offset 24427, 17 lines modified | Offset 24427, 17 lines modified | ||
| 0005f6a0:·6e67·0a74·696d·652d·6261·7365·6420·6c69··ng.time-based·li | 0005f6a0:·6e67·0a74·696d·652d·6261·7365·6420·6c69··ng.time-based·li | ||
| 0005f6b0:·6d69·742c·2065·6666·6563·7473·206f·6620··mit,·effects·of· | 0005f6b0:·6d69·742c·2065·6666·6563·7473·206f·6620··mit,·effects·of· | ||
| 0005f6c0:·706f·7465·6e74·6961·6c20·6174·7461·636b··potential·attack | 0005f6c0:·706f·7465·6e74·6961·6c20·6174·7461·636b··potential·attack | ||
| 0005f6d0:·7320·6167·6169·6e73·740a·656e·6372·7970··s·against.encryp | 0005f6d0:·7320·6167·6169·6e73·740a·656e·6372·7970··s·against.encryp | ||
| 0005f6e0:·7469·6f6e·206b·6579·7320·6172·6520·6c69··tion·keys·are·li | 0005f6e0:·7469·6f6e·206b·6579·7320·6172·6520·6c69··tion·keys·are·li | ||
| 0005f6f0:·6d69·7465·642e·0a20·203c·2f74·643e·0a20··mited..··</td>.· | 0005f6f0:·6d69·7465·642e·0a20·203c·2f74·643e·0a20··mited..··</td>.· | ||
| 0005f700:·203c·7464·3e76·6172·5f72·656b·6579·5f6c···<td>var_rekey_l | 0005f700:·203c·7464·3e76·6172·5f72·656b·6579·5f6c···<td>var_rekey_l | ||
| 0005f710:·696d·6974·5f73·697a·653d·3147·3c62·722f··imit_size=1G<br/ | |||
| 0005f720:·3e76·6172·5f72·656b·6579·5f6c·696d·6974··>var_rekey_limit | |||
| 0005f7 | 0005f730:·5f74·696d·653d·3168·6f75·723c·2f74·643e··_time=1hour</td> | ||
| 0005f720:·6272·2f3e·7661·725f·7265·6b65·795f·6c69··br/>var_rekey_li | |||
| 0005f730:·6d69·745f·7369·7a65·3d31·473c·2f74·643e··mit_size=1G</td> | |||
| 0005f740:·0a3c·2f74·723e·0a3c·7472·3e0a·2020·3c74··.</tr>.<tr>.··<t | 0005f740:·0a3c·2f74·723e·0a3c·7472·3e0a·2020·3c74··.</tr>.<tr>.··<t | ||
| 0005f750:·643e·3c2f·7464·3e0a·2020·3c74·643e·4e2f··d></td>.··<td>N/ | 0005f750:·643e·3c2f·7464·3e0a·2020·3c74·643e·4e2f··d></td>.··<td>N/ | ||
| 0005f760:·413c·2f74·643e·0a20·203c·7464·3e53·5348··A</td>.··<td>SSH | 0005f760:·413c·2f74·643e·0a20·203c·7464·3e53·5348··A</td>.··<td>SSH | ||
| 0005f770:·2073·6572·7665·7220·7573·6573·2073·7472···server·uses·str | 0005f770:·2073·6572·7665·7220·7573·6573·2073·7472···server·uses·str | ||
| 0005f780:·6f6e·6720·656e·7472·6f70·7920·746f·2073··ong·entropy·to·s | 0005f780:·6f6e·6720·656e·7472·6f70·7920·746f·2073··ong·entropy·to·s | ||
| 0005f790:·6565·643c·2f74·643e·0a20·203c·7464·2078··eed</td>.··<td·x | 0005f790:·6565·643c·2f74·643e·0a20·203c·7464·2078··eed</td>.··<td·x | ||
| 0005f7a0:·6d6c·3a6c·616e·673d·2265·6e2d·5553·223e··ml:lang="en-US"> | 0005f7a0:·6d6c·3a6c·616e·673d·2265·6e2d·5553·223e··ml:lang="en-US"> |
| Offset 7774, 16 lines modified | Offset 7774, 16 lines modified | ||
| 7774 | ·································private·key.··········································system·where·the | 7774 | ·································private·key.··········································system·where·the |
| 7775 | ·······················································································associated·public | 7775 | ·······················································································associated·public |
| 7776 | ·······················································································key·has·been | 7776 | ·······················································································key·has·been |
| 7777 | ·······················································································installed. | 7777 | ·······················································································installed. |
| 7778 | ·································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the | 7778 | ·································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the |
| 7779 | ·································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the | 7779 | ·································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the |
| 7780 | ···········Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and | 7780 | ···········Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and |
| 7781 | ········N/·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_ | 7781 | ········N/·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_size=1G |
| 7782 | ········A··renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_ | 7782 | ········A··renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_time=1hour |
| 7783 | ·································following·line·in·/etc/ssh/sshd_config:···············potential·attacks | 7783 | ·································following·line·in·/etc/ssh/sshd_config:···············potential·attacks |
| 7784 | ·································RekeyLimit·1G·1hour···································against·encryption | 7784 | ·································RekeyLimit·1G·1hour···································against·encryption |
| 7785 | ·······················································································keys·are·limited. | 7785 | ·······················································································keys·are·limited. |
| 7786 | ·······················································································SSH·implementation | 7786 | ·······················································································SSH·implementation |
| 7787 | ·······················································································in·Oracle·Linux·8 | 7787 | ·······················································································in·Oracle·Linux·8 |
| 7788 | ·······················································································uses·the·openssl | 7788 | ·······················································································uses·the·openssl |
| 7789 | ·······················································································library,·which | 7789 | ·······················································································library,·which |
| Offset 63, 15659 lines modified | Offset 63, 15659 lines modified | ||
| 000003e0:·2020·2020·3c74·683e·5275·6c65·2054·6974······<th>Rule·Tit | 000003e0:·2020·2020·3c74·683e·5275·6c65·2054·6974······<th>Rule·Tit | ||
| 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | ||
| 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | ||
| 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | ||
| 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | ||
| 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | Diff chunk too large, falling back to line-by-line diff (3285 lines added, 3285 lines removed) | |
| 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | ||
| 00000450:·2d32·286 | 00000450:·2d32·2861·293c·2f74·643e·0a20·2020·2020··-2(a)</td>.····· | ||
| 00000460:· | 00000460:·203c·7464·3e43·6f6e·6669·6775·7265·2061···<td>Configure·a | ||
| 00000470:·7 | 00000470:·7564·6974·696e·6720·6f66·2075·6e73·7563··uditing·of·unsuc | ||
| 00000480:· | 00000480:·6365·7373·6675·6c20·6669·6c65·2064·656c··cessful·file·del | ||
| 00000490:· | 00000490:·6574·696f·6e73·2028·4141·7263·6836·3429··etions·(AArch64) | ||
| 000004a0:· | 000004a0:·3c2f·7464·3e0a·2020·2020·2020·3c74·6420··</td>.······<td· | ||
| 000004b0:·7 | 000004b0:·786d·6c3a·6c61·6e67·3d22·656e·2d55·5322··xml:lang="en-US" | ||
| 000004c0:·3e0a·2020·2020·2020· | 000004c0:·3e0a·2020·2020·2020·2020·456e·7375·7265··>.········Ensure | ||
| 000004d0:· | 000004d0:·2074·6861·7420·756e·7375·6363·6573·7366···that·unsuccessf | ||
| 000004e0:· | 000004e0:·756c·2061·7474·656d·7074·7320·746f·2064··ul·attempts·to·d | ||
| 000004f0:· | 000004f0:·656c·6574·6520·6120·6669·6c65·2061·7265··elete·a·file·are | ||
| 00000500:· | 00000500:·2061·7564·6974·6564·2e0a·0a54·6865·2066···audited...The·f | ||
| 00000510:·6 | 00000510:·6f6c·6c6f·7769·6e67·2072·756c·6573·2063··ollowing·rules·c | ||
| 00000520:· | 00000520:·6f6e·6669·6775·7265·2061·7564·6974·2061··onfigure·audit·a | ||
| 00000530:· | 00000530:·7320·6465·7363·7269·6265·6420·6162·6f76··s·described·abov | ||
| 00000540:· | 00000540:·653a·0a3c·7072·653e·2323·2055·6e73·7563··e:.<pre>##·Unsuc | ||
| 00000550:·6 | 00000550:·6365·7373·6675·6c20·6669·6c65·2064·656c··cessful·file·del | ||
| 00000560:· | 00000560:·6574·650a·2d61·2061·6c77·6179·732c·6578··ete.-a·always,ex | ||
| 00000570:· | 00000570:·6974·202d·4620·6172·6368·3d62·3332·202d··it·-F·arch=b32·- | ||
| 00000580:· | 00000580:·5320·756e·6c69·6e6b·2c75·6e6c·696e·6b61··S·unlink,unlinka | ||
| 00000590:· | 00000590:·742c·7265·6e61·6d65·2c72·656e·616d·6561··t,rename,renamea | ||
| 000005a0:·74 | 000005a0:·7420·2d46·2065·7869·743d·2d45·4143·4345··t·-F·exit=-EACCE | ||
| 000005b0:· | 000005b0:·5320·2d46·2061·7569·643e·3d31·3030·3020··S·-F·auid>=1000· | ||
| 000005c0:· | 000005c0:·2d46·2061·7569·6421·3d75·6e73·6574·202d··-F·auid!=unset·- | ||
| 000005d0:· | 000005d0:·4620·6b65·793d·756e·7375·6363·6573·7366··F·key=unsuccessf | ||
| 000005e0:· | 000005e0:·756c·2d64·656c·6574·650a·2d61·2061·6c77··ul-delete.-a·alw | ||
| 000005f0:· | 000005f0:·6179·732c·6578·6974·202d·4620·6172·6368··ays,exit·-F·arch | ||
| 00000600:· | 00000600:·3d62·3634·202d·5320·756e·6c69·6e6b·6174··=b64·-S·unlinkat | ||
| 00000610:· | 00000610:·2c72·656e·616d·6561·7420·2d46·2065·7869··,renameat·-F·exi | ||
| 00000620:·7 | 00000620:·743d·2d45·4143·4345·5320·2d46·2061·7569··t=-EACCES·-F·aui | ||
| 00000630:·6 | 00000630:·643e·3d31·3030·3020·2d46·2061·7569·6421··d>=1000·-F·auid! | ||
| 00000640:· | 00000640:·3d75·6e73·6574·202d·4620·6b65·793d·756e··=unset·-F·key=un | ||
| 00000650:· | 00000650:·7375·6363·6573·7366·756c·2d64·656c·6574··successful-delet | ||
| 00000660:·6 | 00000660:·650a·2d61·2061·6c77·6179·732c·6578·6974··e.-a·always,exit | ||
| 00000670:· | 00000670:·202d·4620·6172·6368·3d62·3332·202d·5320···-F·arch=b32·-S· | ||
| 00000680:· | 00000680:·756e·6c69·6e6b·2c75·6e6c·696e·6b61·742c··unlink,unlinkat, | ||
| 00000690:· | 00000690:·7265·6e61·6d65·2c72·656e·616d·6561·7420··rename,renameat· | ||
| 000006a0:· | 000006a0:·2d46·2065·7869·743d·2d45·5045·524d·202d··-F·exit=-EPERM·- | ||
| 000006b0:· | 000006b0:·4620·6175·6964·3e3d·3130·3030·202d·4620··F·auid>=1000·-F· | ||
| 000006c0:·6 | 000006c0:·6175·6964·213d·756e·7365·7420·2d46·206b··auid!=unset·-F·k | ||
| 000006d0:· | 000006d0:·6579·3d75·6e73·7563·6365·7373·6675·6c2d··ey=unsuccessful- | ||
| 000006e0:·6 | 000006e0:·6465·6c65·7465·0a2d·6120·616c·7761·7973··delete.-a·always | ||
| 000006f0:· | 000006f0:·2c65·7869·7420·2d46·2061·7263·683d·6236··,exit·-F·arch=b6 | ||
| 00000700:· | 00000700:·3420·2d53·2075·6e6c·696e·6b61·742c·7265··4·-S·unlinkat,re | ||
| 00000710:· | 00000710:·6e61·6d65·6174·202d·4620·6578·6974·3d2d··nameat·-F·exit=- | ||
| 00000720:· | 00000720:·4550·4552·4d20·2d46·2061·7569·643e·3d31··EPERM·-F·auid>=1 | ||
| 00000730:· | 00000730:·3030·3020·2d46·2061·7569·6421·3d75·6e73··000·-F·auid!=uns | ||
| 00000740:· | 00000740:·6574·202d·4620·6b65·793d·756e·7375·6363··et·-F·key=unsucc | ||
| 00000750:·6 | 00000750:·6573·7366·756c·2d64·656c·6574·6520·2020··essful-delete··· | ||
| 00000760:· | 00000760:·203c·2f70·7265·3e0a·0a4c·6f61·6420·6e65···</pre>..Load·ne | ||
| 00000770:·7 | 00000770:·7720·4175·6469·7420·7275·6c65·7320·696e··w·Audit·rules·in | ||
| 00000780:· | 00000780:·746f·206b·6572·6e65·6c20·6279·2072·756e··to·kernel·by·run | ||
| 00000790:· | 00000790:·6e69·6e67·3a0a·3c70·7265·3e61·7567·656e··ning:.<pre>augen | ||
| 000007a0:· | 000007a0:·7275·6c65·7320·2d2d·6c6f·6164·3c2f·7072··rules·--load</pr | ||
| 000007b0:· | 000007b0:·653e·0a0a·4e6f·7465·3a20·5468·6973·2072··e>..Note:·This·r | ||
| 000007c0:·7 | 000007c0:·756c·6520·7573·6573·2061·2073·7065·6369··ule·uses·a·speci | ||
| 000007d0:· | 000007d0:·616c·2073·6574·206f·6620·4175·6469·7420··al·set·of·Audit· | ||
| 000007e0:· | 000007e0:·7275·6c65·7320·746f·2063·6f6d·706c·7920··rules·to·comply· | ||
| 000007f0:· | 000007f0:·7769·7468·204f·5350·5020·342e·322e·312e··with·OSPP·4.2.1. | ||
| 00000800:· | 00000800:·2059·6f75·206d·6179·2072·6575·7365·2074···You·may·reuse·t | ||
| 00000810:·6 | 00000810:·6869·7320·7275·6c65·2069·6e20·6469·6666··his·rule·in·diff | ||
| 00000820:·65 | 00000820:·6572·656e·7420·7072·6f66·696c·6573·2e20··erent·profiles.· | ||
| 00000830:· | 00000830:·4966·2079·6f75·2064·6563·6964·6520·746f··If·you·decide·to | ||
| 00000840:· | 00000840:·2064·6f20·736f·2c20·6974·2069·7320·7265···do·so,·it·is·re | ||
| 00000850:·6 | 00000850:·636f·6d6d·656e·6465·6420·7468·6174·2079··commended·that·y | ||
| 00000860:·6520· | 00000860:·6f75·2069·6e73·7065·6374·2063·6f6e·7465··ou·inspect·conte | ||
| 00000870:·6 | 00000870:·6e74·7320·6f66·2074·6865·2066·696c·6520··nts·of·the·file· | ||
| 00000880:·6 | 00000880:·636c·6f73·656c·7920·616e·6420·6d61·6b65··closely·and·make | ||
| 00000890:·20 | 00000890:·2073·7572·6520·7468·6174·2074·6865·7920···sure·that·they· | ||
| 000008a0:· | 000008a0:·6172·6520·616c·6c69·676e·6564·2077·6974··are·alligned·wit | ||
| 000008b0:· | 000008b0:·6820·796f·7572·206e·6565·6473·2e0a·2020··h·your·needs..·· | ||
| 000008c0:·20 | 000008c0:·2020·2020·3c2f·7464·3e0a·2020·2020·2020······</td>.······ | ||
| 000008d0:· | 000008d0:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | ||
| 000008e0:· | 000008e0:·2d55·5322·3e0a·2020·2020·2020·2020·556e··-US">.········Un | ||
| 000008f0:· | 000008f0:·7375·6363·6573·7366·756c·2061·7474·656d··successful·attem | ||
| 00000900:·7 | 00000900:·7074·7320·746f·2064·656c·6574·6520·6120··pts·to·delete·a· | ||
| 00000910:· | 00000910:·6669·6c65·206d·6967·6874·2062·6520·7369··file·might·be·si | ||
| 00000920:·6 | 00000920:·676e·7320·6f66·206d·616c·6963·696f·7573··gns·of·malicious | ||
| 00000930:· | 00000930:·2061·6374·6976·6974·6965·732e·2041·7564···activities.·Aud | ||
| 00000940:· | 00000940:·6974·696e·6720·6f66·2073·7563·6820·6576··iting·of·such·ev | ||
| 00000950:· | 00000950:·656e·7473·2068·656c·7020·696e·206d·6f6e··ents·help·in·mon | ||
| 00000960:· | 00000960:·6974·6f72·696e·6720·616e·6420·696e·7665··itoring·and·inve | ||
| 00000970:· | 00000970:·7374·6967·6174·696e·6720·6f66·2073·7563··stigating·of·suc | ||
| 00000980:· | 00000980:·6820·6163·7469·7669·7469·6573·2e0a·2020··h·activities..·· | ||
| 00000990:· | 00000990:·2020·2020·3c2f·7464·3e0a·2020·2020·3c2f······</td>.····</ | ||
| 000009a0:· | 000009a0:·7472·3e0a·2020·2020·3c74·723e·0a20·2020··tr>.····<tr>.··· | ||
| 000009b0:· | 000009b0:·2020·203c·7464·3e41·552d·3228·6429·3c62·····<td>AU-2(d)<b | ||
| 000009c0:· | 000009c0:·722f·3e41·552d·3132·2863·293c·6272·2f3e··r/>AU-12(c)<br/> | ||
| 000009d0:· | 000009d0:·434d·2d36·2861·293c·2f74·643e·0a20·2020··CM-6(a)</td>.··· | ||
| 000009e0:· | 000009e0:·2020·203c·7464·3e52·6563·6f72·6420·4576·····<td>Record·Ev | ||
| 000009f0:· | 000009f0:·656e·7473·2074·6861·7420·4d6f·6469·6679··ents·that·Modify | ||
| 00000a00:· | 00000a00:·2074·6865·2053·7973·7465·6d27·7320·4d61···the·System's·Ma | ||
| 00000a10:·6 | 00000a10:·6e64·6174·6f72·7920·4163·6365·7373·2043··ndatory·Access·C | ||
| 00000a20:·6 | 00000a20:·6f6e·7472·6f6c·7320·696e·2075·7372·2f73··ontrols·in·usr/s | ||
| 00000a30:·6 | 00000a30:·6861·7265·3c2f·7464·3e0a·2020·2020·2020··hare</td>.······ | ||
| 00000a40:· | 00000a40:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | ||
| 00000a50:· | 00000a50:·2d55·5322·3e0a·2020·2020·2020·2020·4966··-US">.········If | ||
| 00000a60:·20 | 00000a60:·2074·6865·203c·7474·3e61·7564·6974·643c···the·<tt>auditd< | ||
| 00000a70:·2 | 00000a70:·2f74·743e·2064·6165·6d6f·6e20·6973·2063··/tt>·daemon·is·c | ||
| 00000a80:· | 00000a80:·6f6e·6669·6775·7265·6420·746f·2075·7365··onfigured·to·use | ||
| 00000a90:· | 00000a90:·2074·6865·0a3c·7474·3e61·7567·656e·7275···the.<tt>augenru | ||
| 00000aa0:· | 00000aa0:·6c65·733c·2f74·743e·2070·726f·6772·616d··les</tt>·program | ||
| 00000ab0:·202 | 00000ab0:·2074·6f20·7265·6164·2061·7564·6974·2072···to·read·audit·r | ||
| 00000ac0:· | 00000ac0:·756c·6573·2064·7572·696e·6720·6461·656d··ules·during·daem | ||
| 00000ad0:· | 00000ad0:·6f6e·2073·7461·7274·7570·2028·7468·650a··on·startup·(the. | ||
| 00000ae0:· | 00000ae0:·6465·6661·756c·7429·2c20·6164·6420·7468··default),·add·th | ||
| 00000af0:·6 | 00000af0:·6520·666f·6c6c·6f77·696e·6720·6c69·6e65··e·following·line | ||
| 00000b00:·20 | 00000b00:·2074·6f20·6120·6669·6c65·2077·6974·6820···to·a·file·with· | ||
| 00000b10:· | 00000b10:·7375·6666·6978·203c·7474·3e2e·7275·6c65··suffix·<tt>.rule | ||
| 00000b20:· | 00000b20:·733c·2f74·743e·2069·6e20·7468·650a·6469··s</tt>·in·the.di | ||
| 00000b30:·7 | 00000b30:·7265·6374·6f72·7920·3c74·743e·2f65·7463··rectory·<tt>/etc | ||
| 00000b40:· | 00000b40:·2f61·7564·6974·2f72·756c·6573·2e64·3c2f··/audit/rules.d</ | ||
| 00000b50:· | 00000b50:·7474·3e3a·0a3c·7072·653e·2d77·202f·7573··tt>:.<pre>-w·/us | ||
| 00000b60:· | 00000b60:·722f·7368·6172·652f·7365·6c69·6e75·782f··r/share/selinux/ | ||
| 00000b70:· | 00000b70:·202d·7020·7761·202d·6b20·4d41·432d·706f···-p·wa·-k·MAC-po | ||
| 00000b80:·6c6 | 00000b80:·6c69·6379·3c2f·7072·653e·0a49·6620·7468··licy</pre>.If·th | ||
| 00000b90:· | 00000b90:·6520·3c74·743e·6175·6469·7464·3c2f·7474··e·<tt>auditd</tt | ||
| 00000ba0:· | 00000ba0:·3e20·6461·656d·6f6e·2069·7320·636f·6e66··>·daemon·is·conf | ||
| 00000bb0:·6 | 00000bb0:·6967·7572·6564·2074·6f20·7573·6520·7468··igured·to·use·th | ||
| Max diff block lines reached; 7060913/7514821 bytes (93.96%) of diff not shown. | |||
| Offset 73, 14 lines modified | Offset 73, 28 lines modified | ||
| 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all | 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all |
| 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an | 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 75 | anti-spoofing·measure. | 75 | anti-spoofing·measure. |
| 76 | ······</td> | 76 | ······</td> |
| 77 | ····</tr> | 77 | ····</tr> |
| 78 | ····<tr> | 78 | ····<tr> |
| 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> |
| 80 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 81 | ······<td·xml:lang="en-US"> | ||
| 82 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 83 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 84 | ······</td> | ||
| 85 | ······<td·xml:lang="en-US"> | ||
| 86 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 87 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 88 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 89 | the·network. | ||
| 90 | ······</td> | ||
| 91 | ····</tr> | ||
| 92 | ····<tr> | ||
| 93 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 80 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> | 94 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> |
| 81 | ······<td·xml:lang="en-US"> | 95 | ······<td·xml:lang="en-US"> |
| 82 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, | 96 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, |
| 83 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default | 97 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default |
| 84 | GRUB2·command·line·for·the·Linux·operating·system. | 98 | GRUB2·command·line·for·the·Linux·operating·system. |
| 85 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line | 99 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line |
| 86 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the | 100 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the |
| Offset 91, 28 lines modified | Offset 105, 14 lines modified | ||
| 91 | ······</td> | 105 | ······</td> |
| 92 | ······<td·xml:lang="en-US"> | 106 | ······<td·xml:lang="en-US"> |
| 93 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce | 107 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce |
| 94 | the·vulnerability·to·exploitation. | 108 | the·vulnerability·to·exploitation. |
| 95 | ······</td> | 109 | ······</td> |
| 96 | ····</tr> | 110 | ····</tr> |
| 97 | ····<tr> | 111 | ····<tr> |
| 98 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 99 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 100 | ······<td·xml:lang="en-US"> | ||
| 101 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 102 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 103 | ······</td> | ||
| 104 | ······<td·xml:lang="en-US"> | ||
| 105 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 106 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 107 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 108 | the·network. | ||
| 109 | ······</td> | ||
| 110 | ····</tr> | ||
| 111 | ····<tr> | ||
| 112 | ······<td>Req-1.3.3</td> | 112 | ······<td>Req-1.3.3</td> |
| 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> | 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> |
| 114 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless | 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless |
| 116 | capability. | 116 | capability. |
| 117 | <br·/><br·/> | 117 | <br·/><br·/> |
| Offset 127, 14 lines modified | Offset 127, 26 lines modified | ||
| 127 | attacker·to·monitor·and·record·network·traffic.·These·malicious·APs·can·also | 127 | attacker·to·monitor·and·record·network·traffic.·These·malicious·APs·can·also |
| 128 | serve·to·create·a·man-in-the-middle·attack·or·be·used·to·create·a·denial·of | 128 | serve·to·create·a·man-in-the-middle·attack·or·be·used·to·create·a·denial·of |
| 129 | service·to·valid·network·resources. | 129 | service·to·valid·network·resources. |
| 130 | ······</td> | 130 | ······</td> |
| 131 | ····</tr> | 131 | ····</tr> |
| 132 | ····<tr> | 132 | ····<tr> |
| 133 | ······<td>Req-1.4</td> | 133 | ······<td>Req-1.4</td> |
| 134 | ······<td>Ensure·firewall·rules·exist·for·all·open·ports</td> | ||
| 135 | ······<td·xml:lang="en-US"> | ||
| 136 | ········Any·ports·that·have·been·opened·on·non-loopback·addresses·need·firewall·rules·to·govern | ||
| 137 | traffic. | ||
| 138 | ······</td> | ||
| 139 | ······<td·xml:lang="en-US"> | ||
| 140 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | ||
| 141 | packets·to·these·ports. | ||
| 142 | ······</td> | ||
| 143 | ····</tr> | ||
| 144 | ····<tr> | ||
| 145 | ······<td>Req-1.4</td> | ||
| 134 | ······<td>Set·Default·firewalld·Zone·for·Incoming·Packets</td> | 146 | ······<td>Set·Default·firewalld·Zone·for·Incoming·Packets</td> |
| 135 | ······<td·xml:lang="en-US"> | 147 | ······<td·xml:lang="en-US"> |
| 136 | ········To·set·the·default·zone·to·<tt>drop</tt>·for | 148 | ········To·set·the·default·zone·to·<tt>drop</tt>·for |
| 137 | the·built-in·default·zone·which·processes·incoming·IPv4·and·IPv6·packets, | 149 | the·built-in·default·zone·which·processes·incoming·IPv4·and·IPv6·packets, |
| 138 | modify·the·following·line·in | 150 | modify·the·following·line·in |
| 139 | <tt>/etc/firewalld/firewalld.conf</tt>·to·be: | 151 | <tt>/etc/firewalld/firewalld.conf</tt>·to·be: |
| 140 | <pre>DefaultZone=drop</pre> | 152 | <pre>DefaultZone=drop</pre> |
| Offset 144, 26 lines modified | Offset 156, 14 lines modified | ||
| 144 | the·applicable·rules·in·the·table·are·examined·for·a·match.·Setting·the | 156 | the·applicable·rules·in·the·table·are·examined·for·a·match.·Setting·the |
| 145 | default·zone·to·<tt>drop</tt>·implements·proper·design·for·a·firewall,·i.e. | 157 | default·zone·to·<tt>drop</tt>·implements·proper·design·for·a·firewall,·i.e. |
| 146 | any·packets·which·are·not·explicitly·permitted·should·not·be | 158 | any·packets·which·are·not·explicitly·permitted·should·not·be |
| 147 | accepted. | 159 | accepted. |
| 148 | ······</td> | 160 | ······</td> |
| 149 | ····</tr> | 161 | ····</tr> |
| 150 | ····<tr> | 162 | ····<tr> |
| 151 | ······<td>Req-1.4</td> | ||
| 152 | ······<td>Ensure·firewall·rules·exist·for·all·open·ports</td> | ||
| 153 | ······<td·xml:lang="en-US"> | ||
| 154 | ········Any·ports·that·have·been·opened·on·non-loopback·addresses·need·firewall·rules·to·govern | ||
| 155 | traffic. | ||
| 156 | ······</td> | ||
| 157 | ······<td·xml:lang="en-US"> | ||
| 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | ||
| 159 | packets·to·these·ports. | ||
| 160 | ······</td> | ||
| 161 | ····</tr> | ||
| 162 | ····<tr> | ||
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | 164 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> |
| 165 | ······<td·xml:lang="en-US"> | 165 | ······<td·xml:lang="en-US"> |
| 166 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | 166 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> |
| 167 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> | 167 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> |
| 168 | ······</td> | 168 | ······</td> |
| 169 | ······<td·xml:lang="en-US"> | 169 | ······<td·xml:lang="en-US"> |
| Offset 173, 14 lines modified | Offset 173, 28 lines modified | ||
| 173 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | 173 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood |
| 174 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | 174 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and |
| 175 | enables·the·system·to·continue·servicing·valid·connection·requests. | 175 | enables·the·system·to·continue·servicing·valid·connection·requests. |
| 176 | ······</td> | 176 | ······</td> |
| 177 | ····</tr> | 177 | ····</tr> |
| 178 | ····<tr> | 178 | ····<tr> |
| 179 | ······<td>Req-1.4.1</td> | 179 | ······<td>Req-1.4.1</td> |
| 180 | ······<td>Install·iptables·Package</td> | ||
| 181 | ······<td·xml:lang="en-US"> | ||
| 182 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | ||
| 183 | <pre> | ||
| 184 | $·sudo·yum·install·iptables</pre> | ||
| 185 | ······</td> | ||
| 186 | ······<td·xml:lang="en-US"> | ||
| 187 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| Max diff block lines reached; 317540/323345 bytes (98.20%) of diff not shown. | |||
| Offset 34, 26 lines modified | Offset 34, 14 lines modified | ||
| 34 | ····················································································network·traffic | 34 | ····················································································network·traffic |
| 35 | ····················································································should·be·seen,·all | 35 | ····················································································should·be·seen,·all |
| 36 | ····················································································other·interfaces | 36 | ····················································································other·interfaces |
| 37 | ····················································································should·ignore | 37 | ····················································································should·ignore |
| 38 | ····················································································traffic·on·this | 38 | ····················································································traffic·on·this |
| 39 | ····················································································network·as·an·anti- | 39 | ····················································································network·as·an·anti- |
| 40 | ····················································································spoofing·measure. | 40 | ····················································································spoofing·measure. |
| 41 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 42 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 43 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 44 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 45 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 46 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 47 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 48 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 49 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 50 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 51 | ·····························already·installed·kernels: | ||
| 52 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 53 | ····················································································Routing·protocol | 41 | ····················································································Routing·protocol |
| 54 | ····················································································daemons·are | 42 | ····················································································daemons·are |
| 55 | ····················································································typically·used·on | 43 | ····················································································typically·used·on |
| 56 | ····················································································routers·to·exchange | 44 | ····················································································routers·to·exchange |
| 57 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology | 45 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology |
| 58 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with | 46 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with |
| 59 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If | 47 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If |
| Offset 61, 14 lines modified | Offset 49, 26 lines modified | ||
| 61 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not | 49 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not |
| 62 | ·····························sysctl.d:··············································required,·system | 50 | ·····························sysctl.d:··············································required,·system |
| 63 | ·····························net.ipv4.ip_forward·=·0································network·information | 51 | ·····························net.ipv4.ip_forward·=·0································network·information |
| 64 | ····················································································may·be | 52 | ····················································································may·be |
| 65 | ····················································································unnecessarily | 53 | ····················································································unnecessarily |
| 66 | ····················································································transmitted·across | 54 | ····················································································transmitted·across |
| 67 | ····················································································the·network. | 55 | ····················································································the·network. |
| 56 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 57 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 58 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 59 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 60 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 61 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 62 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 63 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 64 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 65 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 66 | ·····························already·installed·kernels: | ||
| 67 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 68 | ····················································································The·use·of·wireless | 68 | ····················································································The·use·of·wireless |
| 69 | ····················································································networking·can | 69 | ····················································································networking·can |
| 70 | ····················································································introduce·many | 70 | ····················································································introduce·many |
| 71 | ····················································································different·attack | 71 | ····················································································different·attack |
| 72 | ····················································································vectors·into·the | 72 | ····················································································vectors·into·the |
| 73 | ····················································································organization's | 73 | ····················································································organization's |
| 74 | ····················································································network.·Common | 74 | ····················································································network.·Common |
| Offset 90, 14 lines modified | Offset 90, 21 lines modified | ||
| 90 | ····················································································also·serve·to | 90 | ····················································································also·serve·to |
| 91 | ····················································································create·a·man-in- | 91 | ····················································································create·a·man-in- |
| 92 | ····················································································the-middle·attack | 92 | ····················································································the-middle·attack |
| 93 | ····················································································or·be·used·to | 93 | ····················································································or·be·used·to |
| 94 | ····················································································create·a·denial·of | 94 | ····················································································create·a·denial·of |
| 95 | ····················································································service·to·valid | 95 | ····················································································service·to·valid |
| 96 | ····················································································network·resources. | 96 | ····················································································network·resources. |
| 97 | ····················································································Without·a·firewall | ||
| 98 | ····················································································rule·configured·for | ||
| 99 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | ||
| 100 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | ||
| 101 | ·········open·ports·································································will·drop·all | ||
| 102 | ····················································································packets·to·these | ||
| 103 | ····················································································ports. | ||
| 97 | ····················································································In·firewalld·the | 104 | ····················································································In·firewalld·the |
| 98 | ····················································································default·zone·is | 105 | ····················································································default·zone·is |
| 99 | ····················································································applied·only·after | 106 | ····················································································applied·only·after |
| 100 | ····················································································all·the·applicable | 107 | ····················································································all·the·applicable |
| 101 | ····················································································rules·in·the·table | 108 | ····················································································rules·in·the·table |
| 102 | ·····························To·set·the·default·zone·to·drop·for·the·built-in·······are·examined·for·a | 109 | ·····························To·set·the·default·zone·to·drop·for·the·built-in·······are·examined·for·a |
| 103 | ·········Set·Default·········default·zone·which·processes·incoming·IPv4·and·IPv6····match.·Setting·the | 110 | ·········Set·Default·········default·zone·which·processes·incoming·IPv4·and·IPv6····match.·Setting·the |
| Offset 105, 21 lines modified | Offset 112, 14 lines modified | ||
| 105 | ·········Incoming·Packets····firewalld.conf·to·be:··································drop·implements | 112 | ·········Incoming·Packets····firewalld.conf·to·be:··································drop·implements |
| 106 | ·····························DefaultZone=drop·······································proper·design·for·a | 113 | ·····························DefaultZone=drop·······································proper·design·for·a |
| 107 | ····················································································firewall,·i.e.·any | 114 | ····················································································firewall,·i.e.·any |
| 108 | ····················································································packets·which·are | 115 | ····················································································packets·which·are |
| 109 | ····················································································not·explicitly | 116 | ····················································································not·explicitly |
| 110 | ····················································································permitted·should | 117 | ····················································································permitted·should |
| 111 | ····················································································not·be·accepted. | 118 | ····················································································not·be·accepted. |
| 112 | ····················································································Without·a·firewall | ||
| 113 | ····················································································rule·configured·for | ||
| 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | ||
| 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | ||
| 116 | ·········open·ports·································································will·drop·all | ||
| 117 | ····················································································packets·to·these | ||
| 118 | ····················································································ports. | ||
| 119 | ····················································································A·TCP·SYN·flood | 119 | ····················································································A·TCP·SYN·flood |
| 120 | ····················································································attack·can·cause·a | 120 | ····················································································attack·can·cause·a |
| 121 | ····················································································denial·of·service | 121 | ····················································································denial·of·service |
| 122 | ····················································································by·filling·a | 122 | ····················································································by·filling·a |
| 123 | ····················································································system's·TCP | 123 | ····················································································system's·TCP |
| 124 | ····················································································connection·table | 124 | ····················································································connection·table |
| 125 | ····················································································with·connections·in | 125 | ····················································································with·connections·in |
| Offset 138, 14 lines modified | Offset 138, 23 lines modified | ||
| 138 | ····················································································flood·condition·is | 138 | ····················································································flood·condition·is |
| 139 | ····················································································detected,·and | 139 | ····················································································detected,·and |
| 140 | ····················································································enables·the·system | 140 | ····················································································enables·the·system |
| 141 | ····················································································to·continue | 141 | ····················································································to·continue |
| 142 | ····················································································servicing·valid | 142 | ····················································································servicing·valid |
| 143 | ····················································································connection | 143 | ····················································································connection |
| 144 | ····················································································requests. | 144 | ····················································································requests. |
| 145 | ····················································································iptables·controls | ||
| 146 | ····················································································the·Linux·kernel | ||
| 147 | ····················································································network·packet | ||
| 148 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 149 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 150 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 151 | ····················································································set·up·firewalls | ||
| 152 | ····················································································and·IP | ||
| 153 | ····················································································masquerading,·etc. | ||
| 145 | ····················································································Loopback·traffic·is | 154 | ····················································································Loopback·traffic·is |
| 146 | ····················································································generated·between | 155 | ····················································································generated·between |
| 147 | ····················································································processes·on | 156 | ····················································································processes·on |
| 148 | ····················································································machine·and·is | 157 | ····················································································machine·and·is |
| 149 | ····················································································typically·critical | 158 | ····················································································typically·critical |
| 150 | ····················································································to·operation·of·the | 159 | ····················································································to·operation·of·the |
| 151 | ····················································································system.·The | 160 | ····················································································system.·The |
| Offset 155, 46 lines modified | Offset 164, 37 lines modified | ||
| 155 | ····················································································network·traffic | 164 | ····················································································network·traffic |
| 156 | ····················································································should·be·seen,·all | 165 | ····················································································should·be·seen,·all |
| 157 | ····················································································other·interfaces | 166 | ····················································································other·interfaces |
| 158 | ····················································································should·ignore | 167 | ····················································································should·ignore |
| 159 | ····················································································traffic·on·this | 168 | ····················································································traffic·on·this |
| Max diff block lines reached; 521614/533982 bytes (97.68%) of diff not shown. | |||
| Offset 65, 15615 lines modified | Offset 65, 15615 lines modified | ||
| 00000400:·3c2f·7468·3e0a·2020·2020·3c74·683e·5275··</th>.····<th>Ru | 00000400:·3c2f·7468·3e0a·2020·2020·3c74·683e·5275··</th>.····<th>Ru | ||
| 00000410:·6c65·2054·6974·6c65·3c2f·7468·3e0a·2020··le·Title</th>.·· | 00000410:·6c65·2054·6974·6c65·3c2f·7468·3e0a·2020··le·Title</th>.·· | ||
| 00000420:·2020·3c74·683e·4465·7363·7269·7074·696f····<th>Descriptio | 00000420:·2020·3c74·683e·4465·7363·7269·7074·696f····<th>Descriptio | ||
| 00000430:·6e3c·2f74·683e·0a20·2020·203c·7468·3e52··n</th>.····<th>R | 00000430:·6e3c·2f74·683e·0a20·2020·203c·7468·3e52··n</th>.····<th>R | ||
| 00000440:·6174·696f·6e61·6c65·3c2f·7468·3e0a·2020··ationale</th>.·· | 00000440:·6174·696f·6e61·6c65·3c2f·7468·3e0a·2020··ationale</th>.·· | ||
| 00000450:·3c2f·7468·6561·643e·0a20·203c·7462·6f64··</thead>.··<tbod | 00000450:·3c2f·7468·6561·643e·0a20·203c·7462·6f64··</thead>.··<tbod | Diff chunk too large, falling back to line-by-line diff (2797 lines added, 2797 lines removed) | |
| 00000460:·793e·0a20·203c·7472·3e0a·2020·2020·2020··y>.··<tr>.······ | 00000460:·793e·0a20·203c·7472·3e0a·2020·2020·2020··y>.··<tr>.······ | ||
| 00000470:·3c74·643e·4155·2d32·286 | 00000470:·3c74·643e·4155·2d32·2861·293c·2f74·643e··<td>AU-2(a)</td> | ||
| 00000480:· | 00000480:·0a20·2020·2020·203c·7464·3e43·6f6e·6669··.······<td>Confi | ||
| 00000490:· | 00000490:·6775·7265·2061·7564·6974·696e·6720·6f66··gure·auditing·of | ||
| 000004a0:· | 000004a0:·2075·6e73·7563·6365·7373·6675·6c20·6669···unsuccessful·fi | ||
| 000004b0:· | 000004b0:·6c65·2064·656c·6574·696f·6e73·2028·4141··le·deletions·(AA | ||
| 000004c0:·7 | 000004c0:·7263·6836·3429·3c2f·7464·3e0a·2020·2020··rch64)</td>.···· | ||
| 000004d0:· | 000004d0:·2020·3c74·6420·786d·6c3a·6c61·6e67·3d22····<td·xml:lang=" | ||
| 000004e0:·6 | 000004e0:·656e·2d55·5322·3e0a·2020·2020·2020·2020··en-US">.········ | ||
| 000004f0:· | 000004f0:·456e·7375·7265·2074·6861·7420·756e·7375··Ensure·that·unsu | ||
| 00000500:· | 00000500:·6363·6573·7366·756c·2061·7474·656d·7074··ccessful·attempt | ||
| 00000510:· | 00000510:·7320·746f·2064·656c·6574·6520·6120·6669··s·to·delete·a·fi | ||
| 00000520:· | 00000520:·6c65·2061·7265·2061·7564·6974·6564·2e0a··le·are·audited.. | ||
| 00000530:· | 00000530:·0a54·6865·2066·6f6c·6c6f·7769·6e67·2072··.The·following·r | ||
| 00000540:· | 00000540:·756c·6573·2063·6f6e·6669·6775·7265·2061··ules·configure·a | ||
| 00000550:·7 | 00000550:·7564·6974·2061·7320·6465·7363·7269·6265··udit·as·describe | ||
| 00000560:·6 | 00000560:·6420·6162·6f76·653a·0a3c·7072·653e·2323··d·above:.<pre>## | ||
| 00000570:· | 00000570:·2055·6e73·7563·6365·7373·6675·6c20·6669···Unsuccessful·fi | ||
| 00000580:· | 00000580:·6c65·2064·656c·6574·650a·2d61·2061·6c77··le·delete.-a·alw | ||
| 00000590:·6 | 00000590:·6179·732c·6578·6974·202d·4620·6172·6368··ays,exit·-F·arch | ||
| 000005a0:· | 000005a0:·3d62·3332·202d·5320·756e·6c69·6e6b·2c75··=b32·-S·unlink,u | ||
| 000005b0:·6 | 000005b0:·6e6c·696e·6b61·742c·7265·6e61·6d65·2c72··nlinkat,rename,r | ||
| 000005c0:·6 | 000005c0:·656e·616d·6561·7420·2d46·2065·7869·743d··enameat·-F·exit= | ||
| 000005d0:·2 | 000005d0:·2d45·4143·4345·5320·2d46·2061·7569·643e··-EACCES·-F·auid> | ||
| 000005e0:· | 000005e0:·3d31·3030·3020·2d46·2061·7569·6421·3d75··=1000·-F·auid!=u | ||
| 000005f0:· | 000005f0:·6e73·6574·202d·4620·6b65·793d·756e·7375··nset·-F·key=unsu | ||
| 00000600:·3 | 00000600:·6363·6573·7366·756c·2d64·656c·6574·650a··ccessful-delete. | ||
| 00000610:· | 00000610:·2d61·2061·6c77·6179·732c·6578·6974·202d··-a·always,exit·- | ||
| 00000620:· | 00000620:·4620·6172·6368·3d62·3634·202d·5320·756e··F·arch=b64·-S·un | ||
| 00000630:·6 | 00000630:·6c69·6e6b·6174·2c72·656e·616d·6561·7420··linkat,renameat· | ||
| 00000640:· | 00000640:·2d46·2065·7869·743d·2d45·4143·4345·5320··-F·exit=-EACCES· | ||
| 00000650:· | 00000650:·2d46·2061·7569·643e·3d31·3030·3020·2d46··-F·auid>=1000·-F | ||
| 00000660:· | 00000660:·2061·7569·6421·3d75·6e73·6574·202d·4620···auid!=unset·-F· | ||
| 00000670:· | 00000670:·6b65·793d·756e·7375·6363·6573·7366·756c··key=unsuccessful | ||
| 00000680:· | 00000680:·2d64·656c·6574·650a·2d61·2061·6c77·6179··-delete.-a·alway | ||
| 00000690:· | 00000690:·732c·6578·6974·202d·4620·6172·6368·3d62··s,exit·-F·arch=b | ||
| 000006a0:· | 000006a0:·3332·202d·5320·756e·6c69·6e6b·2c75·6e6c··32·-S·unlink,unl | ||
| 000006b0:· | 000006b0:·696e·6b61·742c·7265·6e61·6d65·2c72·656e··inkat,rename,ren | ||
| 000006c0:· | 000006c0:·616d·6561·7420·2d46·2065·7869·743d·2d45··ameat·-F·exit=-E | ||
| 000006d0:· | 000006d0:·5045·524d·202d·4620·6175·6964·3e3d·3130··PERM·-F·auid>=10 | ||
| 000006e0:·3 | 000006e0:·3030·202d·4620·6175·6964·213d·756e·7365··00·-F·auid!=unse | ||
| 000006f0:· | 000006f0:·7420·2d46·206b·6579·3d75·6e73·7563·6365··t·-F·key=unsucce | ||
| 00000700:·7 | 00000700:·7373·6675·6c2d·6465·6c65·7465·0a2d·6120··ssful-delete.-a· | ||
| 00000710:· | 00000710:·616c·7761·7973·2c65·7869·7420·2d46·2061··always,exit·-F·a | ||
| 00000720:· | 00000720:·7263·683d·6236·3420·2d53·2075·6e6c·696e··rch=b64·-S·unlin | ||
| 00000730:·6 | 00000730:·6b61·742c·7265·6e61·6d65·6174·202d·4620··kat,renameat·-F· | ||
| 00000740:· | 00000740:·6578·6974·3d2d·4550·4552·4d20·2d46·2061··exit=-EPERM·-F·a | ||
| 00000750:·7 | 00000750:·7569·643e·3d31·3030·3020·2d46·2061·7569··uid>=1000·-F·aui | ||
| 00000760:·6 | 00000760:·6421·3d75·6e73·6574·202d·4620·6b65·793d··d!=unset·-F·key= | ||
| 00000770:·7 | 00000770:·756e·7375·6363·6573·7366·756c·2d64·656c··unsuccessful-del | ||
| 00000780:·6 | 00000780:·6574·6520·2020·203c·2f70·7265·3e0a·0a4c··ete····</pre>..L | ||
| 00000790:·6 | 00000790:·6f61·6420·6e65·7720·4175·6469·7420·7275··oad·new·Audit·ru | ||
| 000007a0:·6 | 000007a0:·6c65·7320·696e·746f·206b·6572·6e65·6c20··les·into·kernel· | ||
| 000007b0:· | 000007b0:·6279·2072·756e·6e69·6e67·3a0a·3c70·7265··by·running:.<pre | ||
| 000007c0:· | 000007c0:·3e61·7567·656e·7275·6c65·7320·2d2d·6c6f··>augenrules·--lo | ||
| 000007d0:· | 000007d0:·6164·3c2f·7072·653e·0a0a·4e6f·7465·3a20··ad</pre>..Note:· | ||
| 000007e0:· | 000007e0:·5468·6973·2072·756c·6520·7573·6573·2061··This·rule·uses·a | ||
| 000007f0:·20 | 000007f0:·2073·7065·6369·616c·2073·6574·206f·6620···special·set·of· | ||
| 00000800:· | 00000800:·4175·6469·7420·7275·6c65·7320·746f·2063··Audit·rules·to·c | ||
| 00000810:·6 | 00000810:·6f6d·706c·7920·7769·7468·204f·5350·5020··omply·with·OSPP· | ||
| 00000820:· | 00000820:·342e·322e·312e·2059·6f75·206d·6179·2072··4.2.1.·You·may·r | ||
| 00000830:· | 00000830:·6575·7365·2074·6869·7320·7275·6c65·2069··euse·this·rule·i | ||
| 00000840:· | 00000840:·6e20·6469·6666·6572·656e·7420·7072·6f66··n·different·prof | ||
| 00000850:·6 | 00000850:·696c·6573·2e20·4966·2079·6f75·2064·6563··iles.·If·you·dec | ||
| 00000860:· | 00000860:·6964·6520·746f·2064·6f20·736f·2c20·6974··ide·to·do·so,·it | ||
| 00000870:· | 00000870:·2069·7320·7265·636f·6d6d·656e·6465·6420···is·recommended· | ||
| 00000880:· | 00000880:·7468·6174·2079·6f75·2069·6e73·7065·6374··that·you·inspect | ||
| 00000890:· | 00000890:·2063·6f6e·7465·6e74·7320·6f66·2074·6865···contents·of·the | ||
| 000008a0:· | 000008a0:·2066·696c·6520·636c·6f73·656c·7920·616e···file·closely·an | ||
| 000008b0:·6 | 000008b0:·6420·6d61·6b65·2073·7572·6520·7468·6174··d·make·sure·that | ||
| 000008c0:· | 000008c0:·2074·6865·7920·6172·6520·616c·6c69·676e···they·are·allign | ||
| 000008d0:·6 | 000008d0:·6564·2077·6974·6820·796f·7572·206e·6565··ed·with·your·nee | ||
| 000008e0:·6 | 000008e0:·6473·2e0a·2020·2020·2020·3c2f·7464·3e0a··ds..······</td>. | ||
| 000008f0:· | 000008f0:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | ||
| 00000900:·6 | 00000900:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | ||
| 00000910:· | 00000910:·2020·2020·556e·7375·6363·6573·7366·756c······Unsuccessful | ||
| 00000920:· | 00000920:·2061·7474·656d·7074·7320·746f·2064·656c···attempts·to·del | ||
| 00000930:·6 | 00000930:·6574·6520·6120·6669·6c65·206d·6967·6874··ete·a·file·might | ||
| 00000940:· | 00000940:·2062·6520·7369·676e·7320·6f66·206d·616c···be·signs·of·mal | ||
| 00000950:· | 00000950:·6963·696f·7573·2061·6374·6976·6974·6965··icious·activitie | ||
| 00000960:· | 00000960:·732e·2041·7564·6974·696e·6720·6f66·2073··s.·Auditing·of·s | ||
| 00000970:· | 00000970:·7563·6820·6576·656e·7473·2068·656c·7020··uch·events·help· | ||
| 00000980:·6 | 00000980:·696e·206d·6f6e·6974·6f72·696e·6720·616e··in·monitoring·an | ||
| 00000990:· | 00000990:·6420·696e·7665·7374·6967·6174·696e·6720··d·investigating· | ||
| 000009a0:·6 | 000009a0:·6f66·2073·7563·6820·6163·7469·7669·7469··of·such·activiti | ||
| 000009b0:· | 000009b0:·6573·2e0a·2020·2020·2020·3c2f·7464·3e0a··es..······</td>. | ||
| 000009c0:· | 000009c0:·2020·2020·3c2f·7472·3e0a·2020·2020·3c74······</tr>.····<t | ||
| 000009d0:· | 000009d0:·723e·0a20·2020·2020·203c·7464·3e41·552d··r>.······<td>AU- | ||
| 000009e0:· | 000009e0:·3228·6429·3c62·722f·3e41·552d·3132·2863··2(d)<br/>AU-12(c | ||
| 000009f0:· | 000009f0:·293c·6272·2f3e·434d·2d36·2861·293c·2f74··)<br/>CM-6(a)</t | ||
| 00000a00:·6 | 00000a00:·643e·0a20·2020·2020·203c·7464·3e52·6563··d>.······<td>Rec | ||
| 00000a10:· | 00000a10:·6f72·6420·4576·656e·7473·2074·6861·7420··ord·Events·that· | ||
| 00000a20:· | 00000a20:·4d6f·6469·6679·2074·6865·2053·7973·7465··Modify·the·Syste | ||
| 00000a30:· | 00000a30:·6d27·7320·4d61·6e64·6174·6f72·7920·4163··m's·Mandatory·Ac | ||
| 00000a40:· | 00000a40:·6365·7373·2043·6f6e·7472·6f6c·7320·696e··cess·Controls·in | ||
| 00000a50:· | 00000a50:·2075·7372·2f73·6861·7265·3c2f·7464·3e0a···usr/share</td>. | ||
| 00000a60:· | 00000a60:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | ||
| 00000a70:·672 | 00000a70:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | ||
| 00000a80:·20 | 00000a80:·2020·2020·4966·2074·6865·203c·7474·3e61······If·the·<tt>a | ||
| 00000a90:· | 00000a90:·7564·6974·643c·2f74·743e·2064·6165·6d6f··uditd</tt>·daemo | ||
| 00000aa0:· | 00000aa0:·6e20·6973·2063·6f6e·6669·6775·7265·6420··n·is·configured· | ||
| 00000ab0:· | 00000ab0:·746f·2075·7365·2074·6865·0a3c·7474·3e61··to·use·the.<tt>a | ||
| 00000ac0:· | 00000ac0:·7567·656e·7275·6c65·733c·2f74·743e·2070··ugenrules</tt>·p | ||
| 00000ad0:· | 00000ad0:·726f·6772·616d·2074·6f20·7265·6164·2061··rogram·to·read·a | ||
| 00000ae0:·7 | 00000ae0:·7564·6974·2072·756c·6573·2064·7572·696e··udit·rules·durin | ||
| 00000af0:·6 | 00000af0:·6720·6461·656d·6f6e·2073·7461·7274·7570··g·daemon·startup | ||
| 00000b00:·20 | 00000b00:·2028·7468·650a·6465·6661·756c·7429·2c20···(the.default),· | ||
| 00000b10:·61 | 00000b10:·6164·6420·7468·6520·666f·6c6c·6f77·696e··add·the·followin | ||
| 00000b20:· | 00000b20:·6720·6c69·6e65·2074·6f20·6120·6669·6c65··g·line·to·a·file | ||
| 00000b30:·20 | 00000b30:·2077·6974·6820·7375·6666·6978·203c·7474···with·suffix·<tt | ||
| 00000b40:· | 00000b40:·3e2e·7275·6c65·733c·2f74·743e·2069·6e20··>.rules</tt>·in· | ||
| 00000b50:· | 00000b50:·7468·650a·6469·7265·6374·6f72·7920·3c74··the.directory·<t | ||
| 00000b60:·7265·2 | 00000b60:·743e·2f65·7463·2f61·7564·6974·2f72·756c··t>/etc/audit/rul | ||
| 00000b70:· | 00000b70:·6573·2e64·3c2f·7474·3e3a·0a3c·7072·653e··es.d</tt>:.<pre> | ||
| 00000b80:· | 00000b80:·2d77·202f·7573·722f·7368·6172·652f·7365··-w·/usr/share/se | ||
| 00000b90:· | 00000b90:·6c69·6e75·782f·202d·7020·7761·202d·6b20··linux/·-p·wa·-k· | ||
| 00000ba0:· | 00000ba0:·4d41·432d·706f·6c69·6379·3c2f·7072·653e··MAC-policy</pre> | ||
| 00000bb0:· | 00000bb0:·0a49·6620·7468·6520·3c74·743e·6175·6469··.If·the·<tt>audi | ||
| 00000bc0:·7 | 00000bc0:·7464·3c2f·7474·3e20·6461·656d·6f6e·2069··td</tt>·daemon·i | ||
| 00000bd0:·7 | 00000bd0:·7320·636f·6e66·6967·7572·6564·2074·6f20··s·configured·to· | ||
| Max diff block lines reached; 7544674/7931238 bytes (95.13%) of diff not shown. | |||
| Offset 64, 274 lines modified | Offset 64, 274 lines modified | ||
| 000003f0:·3c74·683e·5275·6c65·2054·6974·6c65·3c2f··<th>Rule·Title</ | 000003f0:·3c74·683e·5275·6c65·2054·6974·6c65·3c2f··<th>Rule·Title</ | ||
| 00000400:·7468·3e0a·2020·2020·3c74·683e·4465·7363··th>.····<th>Desc | 00000400:·7468·3e0a·2020·2020·3c74·683e·4465·7363··th>.····<th>Desc | ||
| 00000410:·7269·7074·696f·6e3c·2f74·683e·0a20·2020··ription</th>.··· | 00000410:·7269·7074·696f·6e3c·2f74·683e·0a20·2020··ription</th>.··· | ||
| 00000420:·203c·7468·3e52·6174·696f·6e61·6c65·3c2f···<th>Rationale</ | 00000420:·203c·7468·3e52·6174·696f·6e61·6c65·3c2f···<th>Rationale</ | ||
| 00000430:·7468·3e0a·2020·3c2f·7468·6561·643e·0a20··th>.··</thead>.· | 00000430:·7468·3e0a·2020·3c2f·7468·6561·643e·0a20··th>.··</thead>.· | ||
| 00000440:·203c·7462·6f64·793e·0a20·203c·7472·3e0a···<tbody>.··<tr>. | 00000440:·203c·7462·6f64·793e·0a20·203c·7472·3e0a···<tbody>.··<tr>. | ||
| 00000450:·2020·2020·2020·3c74·643e·5231·3c2f·7464········<td>R1</td | 00000450:·2020·2020·2020·3c74·643e·5231·3c2f·7464········<td>R1</td | ||
| 00000460:·3e0a·2020·2020·2020·3c74·643e·5072·6566··>.······<td>Pref | |||
| 00000470:·6572·2074·6f20·7573·6520·6120·3634·2d62··er·to·use·a·64-b | |||
| 00000480:·6974·204f·7065·7261·7469·6e67·2053·7973··it·Operating·Sys | |||
| 00000490:·7465·6d20·7768·656e·2073·7570·706f·7274··tem·when·support | |||
| 000004a0:·6564·3c2f·7464·3e0a·2020·2020·2020·3c74··ed</td>.······<t | |||
| 000004b0:·6420·786d·6c3a·6c61·6e67·3d22·656e·2d55··d·xml:lang="en-U | |||
| 000004c0:·5322·3e0a·2020·2020·2020·2020·5072·6566··S">.········Pref | |||
| 000004d0:·6572·2069·6e73·7461·6c6c·6174·696f·6e20··er·installation· | |||
| 000004e0:·6f66·2036·342d·6269·7420·6f70·6572·6174··of·64-bit·operat | |||
| 000004f0:·696e·6720·7379·7374·656d·7320·7768·656e··ing·systems·when | |||
| 00000500:·2074·6865·2043·5055·2073·7570·706f·7274···the·CPU·support | |||
| 00000510:·7320·6974·2e0a·2020·2020·2020·3c2f·7464··s·it..······</td | |||
| 00000520:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | |||
| 00000530:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | |||
| 00000540:·2020·2020·2020·5573·6520·6f66·2061·2036········Use·of·a·6 | |||
| 00000550:·342d·6269·7420·6f70·6572·6174·696e·6720··4-bit·operating· | |||
| 00000560:·7379·7374·656d·206f·6666·6572·7320·6120··system·offers·a· | |||
| 00000570:·6665·7720·6164·7661·6e74·6167·6573·2c20··few·advantages,· | |||
| 00000580:·6c69·6b65·2061·206c·6172·6765·7220·6164··like·a·larger·ad | |||
| 00000590:·6472·6573·7320·7370·6163·6520·7261·6e67··dress·space·rang | |||
| 000005a0:·6520·666f·720a·4164·6472·6573·7320·5370··e·for.Address·Sp | |||
| 000005b0:·6163·6520·4c61·796f·7574·2052·616e·646f··ace·Layout·Rando | |||
| 000005c0:·6d69·7a61·7469·6f6e·2028·4153·4c52·2920··mization·(ASLR)· | |||
| 000005d0:·616e·6420·7379·7374·656d·6174·6963·2070··and·systematic·p | |||
| 000005e0:·7265·7365·6e63·6520·6f66·204e·6f20·6558··resence·of·No·eX | |||
| 000005f0:·6563·7574·6520·616e·6420·4578·6563·7574··ecute·and·Execut | |||
| 00000600:·6520·4469·7361·626c·6520·284e·582f·5844··e·Disable·(NX/XD | |||
| 00000610:·2920·7072·6f74·6563·7469·6f6e·2062·6974··)·protection·bit | |||
| 00000620:·732e·0a20·2020·2020·203c·2f74·643e·0a20··s..······</td>.· | |||
| 00000630:·2020·203c·2f74·723e·0a20·2020·203c·7472·····</tr>.····<tr | |||
| 00000640:·3e0a·2020·2020·2020·3c74·643e·5231·3c2f··>.······<td>R1</ | |||
| 00000 | 00000460:·3e0a·2020·2020·2020·3c74·643e·456e·7375··>.······<td>Ensu | ||
| 00000 | 00000470:·7265·2053·4d41·5020·6973·206e·6f74·2064··re·SMAP·is·not·d | ||
| 00000 | 00000480:·6973·6162·6c65·6420·6475·7269·6e67·2062··isabled·during·b | ||
| 00000 | 00000490:·6f6f·743c·2f74·643e·0a20·2020·2020·203c··oot</td>.······< | ||
| 00000 | 000004a0:·7464·2078·6d6c·3a6c·616e·673d·2265·6e2d··td·xml:lang="en- | ||
| 00000 | 000004b0:·5553·223e·0a20·2020·2020·2020·2054·6865··US">.········The | ||
| 00000 | 000004c0:·2053·4d41·5020·6973·2075·7365·6420·746f···SMAP·is·used·to | ||
| 00000 | 000004d0:·2070·7265·7665·6e74·2074·6865·2073·7570···prevent·the·sup | ||
| 00000 | 000004e0:·6572·7669·736f·7220·6d6f·6465·2066·726f··ervisor·mode·fro | ||
| 000006e0:·726f·6d20·6578·6563·7574·696e·6720·7573··rom·executing·us | |||
| 000006f0:·6572·2073·7061·6365·2063·6f64·652c·0a69··er·space·code,.i | |||
| 00000700:·7420·6973·2065·6e61·626c·6564·2062·7920··t·is·enabled·by· | |||
| 00000710:·6465·6661·756c·7420·7369·6e63·6520·4c69··default·since·Li | |||
| 00000720:·6e75·7820·6b65·726e·656c·2033·2e30·2e20··nux·kernel·3.0.· | |||
| 00000730:·4275·7420·6974·2063·6f75·6c64·2062·6520··But·it·could·be· | |||
| 00000740:·6469·7361·626c·6564·2074·6872·6f75·6768··disabled·through | |||
| 00000750:·0a6b·6572·6e65·6c20·626f·6f74·2070·6172··.kernel·boot·par | |||
| 00000760:·616d·6574·6572·732e·0a0a·456e·7375·7265··ameters...Ensure | |||
| 00000770:·2074·6861·7420·5375·7065·7276·6973·6f72···that·Supervisor | |||
| 00000780:·204d·6f64·6520·4578·6563·7574·696f·6e20···Mode·Execution· | |||
| 00000790:·5072·6576·656e·7469·6f6e·2028·534d·4550··Prevention·(SMEP | |||
| 000007a0:·2920·6973·206e·6f74·2064·6973·6162·6c65··)·is·not·disable | |||
| 000007b0:·6420·6279·0a74·6865·203c·7474·3e6e·6f73··d·by.the·<tt>nos | |||
| 000007c0:·6d65·703c·2f74·743e·2062·6f6f·7420·7061··mep</tt>·boot·pa | |||
| 000007d0:·7261·6d65·6e74·6572·206f·7074·696f·6e2e··ramenter·option. | |||
| 000007e0:·0a0a·4368·6563·6b20·7468·6174·2074·6865··..Check·that·the | |||
| 000007f0:·206c·696e·6520·3c70·7265·3e47·5255·425f···line·<pre>GRUB_ | |||
| 00000800:·434d·444c·494e·455f·4c49·4e55·583d·222e··CMDLINE_LINUX=". | |||
| 00000810:·2e2e·223c·2f70·7265·3e20·7769·7468·696e··.."</pre>·within | |||
| 00000820:·203c·7474·3e2f·6574·632f·6465·6661·756c···<tt>/etc/defaul | |||
| 00000830:·742f·6772·7562·3c2f·7474·3e0a·646f·6573··t/grub</tt>.does | |||
| 00000840:·6e27·7420·636f·6e74·6169·6e20·7468·6520··n't·contain·the· | |||
| 00000850:·6172·6775·6d65·6e74·203c·7474·3e6e·6f73··argument·<tt>nos | |||
| 00000860:·6d65·703c·2f74·743e·2e0a·5275·6e20·7468··mep</tt>..Run·th | |||
| 00000870:·6520·666f·6c6c·6f77·696e·6720·636f·6d6d··e·following·comm | |||
| 00000880:·616e·6420·746f·2075·7064·6174·6520·636f··and·to·update·co | |||
| 00000890:·6d6d·616e·6420·6c69·6e65·2066·6f72·2061··mmand·line·for·a | |||
| 000008a0:·6c72·6561·6479·2069·6e73·7461·6c6c·6564··lready·installed | |||
| 000008b0:·206b·6572·6e65·6c73·3a0a·3c70·7265·3e23···kernels:.<pre># | |||
| 000008c0:·2067·7275·6262·7920·2d2d·7570·6461·7465···grubby·--update | |||
| 000008d0:·2d6b·6572·6e65·6c3d·414c·4c20·2d2d·7265··-kernel=ALL·--re | |||
| 000008e0:·6d6f·7665·2d61·7267·733d·226e·6f73·6d65··move-args="nosme | |||
| 00000 | 000004f0:·6d20·756e·696e·7465·6e74·696f·6e61·6c6c··m·unintentionall | ||
| 00000500:·7920·7265·6164·696e·672f·7772·6974·696e··y·reading/writin | |||
| 00000510:·6720·696e·746f·0a6d·656d·6f72·7920·7061··g·into.memory·pa | |||
| 00000520:·6765·7320·696e·2074·6865·2075·7365·7220··ges·in·the·user· | |||
| 00000530:·7370·6163·652c·2069·7420·6973·2065·6e61··space,·it·is·ena | |||
| 00000540:·626c·6564·2062·7920·6465·6661·756c·7420··bled·by·default· | |||
| 00000550:·7369·6e63·6520·4c69·6e75·7820·6b65·726e··since·Linux·kern | |||
| 00000560:·656c·2033·2e37·2e0a·4275·7420·6974·2063··el·3.7..But·it·c | |||
| 00000570:·6f75·6c64·2062·6520·6469·7361·626c·6564··ould·be·disabled | |||
| 00000580:·2074·6872·6f75·6768·206b·6572·6e65·6c20···through·kernel· | |||
| 00000590:·626f·6f74·2070·6172·616d·6574·6572·732e··boot·parameters. | |||
| 000005a0:·0a0a·456e·7375·7265·2074·6861·7420·5375··..Ensure·that·Su | |||
| 000005b0:·7065·7276·6973·6f72·204d·6f64·6520·4163··pervisor·Mode·Ac | |||
| 000005c0:·6365·7373·2050·7265·7665·6e74·696f·6e20··cess·Prevention· | |||
| 000005d0:·2853·4d41·5029·2069·7320·6e6f·7420·6469··(SMAP)·is·not·di | |||
| 000005e0:·7361·626c·6564·2062·790a·7468·6520·3c74··sabled·by.the·<t | |||
| 000005f0:·743e·6e6f·736d·6170·3c2f·7474·3e20·626f··t>nosmap</tt>·bo | |||
| 00000600:·6f74·2070·6172·616d·656e·7465·7220·6f70··ot·paramenter·op | |||
| 00000610:·7469·6f6e·2e0a·0a43·6865·636b·2074·6861··tion...Check·tha | |||
| 00000620:·7420·7468·6520·6c69·6e65·203c·7072·653e··t·the·line·<pre> | |||
| 00000630:·4752·5542·5f43·4d44·4c49·4e45·5f4c·494e··GRUB_CMDLINE_LIN | |||
| 00000640:·5558·3d22·2e2e·2e22·3c2f·7072·653e·2077··UX="..."</pre>·w | |||
| 00000650:·6974·6869·6e20·3c74·743e·2f65·7463·2f64··ithin·<tt>/etc/d | |||
| 00000660:·6566·6175·6c74·2f67·7275·623c·2f74·743e··efault/grub</tt> | |||
| 00000670:·0a64·6f65·736e·2774·2063·6f6e·7461·696e··.doesn't·contain | |||
| 00000680:·2074·6865·2061·7267·756d·656e·7420·3c74···the·argument·<t | |||
| 00000690:·743e·6e6f·736d·6170·3c2f·7474·3e2e·0a52··t>nosmap</tt>..R | |||
| 000006a0:·756e·2074·6865·2066·6f6c·6c6f·7769·6e67··un·the·following | |||
| 000006b0:·2063·6f6d·6d61·6e64·2074·6f20·7570·6461···command·to·upda | |||
| 000006c0:·7465·2063·6f6d·6d61·6e64·206c·696e·6520··te·command·line· | |||
| 000006d0:·666f·7220·616c·7265·6164·7920·696e·7374··for·already·inst | |||
| 000006e0:·616c·6c65·6420·6b65·726e·656c·733a·0a3c··alled·kernels:.< | |||
| 000006f0:·7072·653e·2320·6772·7562·6279·202d·2d75··pre>#·grubby·--u | |||
| 00000700:·7064·6174·652d·6b65·726e·656c·3d41·4c4c··pdate-kernel=ALL | |||
| 00000710:·202d·2d72·656d·6f76·652d·6172·6773·3d22···--remove-args=" | |||
| 00000720:·6e6f·736d·6170·223c·2f70·7265·3e0a·2020··nosmap"</pre>.·· | |||
| 00000730:·2020·2020·3c2f·7464·3e0a·2020·2020·2020······</td>.······ | |||
| 00000740:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | |||
| 00000750:·2d55·5322·3e0a·2020·2020·2020·2020·4469··-US">.········Di | |||
| 00000760:·7361·626c·696e·6720·534d·4150·2063·616e··sabling·SMAP·can | |||
| 00000770:·2066·6163·696c·6974·6174·6520·6578·706c···facilitate·expl | |||
| 00000780:·6f69·7461·7469·6f6e·206f·6620·7675·6c6e··oitation·of·vuln | |||
| 00000790:·6572·6162·696c·6974·6965·7320·6361·7573··erabilities·caus | |||
| 000007a0:·6564·2062·7920·756e·696e·7465·6e64·6564··ed·by·unintended | |||
| 000007b0:·2061·6363·6573·7320·616e·640a·6d61·6e69···access·and.mani | |||
| 000007c0:·7075·6c61·7469·6f6e·206f·6620·6461·7461··pulation·of·data | |||
| 000007d0:·2069·6e20·7468·6520·7573·6572·2073·7061···in·the·user·spa | |||
| Max diff block lines reached; 3002915/3039369 bytes (98.80%) of diff not shown. | |||
| Offset 1, 44 lines modified | Offset 1, 13 lines modified | ||
| 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Red·Hat | 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Red·Hat |
| 2 | Enterprise·Linux·8 | 2 | Enterprise·Linux·8 |
| 3 | ···········································································Use·of·a·64-bit·operating·system | ||
| 4 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 5 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 6 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 7 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 8 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 9 | ···········································································bits. | ||
| 10 | ······························The·SMEP·is·used·to·prevent·the·supervisor | ||
| 11 | ······························mode·from·executing·user·space·code,·it·is | ||
| 12 | ······························enabled·by·default·since·Linux·kernel·3.0. | ||
| 13 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 14 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 15 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | ||
| 16 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | ||
| 17 | R1··disabled·during·boot······that·the·line································vulnerabilities·because·it·allows·the | ||
| 18 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | ||
| 19 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | ||
| 20 | ······························argument·nosmep.·Run·the·following·command | ||
| 21 | ······························to·update·command·line·for·already·installed | ||
| 22 | ······························kernels: | ||
| 23 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 24 | ······························args="nosmep" | ||
| 25 | ···········································································Use·of·weak·or·untested·encryption | ||
| 26 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 27 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 28 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 29 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 30 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 31 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 32 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 33 | ···········································································validated. | ||
| 34 | ······························The·SMAP·is·used·to·prevent·the·supervisor | 3 | ······························The·SMAP·is·used·to·prevent·the·supervisor |
| 35 | ······························mode·from·unintentionally·reading/writing | 4 | ······························mode·from·unintentionally·reading/writing |
| 36 | ······························into·memory·pages·in·the·user·space,·it·is | 5 | ······························into·memory·pages·in·the·user·space,·it·is |
| 37 | ······························enabled·by·default·since·Linux·kernel·3.7. | 6 | ······························enabled·by·default·since·Linux·kernel·3.7. |
| 38 | ······························But·it·could·be·disabled·through·kernel·boot | 7 | ······························But·it·could·be·disabled·through·kernel·boot |
| 39 | ······························parameters.·Ensure·that·Supervisor·Mode | 8 | ······························parameters.·Ensure·that·Supervisor·Mode |
| 40 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | 9 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate |
| Offset 47, 14 lines modified | Offset 16, 29 lines modified | ||
| 47 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | 16 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. |
| 48 | ······························within·/etc/default/grub·doesn't·contain·the | 17 | ······························within·/etc/default/grub·doesn't·contain·the |
| 49 | ······························argument·nosmap.·Run·the·following·command | 18 | ······························argument·nosmap.·Run·the·following·command |
| 50 | ······························to·update·command·line·for·already·installed | 19 | ······························to·update·command·line·for·already·installed |
| 51 | ······························kernels: | 20 | ······························kernels: |
| 52 | ······························#·grubby·--update-kernel=ALL·--remove- | 21 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 53 | ······························args="nosmap" | 22 | ······························args="nosmap" |
| 23 | ······························The·SMEP·is·used·to·prevent·the·supervisor | ||
| 24 | ······························mode·from·executing·user·space·code,·it·is | ||
| 25 | ······························enabled·by·default·since·Linux·kernel·3.0. | ||
| 26 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 27 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 28 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | ||
| 29 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | ||
| 30 | R1··disabled·during·boot······that·the·line································vulnerabilities·because·it·allows·the | ||
| 31 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | ||
| 32 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | ||
| 33 | ······························argument·nosmep.·Run·the·following·command | ||
| 34 | ······························to·update·command·line·for·already·installed | ||
| 35 | ······························kernels: | ||
| 36 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 37 | ······························args="nosmep" | ||
| 54 | ······························Systems·that·are·using·the·64-bit·x86·kernel | 38 | ······························Systems·that·are·using·the·64-bit·x86·kernel |
| 55 | ······························package·do·not·need·to·install·the·kernel- | 39 | ······························package·do·not·need·to·install·the·kernel- |
| 56 | ······························PAE·package·because·the·64-bit·x86·kernel | 40 | ······························PAE·package·because·the·64-bit·x86·kernel |
| 57 | ······························already·includes·this·support.·However,·if | 41 | ······························already·includes·this·support.·However,·if |
| 58 | ······························the·system·is·32-bit·and·also·supports·the | 42 | ······························the·system·is·32-bit·and·also·supports·the |
| 59 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD | 43 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD |
| 60 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE | 44 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE |
| Offset 62, 14 lines modified | Offset 46, 30 lines modified | ||
| 62 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute | 46 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute |
| 63 | ······························installed·with·the·following·command:········(NX)·support. | 47 | ······························installed·with·the·following·command:········(NX)·support. |
| 64 | ······························$·sudo·yum·install·kernel-PAE | 48 | ······························$·sudo·yum·install·kernel-PAE |
| 65 | ······························The·installation·process·should·also·have | 49 | ······························The·installation·process·should·also·have |
| 66 | ······························configured·the·bootloader·to·load·the·new | 50 | ······························configured·the·bootloader·to·load·the·new |
| 67 | ······························kernel·at·boot.·Verify·this·after·reboot·and | 51 | ······························kernel·at·boot.·Verify·this·after·reboot·and |
| 68 | ······························modify·/etc/default/grub·if·necessary. | 52 | ······························modify·/etc/default/grub·if·necessary. |
| 53 | ···········································································Use·of·a·64-bit·operating·system | ||
| 54 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 55 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 56 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 57 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 58 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 59 | ···········································································bits. | ||
| 60 | ···········································································Use·of·weak·or·untested·encryption | ||
| 61 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 62 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 63 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 64 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 65 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 66 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 67 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 68 | ···········································································validated. | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·the·UEFI·Boot·Loader··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter | 73 | ····Set·the·UEFI·Boot·Loader··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5··Password··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These | 74 | R5··Password··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| Offset 99, 171 lines modified | Offset 99, 27 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ······························To·set·the·runtime·status·of·the·············The·vm.mmap_min_addr·parameter | ||
| 107 | ······························vm.mmap_min_addr·kernel·parameter,·run·the···specifies·the·minimum·virtual·address | ||
| 108 | ····Prevent·applications·from·following·command:···························that·a·process·is·allowed·to·mmap. | ||
| 109 | R8··mapping·low·portion·of····$·sudo·sysctl·-w·vm.mmap_min_addr=65536······Allowing·a·process·to·mmap·low·portion | ||
| 110 | ····virtual·memory············To·make·sure·that·the·setting·is·persistent,·of·virtual·memory·can·have·security | ||
| 111 | ······························add·the·following·line·to·a·file·in·the······implications·such·as·such·as | ||
| 112 | ······························directory·/etc/sysctl.d:·····················heightened·risk·of·kernel·null·pointer | ||
| 113 | ······························vm.mmap_min_addr·=·65536·····················dereference·defects. | ||
| 114 | ···········································································The·CONFIG_SHUFFLE_PAGE_ALLOCATOR | ||
| 115 | ······························To·enable·randomization·of·the·page··········config·option·is·primarily·focused·on | ||
| 116 | ······························allocator·in·the·kernel,·add·the·············improving·the·average·utilization·of·a | ||
| 117 | ······························page_alloc.shuffle=1·argument·to·the·default·direct-mapped·memory-side-cache.·Aside | ||
| 118 | ······························GRUB·2·command·line.·To·ensure·that··········of·this·performance·effect,·it·also | ||
| 119 | ······························page_alloc.shuffle=1·is·added·as·a·kernel····reduces·predictability·of·page | ||
| Max diff block lines reached; 681460/699462 bytes (97.43%) of diff not shown. | |||
| Offset 1844, 463 lines modified | Offset 1844, 463 lines modified | ||
| 00007330:·2075·7365·2c0a·616e·6420·7768·6574·6865···use,.and·whethe | 00007330:·2075·7365·2c0a·616e·6420·7768·6574·6865···use,.and·whethe | ||
| 00007340:·7220·746f·2065·6e74·6572·2073·696e·676c··r·to·enter·singl | 00007340:·7220·746f·2065·6e74·6572·2073·696e·676c··r·to·enter·singl | ||
| 00007350:·652d·7573·6572·206d·6f64·652e·0a20·2020··e-user·mode..··· | 00007350:·652d·7573·6572·206d·6f64·652e·0a20·2020··e-user·mode..··· | ||
| 00007360:·2020·203c·2f74·643e·0a20·2020·203c·2f74·····</td>.····</t | 00007360:·2020·203c·2f74·643e·0a20·2020·203c·2f74·····</td>.····</t | ||
| 00007370:·723e·0a20·2020·203c·7472·3e0a·2020·2020··r>.····<tr>.···· | 00007370:·723e·0a20·2020·203c·7472·3e0a·2020·2020··r>.····<tr>.···· | ||
| 00007380:·2020·3c74·643e·312e·332e·323c·2f74·643e····<td>1.3.2</td> | 00007380:·2020·3c74·643e·312e·332e·323c·2f74·643e····<td>1.3.2</td> | Diff chunk too large, falling back to line-by-line diff (449 lines added, 449 lines removed) | |
| 00007390:·0a20·2020·2020·203c·7464·3e56·6572·6966··.······<td>Verif | 00007390:·0a20·2020·2020·203c·7464·3e56·6572·6966··.······<td>Verif | ||
| 000073a0:·7920· | 000073a0:·7920·2f62·6f6f·742f·6772·7562·322f·6772··y·/boot/grub2/gr | ||
| 000073b0:· | 000073b0:·7562·2e63·6667·2050·6572·6d69·7373·696f··ub.cfg·Permissio | ||
| 000073c0:· | 000073c0:·6e73·3c2f·7464·3e0a·2020·2020·2020·3c74··ns</td>.······<t | ||
| 000073d0:· | 000073d0:·6420·786d·6c3a·6c61·6e67·3d22·656e·2d55··d·xml:lang="en-U | ||
| 000073e0:· | 000073e0:·5322·3e0a·2020·2020·2020·2020·4669·6c65··S">.········File | ||
| 000073f0:· | 000073f0:·2070·6572·6d69·7373·696f·6e73·2066·6f72···permissions·for | ||
| 00007400:· | 00007400:·203c·7474·3e2f·626f·6f74·2f67·7275·6232···<tt>/boot/grub2 | ||
| 00007410:· | 00007410:·2f67·7275·622e·6366·673c·2f74·743e·2073··/grub.cfg</tt>·s | ||
| 00007420:·6 | 00007420:·686f·756c·6420·6265·2073·6574·2074·6f20··hould·be·set·to· | ||
| 00007430:·6 | 00007430:·3630·302e·0a0a·546f·2070·726f·7065·726c··600...To·properl | ||
| 00007440:·7920·7 | 00007440:·7920·7365·7420·7468·6520·7065·726d·6973··y·set·the·permis | ||
| 00007450:·7 | 00007450:·7369·6f6e·7320·6f66·203c·636f·6465·3e2f··sions·of·<code>/ | ||
| 00007460:· | 00007460:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | ||
| 00007470:· | 00007470:·6366·673c·2f63·6f64·653e·2c20·7275·6e20··cfg</code>,·run· | ||
| 00007480:· | 00007480:·7468·6520·636f·6d6d·616e·643a·0a3c·7072··the·command:.<pr | ||
| 00007490:·6 | 00007490:·653e·2420·7375·646f·2063·686d·6f64·2036··e>$·sudo·chmod·6 | ||
| 000074a0:· | 000074a0:·3030·202f·626f·6f74·2f67·7275·6232·2f67··00·/boot/grub2/g | ||
| 000074b0:· | 000074b0:·7275·622e·6366·673c·2f70·7265·3e0a·2020··rub.cfg</pre>.·· | ||
| 000074c0:· | 000074c0:·2020·2020·3c2f·7464·3e0a·2020·2020·2020······</td>.······ | ||
| 000074d0:· | 000074d0:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | ||
| 000074e0:· | 000074e0:·2d55·5322·3e0a·2020·2020·2020·2020·5072··-US">.········Pr | ||
| 000074f0:· | 000074f0:·6f70·6572·2070·6572·6d69·7373·696f·6e73··oper·permissions | ||
| 00007500:·20 | 00007500:·2065·6e73·7572·6520·7468·6174·206f·6e6c···ensure·that·onl | ||
| 00007510:· | 00007510:·7920·7468·6520·726f·6f74·2075·7365·7220··y·the·root·user· | ||
| 00007520:·636 | 00007520:·6361·6e20·6d6f·6469·6679·2069·6d70·6f72··can·modify·impor | ||
| 00007530:· | 00007530:·7461·6e74·2062·6f6f·740a·7061·7261·6d65··tant·boot.parame | ||
| 00007540:·7 | 00007540:·7465·7273·2e0a·2020·2020·2020·3c2f·7464··ters..······</td | ||
| 00007550:·3e0a·2020·2020· | 00007550:·3e0a·2020·2020·3c2f·7472·3e0a·2020·2020··>.····</tr>.···· | ||
| 00007560:· | 00007560:·3c74·723e·0a20·2020·2020·203c·7464·3e31··<tr>.······<td>1 | ||
| 00007570:· | 00007570:·2e33·2e32·3c2f·7464·3e0a·2020·2020·2020··.3.2</td>.······ | ||
| 00007580:· | 00007580:·3c74·643e·5665·7269·6679·2074·6865·2055··<td>Verify·the·U | ||
| 00007590:·4 | 00007590:·4546·4920·426f·6f74·204c·6f61·6465·7220··EFI·Boot·Loader· | ||
| 000075a0:· | 000075a0:·6772·7562·2e63·6667·2050·6572·6d69·7373··grub.cfg·Permiss | ||
| 000075b0:· | 000075b0:·696f·6e73·3c2f·7464·3e0a·2020·2020·2020··ions</td>.······ | ||
| 000075c0:· | 000075c0:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | ||
| 000075d0:· | 000075d0:·2d55·5322·3e0a·2020·2020·2020·2020·4669··-US">.········Fi | ||
| 000075e0:·6 | 000075e0:·6c65·2070·6572·6d69·7373·696f·6e73·2066··le·permissions·f | ||
| 000075f0:· | 000075f0:·6f72·203c·7474·3e2f·626f·6f74·2f65·6669··or·<tt>/boot/efi | ||
| 00007600:·2 | 00007600:·2f45·4649·2f72·6564·6861·742f·6772·7562··/EFI/redhat/grub | ||
| 00007610:· | 00007610:·2e63·6667·3c2f·7474·3e20·7368·6f75·6c64··.cfg</tt>·should | ||
| 00007620:·20 | 00007620:·2062·6520·7365·7420·746f·2037·3030·2e0a···be·set·to·700.. | ||
| 00007630:· | 00007630:·0a54·6f20·7072·6f70·6572·6c79·2073·6574··.To·properly·set | ||
| 00007640:· | 00007640:·2074·6865·2070·6572·6d69·7373·696f·6e73···the·permissions | ||
| 00007650:· | 00007650:·206f·6620·3c63·6f64·653e·2f62·6f6f·742f···of·<code>/boot/ | ||
| 00007660:· | 00007660:·6566·692f·4546·492f·7265·6468·6174·2f67··efi/EFI/redhat/g | ||
| 00007670:· | 00007670:·7275·622e·6366·673c·2f63·6f64·653e·2c20··rub.cfg</code>,· | ||
| 00007680:· | 00007680:·7275·6e20·7468·6520·636f·6d6d·616e·643a··run·the·command: | ||
| 00007690:· | 00007690:·0a3c·7072·653e·2420·7375·646f·2063·686d··.<pre>$·sudo·chm | ||
| 000076a0:· | 000076a0:·6f64·2037·3030·202f·626f·6f74·2f65·6669··od·700·/boot/efi | ||
| 000076b0:·2 | 000076b0:·2f45·4649·2f72·6564·6861·742f·6772·7562··/EFI/redhat/grub | ||
| 000076c0:· | 000076c0:·2e63·6667·3c2f·7072·653e·0a20·2020·2020··.cfg</pre>.····· | ||
| 000076d0:·20 | 000076d0:·203c·2f74·643e·0a20·2020·2020·203c·7464···</td>.······<td | ||
| 000076e0:·20 | 000076e0:·2078·6d6c·3a6c·616e·673d·2265·6e2d·5553···xml:lang="en-US | ||
| 000076f0:· | 000076f0:·223e·0a20·2020·2020·2020·2050·726f·7065··">.········Prope | ||
| 00007700:· | 00007700:·7220·7065·726d·6973·7369·6f6e·7320·656e··r·permissions·en | ||
| 00007710:· | 00007710:·7375·7265·2074·6861·7420·6f6e·6c79·2074··sure·that·only·t | ||
| 00007720:· | 00007720:·6865·2072·6f6f·7420·7573·6572·2063·616e··he·root·user·can | ||
| 00007730:· | 00007730:·206d·6f64·6966·7920·696d·706f·7274·616e···modify·importan | ||
| 00007740:· | 00007740:·7420·626f·6f74·0a70·6172·616d·6574·6572··t·boot.parameter | ||
| 00007750:· | 00007750:·732e·0a20·2020·2020·203c·2f74·643e·0a20··s..······</td>.· | ||
| 00007760:· | 00007760:·2020·203c·2f74·723e·0a20·2020·203c·7472·····</tr>.····<tr | ||
| 00007770:· | 00007770:·3e0a·2020·2020·2020·3c74·643e·312e·332e··>.······<td>1.3. | ||
| 00007780:· | 00007780:·323c·2f74·643e·0a20·2020·2020·203c·7464··2</td>.······<td | ||
| 00007790:· | 00007790:·3e56·6572·6966·7920·2f62·6f6f·742f·6772··>Verify·/boot/gr | ||
| 000077a0:· | 000077a0:·7562·322f·7573·6572·2e63·6667·2050·6572··ub2/user.cfg·Per | ||
| 000077b0:·6 | 000077b0:·6d69·7373·696f·6e73·3c2f·7464·3e0a·2020··missions</td>.·· | ||
| 000077c0:· | 000077c0:·2020·2020·3c74·6420·786d·6c3a·6c61·6e67······<td·xml:lang | ||
| 000077d0:· | 000077d0:·3d22·656e·2d55·5322·3e0a·2020·2020·2020··="en-US">.······ | ||
| 000077e0:·20 | 000077e0:·2020·4669·6c65·2070·6572·6d69·7373·696f····File·permissio | ||
| 000077f0:· | 000077f0:·6e73·2066·6f72·203c·7474·3e2f·626f·6f74··ns·for·<tt>/boot | ||
| 00007800:·2f | 00007800:·2f67·7275·6232·2f75·7365·722e·6366·673c··/grub2/user.cfg< | ||
| 00007810:· | 00007810:·2f74·743e·2073·686f·756c·6420·6265·2073··/tt>·should·be·s | ||
| 00007820:·6 | 00007820:·6574·2074·6f20·3630·302e·0a0a·546f·2070··et·to·600...To·p | ||
| 00007830:· | 00007830:·726f·7065·726c·7920·7365·7420·7468·6520··roperly·set·the· | ||
| 00007840:·6 | 00007840:·7065·726d·6973·7369·6f6e·7320·6f66·203c··permissions·of·< | ||
| 00007850:·6 | 00007850:·636f·6465·3e2f·626f·6f74·2f67·7275·6232··code>/boot/grub2 | ||
| 00007860:· | 00007860:·2f75·7365·722e·6366·673c·2f63·6f64·653e··/user.cfg</code> | ||
| 00007870:· | 00007870:·2c20·7275·6e20·7468·6520·636f·6d6d·616e··,·run·the·comman | ||
| 00007880:·6 | 00007880:·643a·0a3c·7072·653e·2420·7375·646f·2063··d:.<pre>$·sudo·c | ||
| 00007890:· | 00007890:·686d·6f64·2036·3030·202f·626f·6f74·2f67··hmod·600·/boot/g | ||
| 000078a0:· | 000078a0:·7275·6232·2f75·7365·722e·6366·673c·2f70··rub2/user.cfg</p | ||
| 000078b0:· | 000078b0:·7265·3e0a·2020·2020·2020·3c2f·7464·3e0a··re>.······</td>. | ||
| 000078c0:·20 | 000078c0:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | ||
| 000078d0:· | 000078d0:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | ||
| 000078e0:· | 000078e0:·2020·2020·5072·6f70·6572·2070·6572·6d69······Proper·permi | ||
| 000078f0:·7 | 000078f0:·7373·696f·6e73·2065·6e73·7572·6520·7468··ssions·ensure·th | ||
| 00007900:·6 | 00007900:·6174·206f·6e6c·7920·7468·6520·726f·6f74··at·only·the·root | ||
| 00007910:·7 | 00007910:·2075·7365·7220·6361·6e20·7265·6164·206f···user·can·read·o | ||
| 00007920:· | 00007920:·7220·6d6f·6469·6679·2069·6d70·6f72·7461··r·modify·importa | ||
| 00007930:·6 | 00007930:·6e74·2062·6f6f·740a·7061·7261·6d65·7465··nt·boot.paramete | ||
| 00007940:· | 00007940:·7273·2e0a·2020·2020·2020·3c2f·7464·3e0a··rs..······</td>. | ||
| 00007950:· | 00007950:·2020·2020·3c2f·7472·3e0a·2020·2020·3c74······</tr>.····<t | ||
| 00007960:· | 00007960:·723e·0a20·2020·2020·203c·7464·3e31·2e33··r>.······<td>1.3 | ||
| 00007970:· | 00007970:·2e32·3c2f·7464·3e0a·2020·2020·2020·3c74··.2</td>.······<t | ||
| 00007980:· | 00007980:·643e·5665·7269·6679·202f·626f·6f74·2f67··d>Verify·/boot/g | ||
| 00007990:· | 00007990:·7275·6232·2f67·7275·622e·6366·6720·5573··rub2/grub.cfg·Us | ||
| 000079a0:· | 000079a0:·6572·204f·776e·6572·7368·6970·3c2f·7464··er·Ownership</td | ||
| 000079b0:· | 000079b0:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | ||
| 000079c0:· | 000079c0:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | ||
| 000079d0:· | 000079d0:·2020·2020·2020·5468·6520·6669·6c65·203c········The·file·< | ||
| 000079e0:· | 000079e0:·7474·3e2f·626f·6f74·2f67·7275·6232·2f67··tt>/boot/grub2/g | ||
| 000079f0:· | 000079f0:·7275·622e·6366·673c·2f74·743e·2073·686f··rub.cfg</tt>·sho | ||
| 00007a00:· | 00007a00:·756c·640a·6265·206f·776e·6564·2062·7920··uld.be·owned·by· | ||
| 00007a10:· | 00007a10:·7468·6520·3c74·743e·726f·6f74·3c2f·7474··the·<tt>root</tt | ||
| 00007a20:· | 00007a20:·3e20·7573·6572·2074·6f20·7072·6576·656e··>·user·to·preven | ||
| 00007a30:· | 00007a30:·7420·6465·7374·7275·6374·696f·6e0a·6f72··t·destruction.or | ||
| 00007a40:· | 00007a40:·206d·6f64·6966·6963·6174·696f·6e20·6f66···modification·of | ||
| 00007a50:· | 00007a50:·2074·6865·2066·696c·652e·0a0a·546f·2070···the·file...To·p | ||
| 00007a60:·7 | 00007a60:·726f·7065·726c·7920·7365·7420·7468·6520··roperly·set·the· | ||
| 00007a70:· | 00007a70:·6f77·6e65·7220·6f66·203c·636f·6465·3e2f··owner·of·<code>/ | ||
| 00007a80:· | 00007a80:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | ||
| 00007a90:· | 00007a90:·6366·673c·2f63·6f64·653e·2c20·7275·6e20··cfg</code>,·run· | ||
| 00007aa0:· | 00007aa0:·7468·6520·636f·6d6d·616e·643a·0a3c·7072··the·command:.<pr | ||
| 00007ab0:·6 | 00007ab0:·653e·2420·7375·646f·2063·686f·776e·2072··e>$·sudo·chown·r | ||
| 00007ac0:·6 | 00007ac0:·6f6f·7420·2f62·6f6f·742f·6772·7562·322f··oot·/boot/grub2/ | ||
| 00007ad0:·7 | 00007ad0:·6772·7562·2e63·6667·203c·2f70·7265·3e0a··grub.cfg·</pre>. | ||
| 00007ae0:· | 00007ae0:·2020·2020·2020·3c2f·7464·3e0a·2020·2020········</td>.···· | ||
| 00007af0:· | 00007af0:·2020·3c74·6420·786d·6c3a·6c61·6e67·3d22····<td·xml:lang=" | ||
| 00007b00:·6 | 00007b00:·656e·2d55·5322·3e0a·2020·2020·2020·2020··en-US">.········ | ||
| Max diff block lines reached; 1088648/1151188 bytes (94.57%) of diff not shown. | |||
| Offset 461, 112 lines modified | Offset 461, 112 lines modified | ||
| 461 | 1.3.1·············Set·Boot·Loader·····Since·plaintext·passwords·are·a·security·risk,·········cannot·trivially | 461 | 1.3.1·············Set·Boot·Loader·····Since·plaintext·passwords·are·a·security·risk,·········cannot·trivially |
| 462 | ··················Password·in·grub2···generate·a·hash·for·the·password·by·running·the········alter·important | 462 | ··················Password·in·grub2···generate·a·hash·for·the·password·by·running·the········alter·important |
| 463 | ······································following·command:·····································bootloader·settings. | 463 | ······································following·command:·····································bootloader·settings. |
| 464 | ······································#·grub2-setpassword····································These·include·which | 464 | ······································#·grub2-setpassword····································These·include·which |
| 465 | ······································When·prompted,·enter·the·password·that·was·selected.···kernel·to·use,·and | 465 | ······································When·prompted,·enter·the·password·that·was·selected.···kernel·to·use,·and |
| 466 | ·····························································································whether·to·enter | 466 | ·····························································································whether·to·enter |
| 467 | ·····························································································single-user·mode. | 467 | ·····························································································single-user·mode. |
| 468 | ······································The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·······The·root·group·is·a | ||
| 469 | ··················Verify·the·UEFI·····group-owned·by·the·root·group·to·prevent·destruction···highly-privileged | ||
| 470 | ··················Boot·Loader·········or·modification·of·the·file.·To·properly·set·the·group·group.·Furthermore, | ||
| 471 | 1.3.2·············grub.cfg·Group······owner·of·/boot/efi/EFI/redhat/grub.cfg,·run·the········the·group-owner·of | ||
| 472 | ··················Ownership···········command:···············································this·file·should·not | ||
| 473 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/grub.cfg········have·any·access | ||
| 474 | ·····························································································privileges·anyway. | ||
| 475 | ······································File·permissions·for·/boot/grub2/grub.cfg·should·be····Proper·permissions | 468 | ······································File·permissions·for·/boot/grub2/grub.cfg·should·be····Proper·permissions |
| 476 | ··················Verify·/boot/grub2/·set·to·600.·To·properly·set·the·permissions·of·/boot/··ensure·that·only·the | 469 | ··················Verify·/boot/grub2/·set·to·600.·To·properly·set·the·permissions·of·/boot/··ensure·that·only·the |
| 477 | 1.3.2·············grub.cfg············grub2/grub.cfg,·run·the·command:·······················root·user·can·modify | 470 | 1.3.2·············grub.cfg············grub2/grub.cfg,·run·the·command:·······················root·user·can·modify |
| 478 | ··················Permissions·········$·sudo·chmod·600·/boot/grub2/grub.cfg··················important·boot | 471 | ··················Permissions·········$·sudo·chmod·600·/boot/grub2/grub.cfg··················important·boot |
| 479 | ·····························································································parameters. | 472 | ·····························································································parameters. |
| 473 | ··················Verify·the·UEFI·····File·permissions·for·/boot/efi/EFI/redhat/grub.cfg·····Proper·permissions | ||
| 474 | ··················Boot·Loader·········should·be·set·to·700.·To·properly·set·the·permissions··ensure·that·only·the | ||
| 475 | 1.3.2·············grub.cfg············of·/boot/efi/EFI/redhat/grub.cfg,·run·the·command:·····root·user·can·modify | ||
| 476 | ··················Permissions·········$·sudo·chmod·700·/boot/efi/EFI/redhat/grub.cfg·········important·boot | ||
| 477 | ·····························································································parameters. | ||
| 478 | ······································File·permissions·for·/boot/grub2/user.cfg·should·be····Proper·permissions | ||
| 479 | ··················Verify·/boot/grub2/·set·to·600.·To·properly·set·the·permissions·of·/boot/··ensure·that·only·the | ||
| 480 | 1.3.2·············user.cfg············grub2/user.cfg,·run·the·command:·······················root·user·can·read | ||
| 481 | ··················Permissions·········$·sudo·chmod·600·/boot/grub2/user.cfg··················or·modify·important | ||
| 482 | ·····························································································boot·parameters. | ||
| 480 | ·················· | 483 | ······································The·file·/boot/grub2/grub.cfg·should·be·owned·by·the···Only·root·should·be |
| 481 | ·················· | 484 | ··················Verify·/boot/grub2/·root·user·to·prevent·destruction·or·modification·of····able·to·modify |
| 482 | 1.3.2·············grub.cfg·User······· | 485 | 1.3.2·············grub.cfg·User·······the·file.·To·properly·set·the·owner·of·/boot/grub2/····important·boot |
| 483 | ··················Ownership··········· | 486 | ··················Ownership···········grub.cfg,·run·the·command:·····························parameters. |
| 484 | ······································$·sudo·chown·root·/boot/ | 487 | ······································$·sudo·chown·root·/boot/grub2/grub.cfg |
| 485 | ·····························································································The·root·group·is·a | 488 | ·····························································································The·root·group·is·a |
| 486 | ·····························································································highly-privileged | 489 | ·····························································································highly-privileged |
| 487 | ·····························································································group.·Furthermore, | 490 | ·····························································································group.·Furthermore, |
| 488 | ·····························································································the·group-owner·of | 491 | ·····························································································the·group-owner·of |
| 489 | ·····························································································this·file·should·not | ||
| 490 | ······································The·file·/boot/grub2/user.cfg·should·be·group-owned·by·have·any·access | ||
| 491 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·reading·or·modification·of···privileges·anyway. | ||
| 492 | 1.3.2·············user.cfg·Group······the·file.·To·properly·set·the·group·owner·of·/boot/····Non-root·users·who | ||
| 493 | ·················· | 492 | ······································The·file·/boot/efi/EFI/redhat/user.cfg·should·be·······this·file·should·not |
| 493 | ······································group-owned·by·the·root·group·to·prevent·reading·or····have·any·access | ||
| 494 | ··················Verify·/boot/efi/···modification·of·the·file.·To·properly·set·the·group····privileges·anyway. | ||
| 495 | 1.3.2·············EFI/redhat/user.cfg·owner·of·/boot/efi/EFI/redhat/user.cfg,·run·the········Non-root·users·who | ||
| 496 | ··················Group·Ownership·····command:···············································read·the·boot | ||
| 494 | ······································$·sudo·chgrp·root·/boot/ | 497 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/user.cfg········parameters·may·be |
| 495 | ·····························································································able·to·identify | 498 | ·····························································································able·to·identify |
| 496 | ·····························································································weaknesses·in | 499 | ·····························································································weaknesses·in |
| 497 | ·····························································································security·upon·boot | 500 | ·····························································································security·upon·boot |
| 498 | ·····························································································and·be·able·to | 501 | ·····························································································and·be·able·to |
| 499 | ·····························································································exploit·them. | 502 | ·····························································································exploit·them. |
| 500 | ······································The·file·/boot/grub2/grub.cfg·should·be·owned·by·the···Only·root·should·be | ||
| 501 | ··················Verify·/boot/grub2/·root·user·to·prevent·destruction·or·modification·of····able·to·modify | ||
| 502 | 1.3.2·············grub.cfg·User·······the·file.·To·properly·set·the·owner·of·/boot/grub2/····important·boot | ||
| 503 | ··················Ownership···········grub.cfg,·run·the·command:·····························parameters. | ||
| 504 | ······································$·sudo·chown·root·/boot/grub2/grub.cfg | ||
| 505 | ······································File·permissions·for·/boot/ | 503 | ······································File·permissions·for·/boot/efi/EFI/redhat/user.cfg·····Proper·permissions |
| 506 | ··················Verify·/boot/ | 504 | ··················Verify·/boot/efi/···should·be·set·to·600.·To·properly·set·the·permissions··ensure·that·only·the |
| 507 | 1.3.2·············user.cfg·· | 505 | 1.3.2·············EFI/redhat/user.cfg·of·/boot/efi/EFI/redhat/user.cfg,·run·the·command:·····root·user·can·read |
| 508 | ··················Permissions·········$·sudo·chmod·600·/boot/ | 506 | ··················Permissions·········$·sudo·chmod·600·/boot/efi/EFI/redhat/user.cfg·········or·modify·important |
| 509 | ·····························································································boot·parameters. | 507 | ·····························································································boot·parameters. |
| 510 | ·····························································································The·root·group·is·a | ||
| 511 | ······································The·file·/boot/grub2/grub.cfg·should·be·group-owned·by·highly-privileged | ||
| 512 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·destruction·or·modification··group.·Furthermore, | ||
| 513 | 1.3.2·············grub.cfg·Group······of·the·file.·To·properly·set·the·group·owner·of·/boot/·the·group-owner·of | ||
| 514 | ··················Ownership···········grub2/grub.cfg,·run·the·command:·······················this·file·should·not | ||
| 515 | ······································$·sudo·chgrp·root·/boot/grub2/grub.cfg·················have·any·access | ||
| 516 | ·····························································································privileges·anyway. | ||
| 517 | ·····························································································Only·root·should·be | 508 | ·····························································································Only·root·should·be |
| 518 | ·····························································································able·to·modify | 509 | ·····························································································able·to·modify |
| 519 | ·····························································································important·boot | 510 | ·····························································································important·boot |
| 520 | ······································The·file·/boot/ | 511 | ······································The·file·/boot/grub2/user.cfg·should·be·owned·by·the···parameters.·Also, |
| 521 | ··················Verify·/boot/ | 512 | ··················Verify·/boot/grub2/·root·user·to·prevent·reading·or·modification·of·the····non-root·users·who |
| 522 | 1.3.2············· | 513 | 1.3.2·············user.cfg·User·······file.·To·properly·set·the·owner·of·/boot/grub2/········read·the·boot |
| 523 | ·················· | 514 | ··················Ownership···········user.cfg,·run·the·command:·····························parameters·may·be |
| 524 | ······································$·sudo·chown·root·/boot/ | 515 | ······································$·sudo·chown·root·/boot/grub2/user.cfg·················able·to·identify |
| 525 | ·····························································································weaknesses·in | 516 | ·····························································································weaknesses·in |
| 526 | ·····························································································security·upon·boot | 517 | ·····························································································security·upon·boot |
| 527 | ·····························································································and·be·able·to | 518 | ·····························································································and·be·able·to |
| 528 | ·····························································································exploit·them. | 519 | ·····························································································exploit·them. |
| 529 | ·····························································································Only·root·should·be | 520 | ·····························································································Only·root·should·be |
| 530 | ·····························································································able·to·modify | 521 | ·····························································································able·to·modify |
| 531 | ·····························································································important·boot | 522 | ·····························································································important·boot |
| 532 | ······································The·file·/boot/ | 523 | ······································The·file·/boot/efi/EFI/redhat/user.cfg·should·be·owned·parameters.·Also, |
| 533 | ··················Verify·/boot/ | 524 | ··················Verify·/boot/efi/···by·the·root·user·to·prevent·reading·or·modification·of·non-root·users·who |
| 534 | 1.3.2············· | 525 | 1.3.2·············EFI/redhat/user.cfg·the·file.·To·properly·set·the·owner·of·/boot/efi/EFI/··read·the·boot |
| 535 | ··················Ownership······ | 526 | ··················User·Ownership······redhat/user.cfg,·run·the·command:······················parameters·may·be |
| 536 | ······································$·sudo·chown·root·/boot/ | 527 | ······································$·sudo·chown·root·/boot/efi/EFI/redhat/user.cfg········able·to·identify |
| 537 | ·····························································································weaknesses·in | 528 | ·····························································································weaknesses·in |
| 538 | ·····························································································security·upon·boot | 529 | ·····························································································security·upon·boot |
| 539 | ·····························································································and·be·able·to | 530 | ·····························································································and·be·able·to |
| 540 | ·····························································································exploit·them. | 531 | ·····························································································exploit·them. |
| 541 | ··················Verify·the·UEFI·····File·permissions·for·/boot/efi/EFI/redhat/grub.cfg·····Proper·permissions | ||
| 542 | ··················Boot·Loader·········should·be·set·to·700.·To·properly·set·the·permissions··ensure·that·only·the | ||
| 543 | 1.3.2·············grub.cfg············of·/boot/efi/EFI/redhat/grub.cfg,·run·the·command:·····root·user·can·modify | ||
| 544 | ··················Permissions·········$·sudo·chmod·700·/boot/efi/EFI/redhat/grub.cfg·········important·boot | ||
| 545 | ·····························································································parameters. | ||
| 546 | ·····························································································The·root·group·is·a | 532 | ·····························································································The·root·group·is·a |
| 547 | ·····························································································highly-privileged | 533 | ·····························································································highly-privileged |
| 548 | ·····························································································group.·Furthermore, | 534 | ·····························································································group.·Furthermore, |
| 549 | ·····························································································the·group-owner·of | 535 | ·····························································································the·group-owner·of |
| 550 | ······································The·file·/boot/efi/EFI/redhat/user.cfg·should·be·······this·file·should·not | ||
| 551 | ······································group-owned·by·the·root·group·to·prevent·reading·or····have·any·access | ||
| 552 | ··················Verify·/boot/efi/···modification·of·the·file.·To·properly·set·the·group····privileges·anyway. | ||
| 553 | 1.3.2·············EFI/redhat/user.cfg·owner·of·/boot/efi/EFI/redhat/user.cfg,·run·the········Non-root·users·who | ||
| 554 | ·················· | 536 | ·····························································································this·file·should·not |
| 537 | ······································The·file·/boot/grub2/user.cfg·should·be·group-owned·by·have·any·access | ||
| 538 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·reading·or·modification·of···privileges·anyway. | ||
| 539 | 1.3.2·············user.cfg·Group······the·file.·To·properly·set·the·group·owner·of·/boot/····Non-root·users·who | ||
| 540 | ··················Ownership···········grub2/user.cfg,·run·the·command:·······················read·the·boot | ||
| 555 | ······································$·sudo·chgrp·root·/boot/ | 541 | ······································$·sudo·chgrp·root·/boot/grub2/user.cfg·················parameters·may·be |
| 556 | ·····························································································able·to·identify | 542 | ·····························································································able·to·identify |
| 557 | ·····························································································weaknesses·in | 543 | ·····························································································weaknesses·in |
| 558 | ·····························································································security·upon·boot | 544 | ·····························································································security·upon·boot |
| 559 | ·····························································································and·be·able·to | 545 | ·····························································································and·be·able·to |
| 560 | ·····························································································exploit·them. | 546 | ·····························································································exploit·them. |
| 561 | ······································File·permissions·for·/boot/efi/EFI/redhat/user.cfg·····Proper·permissions | ||
| 562 | ··················Verify·/boot/efi/···should·be·set·to·600.·To·properly·set·the·permissions··ensure·that·only·the | ||
| 563 | 1.3.2·············EFI/redhat/user.cfg·of·/boot/efi/EFI/redhat/user.cfg,·run·the·command:·····root·user·can·read | ||
| 564 | ·················· | 547 | ··················Verify·the·UEFI·····The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·owned·Only·root·should·be |
| 548 | ··················Boot·Loader·········by·the·root·user·to·prevent·destruction·or·············able·to·modify | ||
| 549 | 1.3.2·············grub.cfg·User·······modification·of·the·file.·To·properly·set·the·owner·of·important·boot | ||
| 550 | ··················Ownership···········/boot/efi/EFI/redhat/grub.cfg,·run·the·command:········parameters. | ||
| 551 | ······································$·sudo·chown·root·/boot/efi/EFI/redhat/grub.cfg | ||
| 552 | ······································The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·······The·root·group·is·a | ||
| Max diff block lines reached; 348790/367240 bytes (94.98%) of diff not shown. | |||
| Offset 41, 63 lines modified | Offset 41, 68 lines modified | ||
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1<br/>3.1.5</td> | 47 | ······<td>3.1.1<br/>3.1.5</td> |
| 48 | ······<td> | 48 | ······<td>Disable·SSH·Root·Login</td> |
| 49 | ······<td·xml:lang="en-US"> | 49 | ······<td·xml:lang="en-US"> |
| 50 | ········To·restrict·root·logins·on·serial·ports, | ||
| 51 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 52 | <pre>ttyS0 | ||
| 53 | t | 50 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| 51 | system·directly·over·a·network. | ||
| 52 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | ||
| 53 | <tt>/etc/ssh/sshd_config</tt>: | ||
| 54 | <pre>PermitRootLogin·no</pre> | ||
| 54 | ······</td> | 55 | ······</td> |
| 55 | ······<td·xml:lang="en-US"> | 56 | ······<td·xml:lang="en-US"> |
| 56 | ········Preventing·direct·root·login·to·serial·port·interfaces | ||
| 57 | helps·ensure·accountability·for·actions·taken·on·the·systems | ||
| 58 | 57 | ········Even·though·the·communications·channel·may·be·encrypted,·an·additional·layer·of | |
| 58 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | ||
| 59 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | ||
| 60 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | ||
| 61 | direct·attack·attempts·on·root's·password. | ||
| 59 | ······</td> | 62 | ······</td> |
| 60 | ····</tr> | 63 | ····</tr> |
| 61 | ····<tr> | 64 | ····<tr> |
| 62 | ······<td>3.1.1< | 65 | ······<td>3.1.1</td> |
| 63 | ······<td> | 66 | ······<td>Disable·GDM·Guest·Login</td> |
| 64 | ······<td·xml:lang="en-US"> | 67 | ······<td·xml:lang="en-US"> |
| 65 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 66 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 67 | <pre>vc/1 | ||
| 68 | vc/2 | ||
| 69 | vc/3 | ||
| 70 | 68 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·login·without·credentials | |
| 69 | which·can·be·useful·for·public·kiosk·scenarios.·Allowing·users·to·login·without·credentials | ||
| 70 | or·"guest"·account·access·has·inherent·security·risks·and·should·be·disabled.·To·do·disable | ||
| 71 | timed·logins·or·guest·account·access,·set·the·<tt>TimedLoginEnable</tt>·to·<tt>false</tt>·in | ||
| 72 | the·<tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | ||
| 73 | <pre>[daemon] | ||
| 74 | TimedLoginEnable=false</pre> | ||
| 71 | ······</td> | 75 | ······</td> |
| 72 | ······<td·xml:lang="en-US"> | 76 | ······<td·xml:lang="en-US"> |
| 77 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | ||
| 78 | system·security. | ||
| 73 | ········Preventing·direct·root·login·to·virtual·console·devices | ||
| 74 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 75 | using·the·root·account. | ||
| 76 | ······</td> | 79 | ······</td> |
| 77 | ····</tr> | 80 | ····</tr> |
| 78 | ····<tr> | 81 | ····<tr> |
| 79 | ······<td>3.1.1<br/>3.1.5</td> | 82 | ······<td>3.1.1<br/>3.1.5</td> |
| 80 | ······<td> | 83 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> |
| 81 | ······<td·xml:lang="en-US"> | 84 | ······<td·xml:lang="en-US"> |
| 82 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | ||
| 83 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | ||
| 84 | their·UID·changed. | ||
| 85 | <br·/> | ||
| 86 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | ||
| 87 | should·be·changed·to·one·greater·than·"0"·but·less·than·"1000." | ||
| 88 | Otherwise·assign·a·UID·greater·than·"1000"·that·has·not·already·been | ||
| 89 | as | 85 | ········If·an·account·is·configured·for·password·authentication |
| 86 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 87 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 88 | <tt>nullok</tt>·in | ||
| 89 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| 90 | <tt>/etc/pam.d/password-auth</tt> | ||
| 91 | to·prevent·logins·with·empty·passwords. | ||
| 90 | ······</td> | 92 | ······</td> |
| 91 | ······<td·xml:lang="en-US"> | 93 | ······<td·xml:lang="en-US"> |
| 94 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | ||
| 95 | run·commands·with·the·privileges·of·that·account.·Accounts·with | ||
| 96 | empty·passwords·should·never·be·used·in·operational·environments. | ||
| 92 | ········An·account·has·root·authority·if·it·has·a·UID·of·0.·Multiple·accounts | ||
| 93 | with·a·UID·of·0·afford·more·opportunity·for·potential·intruders·to | ||
| 94 | guess·a·password·for·a·privileged·account.·Proper·configuration·of | ||
| 95 | sudo·is·recommended·to·afford·multiple·system·administrators | ||
| 96 | access·to·root·privileges·in·an·accountable·manner. | ||
| 97 | ······</td> | 97 | ······</td> |
| 98 | ····</tr> | 98 | ····</tr> |
| 99 | ····<tr> | 99 | ····<tr> |
| 100 | ······<td>3.1.1<br/>3.1.6</td> | 100 | ······<td>3.1.1<br/>3.1.6</td> |
| 101 | ······<td>Direct·root·Logins·Not·Allowed</td> | 101 | ······<td>Direct·root·Logins·Not·Allowed</td> |
| 102 | ······<td·xml:lang="en-US"> | 102 | ······<td·xml:lang="en-US"> |
| 103 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators | 103 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators |
| Offset 120, 68 lines modified | Offset 125, 65 lines modified | ||
| 120 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate | 125 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate |
| 121 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low | 126 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low |
| 122 | and·FISMA·Moderate·systems. | 127 | and·FISMA·Moderate·systems. |
| 123 | ······</td> | 128 | ······</td> |
| 124 | ····</tr> | 129 | ····</tr> |
| 125 | ····<tr> | 130 | ····<tr> |
| 126 | ······<td>3.1.1</td> | 131 | ······<td>3.1.1</td> |
| 127 | ······<td>Disable·GDM· | 132 | ······<td>Disable·GDM·Automatic·Login</td> |
| 128 | ······<td·xml:lang="en-US"> | 133 | ······<td·xml:lang="en-US"> |
| 129 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to· | 134 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without |
| 130 | which·can·be·useful·for·public·kiosk·scenarios.·Allowing·users·to·login·without·credentials | ||
| 131 | or·"guest"·account·access·has·inherent·security·risks·and·should·be·disabled.·To·do·disable | ||
| 132 | 135 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | |
| 136 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 137 | login·to·the·system,·set·the·<tt>AutomaticLoginEnable</tt>·to·<tt>false</tt>·in·the | ||
| 133 | 138 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | |
| 134 | <pre>[daemon] | 139 | <pre>[daemon] |
| 135 | 140 | AutomaticLoginEnable=false</pre> | |
| 136 | ······</td> | 141 | ······</td> |
| 137 | ······<td·xml:lang="en-US"> | 142 | ······<td·xml:lang="en-US"> |
| 138 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | 143 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating |
| 139 | system·security. | 144 | system·security. |
| 140 | ······</td> | 145 | ······</td> |
| 141 | ····</tr> | 146 | ····</tr> |
| 142 | ····<tr> | 147 | ····<tr> |
| 143 | ······<td>3.1.1<br/>3.1.5</td> | 148 | ······<td>3.1.1<br/>3.1.5</td> |
| 144 | ······<td> | 149 | ······<td>Verify·Only·Root·Has·UID·0</td> |
| 145 | ······<td·xml:lang="en-US"> | 150 | ······<td·xml:lang="en-US"> |
| 151 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | ||
| 152 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | ||
| 153 | their·UID·changed. | ||
| 154 | <br·/> | ||
| 155 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | ||
| Max diff block lines reached; 462299/468884 bytes (98.60%) of diff not shown. | |||
| Offset 1, 85 lines modified | Offset 1, 13 lines modified | ||
| 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of·Red | 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of·Red |
| 2 | Hat·Enterprise·Linux·8 | 2 | Hat·Enterprise·Linux·8 |
| 3 | ······························································································Preventing·direct | ||
| 4 | ······························································································root·login·to·serial | ||
| 5 | ·······································To·restrict·root·logins·on·serial·ports,·ensure·lines··port·interfaces | ||
| 6 | 3.1.1···Restrict·Serial·Port·Root······of·this·form·do·not·appear·in·/etc/securetty:··········helps·ensure | ||
| 7 | 3.1.5···Logins·························ttyS0··················································accountability·for | ||
| 8 | ·······································ttyS1··················································actions·taken·on·the | ||
| 9 | ······························································································systems·using·the | ||
| 10 | ······························································································root·account. | ||
| 11 | ·······································To·restrict·root·logins·through·the·(deprecated)·······Preventing·direct | ||
| 12 | ·······································virtual·console·devices,·ensure·lines·of·this·form·do··root·login·to | ||
| 13 | ·······································not·appear·in·/etc/securetty:··························virtual·console | ||
| 14 | 3.1.1···Restrict·Virtual·Console·Root··vc/1···················································devices·helps·ensure | ||
| 15 | 3.1.5···Logins·························vc/2···················································accountability·for | ||
| 16 | ·······································vc/3···················································actions·taken·on·the | ||
| 17 | ·······································vc/4···················································system·using·the | ||
| 18 | ······························································································root·account. | ||
| 19 | ······························································································An·account·has·root | ||
| 20 | ······························································································authority·if·it·has | ||
| 21 | ······························································································a·UID·of·0.·Multiple | ||
| 22 | ······························································································accounts·with·a·UID | ||
| 23 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more | ||
| 24 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for | ||
| 25 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders | ||
| 26 | ·······································their·UID·changed.·····································to·guess·a·password | ||
| 27 | 3.1.1···Verify·Only·Root·Has·UID·0·····If·the·account·is·associated·with·system·commands·or···for·a·privileged | ||
| 28 | 3.1.5··································applications·the·UID·should·be·changed·to·one·greater··account.·Proper | ||
| 29 | ·······································than·"0"·but·less·than·"1000."·Otherwise·assign·a·UID··configuration·of | ||
| 30 | ·······································greater·than·"1000"·that·has·not·already·been··········sudo·is·recommended | ||
| 31 | ·······································assigned.··············································to·afford·multiple | ||
| 32 | ······························································································system | ||
| 33 | ······························································································administrators | ||
| 34 | ······························································································access·to·root | ||
| 35 | ······························································································privileges·in·an | ||
| 36 | ······························································································accountable·manner. | ||
| 37 | ·······································To·further·limit·access·to·the·root·account, | ||
| 38 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 39 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 40 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 41 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| 42 | ·······································login·through·any·communication·device·on·the·system,··multifactor | ||
| 43 | ·······································whether·via·the·console·or·via·a·raw·network···········authentication·to | ||
| 44 | 3.1.1··································interface.·This·is·dangerous·as·user·can·login·to·the··privileged·accounts. | ||
| 45 | 3.1.6···Direct·root·Logins·Not·Allowed·system·as·root·via·Telnet,·which·sends·the·password·in·Users·will·first | ||
| 46 | ·······································plain·text·over·the·network.·By·default,·Red·Hat·······login,·then·escalate | ||
| 47 | ·······································Enterprise·Linux·8's·/etc/securetty·file·only·allows···to·privileged·(root) | ||
| 48 | ·······································the·root·user·to·login·at·the·console·physically·······access·via·su·/ | ||
| 49 | ·······································attached·to·the·system.·To·prevent·root·from·logging···sudo.·This·is | ||
| 50 | ·······································in,·remove·the·contents·of·this·file.·To·prevent·······required·for·FISMA | ||
| 51 | ·······································direct·root·logins,·remove·the·contents·of·this·file···Low·and·FISMA | ||
| 52 | ·······································by·typing·the·following·command:·······················Moderate·systems. | ||
| 53 | ·······································$·sudo·echo·>·/etc/securetty | ||
| 54 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 55 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 56 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 57 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 58 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 59 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | ||
| 60 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | ||
| 61 | ·······································etc/gdm/custom.conf.·For·example:······················security. | ||
| 62 | ·······································[daemon] | ||
| 63 | ·······································TimedLoginEnable=false | ||
| 64 | ······························································································If·an·account·has·an | ||
| 65 | ······························································································empty·password, | ||
| 66 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | ||
| 67 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | ||
| 68 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | ||
| 69 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | ||
| 70 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | ||
| 71 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | ||
| 72 | ······························································································never·be·used·in | ||
| 73 | ······························································································operational | ||
| 74 | ······························································································environments. | ||
| 75 | ······························································································Even·though·the | 3 | ······························································································Even·though·the |
| 76 | ······························································································communications | 4 | ······························································································communications |
| 77 | ······························································································channel·may·be | 5 | ······························································································channel·may·be |
| 78 | ······························································································encrypted,·an | 6 | ······························································································encrypted,·an |
| 79 | ······························································································additional·layer·of | 7 | ······························································································additional·layer·of |
| 80 | ······························································································security·is·gained | 8 | ······························································································security·is·gained |
| 81 | ······························································································by·extending·the | 9 | ······························································································by·extending·the |
| Offset 93, 58 lines modified | Offset 21, 210 lines modified | ||
| 93 | ······························································································accountability·of | 21 | ······························································································accountability·of |
| 94 | ······························································································actions·performed·on | 22 | ······························································································actions·performed·on |
| 95 | ······························································································the·system·and·also | 23 | ······························································································the·system·and·also |
| 96 | ······························································································helps·to·minimize | 24 | ······························································································helps·to·minimize |
| 97 | ······························································································direct·attack | 25 | ······························································································direct·attack |
| 98 | ······························································································attempts·on·root's | 26 | ······························································································attempts·on·root's |
| 99 | ······························································································password. | 27 | ······························································································password. |
| 28 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 29 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 30 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 31 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 32 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 33 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | ||
| 34 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | ||
| 35 | ·······································etc/gdm/custom.conf.·For·example:······················security. | ||
| 36 | ·······································[daemon] | ||
| 37 | ·······································TimedLoginEnable=false | ||
| 38 | ······························································································If·an·account·has·an | ||
| 39 | ······························································································empty·password, | ||
| 40 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | ||
| 41 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | ||
| 42 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | ||
| 43 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | ||
| 44 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | ||
| 45 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | ||
| 46 | ······························································································never·be·used·in | ||
| 47 | ······························································································operational | ||
| 48 | ······························································································environments. | ||
| 49 | ·······································To·further·limit·access·to·the·root·account, | ||
| 50 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 51 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 52 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 53 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| 54 | ·······································login·through·any·communication·device·on·the·system,··multifactor | ||
| 55 | ·······································whether·via·the·console·or·via·a·raw·network···········authentication·to | ||
| 56 | 3.1.1··································interface.·This·is·dangerous·as·user·can·login·to·the··privileged·accounts. | ||
| 57 | 3.1.6···Direct·root·Logins·Not·Allowed·system·as·root·via·Telnet,·which·sends·the·password·in·Users·will·first | ||
| 58 | ·······································plain·text·over·the·network.·By·default,·Red·Hat·······login,·then·escalate | ||
| 59 | ·······································Enterprise·Linux·8's·/etc/securetty·file·only·allows···to·privileged·(root) | ||
| 60 | ·······································the·root·user·to·login·at·the·console·physically·······access·via·su·/ | ||
| 61 | ·······································attached·to·the·system.·To·prevent·root·from·logging···sudo.·This·is | ||
| Max diff block lines reached; 797138/815079 bytes (97.80%) of diff not shown. | |||
| Offset 64, 15662 lines modified | Offset 64, 15662 lines modified | ||
| 000003f0:·6e67·3c2f·7468·3e0a·2020·2020·3c74·683e··ng</th>.····<th> | 000003f0:·6e67·3c2f·7468·3e0a·2020·2020·3c74·683e··ng</th>.····<th> | ||
| 00000400:·5275·6c65·2054·6974·6c65·3c2f·7468·3e0a··Rule·Title</th>. | 00000400:·5275·6c65·2054·6974·6c65·3c2f·7468·3e0a··Rule·Title</th>. | ||
| 00000410:·2020·2020·3c74·683e·4465·7363·7269·7074······<th>Descript | 00000410:·2020·2020·3c74·683e·4465·7363·7269·7074······<th>Descript | ||
| 00000420:·696f·6e3c·2f74·683e·0a20·2020·203c·7468··ion</th>.····<th | 00000420:·696f·6e3c·2f74·683e·0a20·2020·203c·7468··ion</th>.····<th | ||
| 00000430:·3e52·6174·696f·6e61·6c65·3c2f·7468·3e0a··>Rationale</th>. | 00000430:·3e52·6174·696f·6e61·6c65·3c2f·7468·3e0a··>Rationale</th>. | ||
| 00000440:·2020·3c2f·7468·6561·643e·0a20·203c·7462····</thead>.··<tb | 00000440:·2020·3c2f·7468·6561·643e·0a20·203c·7462····</thead>.··<tb | Diff chunk too large, falling back to line-by-line diff (3285 lines added, 3285 lines removed) | |
| 00000450:·6f64·793e·0a20·203c·7472·3e0a·2020·2020··ody>.··<tr>.···· | 00000450:·6f64·793e·0a20·203c·7472·3e0a·2020·2020··ody>.··<tr>.···· | ||
| 00000460:·2020·3c74·643e·4155·2d32·286 | 00000460:·2020·3c74·643e·4155·2d32·2861·293c·2f74····<td>AU-2(a)</t | ||
| 00000470:· | 00000470:·643e·0a20·2020·2020·203c·7464·3e43·6f6e··d>.······<td>Con | ||
| 00000480:· | 00000480:·6669·6775·7265·2061·7564·6974·696e·6720··figure·auditing· | ||
| 00000490:·6 | 00000490:·6f66·2075·6e73·7563·6365·7373·6675·6c20··of·unsuccessful· | ||
| 000004a0:·6 | 000004a0:·6669·6c65·2064·656c·6574·696f·6e73·2028··file·deletions·( | ||
| 000004b0:· | 000004b0:·4141·7263·6836·3429·3c2f·7464·3e0a·2020··AArch64)</td>.·· | ||
| 000004c0:· | 000004c0:·2020·2020·3c74·6420·786d·6c3a·6c61·6e67······<td·xml:lang | ||
| 000004d0:· | 000004d0:·3d22·656e·2d55·5322·3e0a·2020·2020·2020··="en-US">.······ | ||
| 000004e0:· | 000004e0:·2020·456e·7375·7265·2074·6861·7420·756e····Ensure·that·un | ||
| 000004f0:· | 000004f0:·7375·6363·6573·7366·756c·2061·7474·656d··successful·attem | ||
| 00000500:· | 00000500:·7074·7320·746f·2064·656c·6574·6520·6120··pts·to·delete·a· | ||
| 00000510:· | 00000510:·6669·6c65·2061·7265·2061·7564·6974·6564··file·are·audited | ||
| 00000520:· | 00000520:·2e0a·0a54·6865·2066·6f6c·6c6f·7769·6e67··...The·following | ||
| 00000530:·207 | 00000530:·2072·756c·6573·2063·6f6e·6669·6775·7265···rules·configure | ||
| 00000540:· | 00000540:·2061·7564·6974·2061·7320·6465·7363·7269···audit·as·descri | ||
| 00000550:· | 00000550:·6265·6420·6162·6f76·653a·0a3c·7072·653e··bed·above:.<pre> | ||
| 00000560:· | 00000560:·2323·2055·6e73·7563·6365·7373·6675·6c20··##·Unsuccessful· | ||
| 00000570:·6 | 00000570:·6669·6c65·2064·656c·6574·650a·2d61·2061··file·delete.-a·a | ||
| 00000580:·6 | 00000580:·6c77·6179·732c·6578·6974·202d·4620·6172··lways,exit·-F·ar | ||
| 00000590:·6 | 00000590:·6368·3d62·3332·202d·5320·756e·6c69·6e6b··ch=b32·-S·unlink | ||
| 000005a0:·2 | 000005a0:·2c75·6e6c·696e·6b61·742c·7265·6e61·6d65··,unlinkat,rename | ||
| 000005b0:· | 000005b0:·2c72·656e·616d·6561·7420·2d46·2065·7869··,renameat·-F·exi | ||
| 000005c0:·7 | 000005c0:·743d·2d45·4143·4345·5320·2d46·2061·7569··t=-EACCES·-F·aui | ||
| 000005d0:· | 000005d0:·643e·3d31·3030·3020·2d46·2061·7569·6421··d>=1000·-F·auid! | ||
| 000005e0:· | 000005e0:·3d75·6e73·6574·202d·4620·6b65·793d·756e··=unset·-F·key=un | ||
| 000005f0:·7 | 000005f0:·7375·6363·6573·7366·756c·2d64·656c·6574··successful-delet | ||
| 00000600:·6 | 00000600:·650a·2d61·2061·6c77·6179·732c·6578·6974··e.-a·always,exit | ||
| 00000610:· | 00000610:·202d·4620·6172·6368·3d62·3634·202d·5320···-F·arch=b64·-S· | ||
| 00000620:· | 00000620:·756e·6c69·6e6b·6174·2c72·656e·616d·6561··unlinkat,renamea | ||
| 00000630:·74 | 00000630:·7420·2d46·2065·7869·743d·2d45·4143·4345··t·-F·exit=-EACCE | ||
| 00000640:· | 00000640:·5320·2d46·2061·7569·643e·3d31·3030·3020··S·-F·auid>=1000· | ||
| 00000650:·2 | 00000650:·2d46·2061·7569·6421·3d75·6e73·6574·202d··-F·auid!=unset·- | ||
| 00000660:· | 00000660:·4620·6b65·793d·756e·7375·6363·6573·7366··F·key=unsuccessf | ||
| 00000670:· | 00000670:·756c·2d64·656c·6574·650a·2d61·2061·6c77··ul-delete.-a·alw | ||
| 00000680:·6 | 00000680:·6179·732c·6578·6974·202d·4620·6172·6368··ays,exit·-F·arch | ||
| 00000690:· | 00000690:·3d62·3332·202d·5320·756e·6c69·6e6b·2c75··=b32·-S·unlink,u | ||
| 000006a0:· | 000006a0:·6e6c·696e·6b61·742c·7265·6e61·6d65·2c72··nlinkat,rename,r | ||
| 000006b0:·6 | 000006b0:·656e·616d·6561·7420·2d46·2065·7869·743d··enameat·-F·exit= | ||
| 000006c0:· | 000006c0:·2d45·5045·524d·202d·4620·6175·6964·3e3d··-EPERM·-F·auid>= | ||
| 000006d0:· | 000006d0:·3130·3030·202d·4620·6175·6964·213d·756e··1000·-F·auid!=un | ||
| 000006e0:·3 | 000006e0:·7365·7420·2d46·206b·6579·3d75·6e73·7563··set·-F·key=unsuc | ||
| 000006f0:·6 | 000006f0:·6365·7373·6675·6c2d·6465·6c65·7465·0a2d··cessful-delete.- | ||
| 00000700:·6 | 00000700:·6120·616c·7761·7973·2c65·7869·7420·2d46··a·always,exit·-F | ||
| 00000710:· | 00000710:·2061·7263·683d·6236·3420·2d53·2075·6e6c···arch=b64·-S·unl | ||
| 00000720:·6 | 00000720:·696e·6b61·742c·7265·6e61·6d65·6174·202d··inkat,renameat·- | ||
| 00000730:· | 00000730:·4620·6578·6974·3d2d·4550·4552·4d20·2d46··F·exit=-EPERM·-F | ||
| 00000740:· | 00000740:·2061·7569·643e·3d31·3030·3020·2d46·2061···auid>=1000·-F·a | ||
| 00000750:· | 00000750:·7569·6421·3d75·6e73·6574·202d·4620·6b65··uid!=unset·-F·ke | ||
| 00000760:· | 00000760:·793d·756e·7375·6363·6573·7366·756c·2d64··y=unsuccessful-d | ||
| 00000770:·6 | 00000770:·656c·6574·6520·2020·203c·2f70·7265·3e0a··elete····</pre>. | ||
| 00000780:· | 00000780:·0a4c·6f61·6420·6e65·7720·4175·6469·7420··.Load·new·Audit· | ||
| 00000790:· | 00000790:·7275·6c65·7320·696e·746f·206b·6572·6e65··rules·into·kerne | ||
| 000007a0:·6 | 000007a0:·6c20·6279·2072·756e·6e69·6e67·3a0a·3c70··l·by·running:.<p | ||
| 000007b0:· | 000007b0:·7265·3e61·7567·656e·7275·6c65·7320·2d2d··re>augenrules·-- | ||
| 000007c0:·6 | 000007c0:·6c6f·6164·3c2f·7072·653e·0a0a·4e6f·7465··load</pre>..Note | ||
| 000007d0:· | 000007d0:·3a20·5468·6973·2072·756c·6520·7573·6573··:·This·rule·uses | ||
| 000007e0:· | 000007e0:·2061·2073·7065·6369·616c·2073·6574·206f···a·special·set·o | ||
| 000007f0:·6 | 000007f0:·6620·4175·6469·7420·7275·6c65·7320·746f··f·Audit·rules·to | ||
| 00000800:· | 00000800:·2063·6f6d·706c·7920·7769·7468·204f·5350···comply·with·OSP | ||
| 00000810:· | 00000810:·5020·342e·322e·312e·2059·6f75·206d·6179··P·4.2.1.·You·may | ||
| 00000820:· | 00000820:·2072·6575·7365·2074·6869·7320·7275·6c65···reuse·this·rule | ||
| 00000830:· | 00000830:·2069·6e20·6469·6666·6572·656e·7420·7072···in·different·pr | ||
| 00000840:· | 00000840:·6f66·696c·6573·2e20·4966·2079·6f75·2064··ofiles.·If·you·d | ||
| 00000850:· | 00000850:·6563·6964·6520·746f·2064·6f20·736f·2c20··ecide·to·do·so,· | ||
| 00000860:· | 00000860:·6974·2069·7320·7265·636f·6d6d·656e·6465··it·is·recommende | ||
| 00000870:· | 00000870:·6420·7468·6174·2079·6f75·2069·6e73·7065··d·that·you·inspe | ||
| 00000880:·6 | 00000880:·6374·2063·6f6e·7465·6e74·7320·6f66·2074··ct·contents·of·t | ||
| 00000890:· | 00000890:·6865·2066·696c·6520·636c·6f73·656c·7920··he·file·closely· | ||
| 000008a0:· | 000008a0:·616e·6420·6d61·6b65·2073·7572·6520·7468··and·make·sure·th | ||
| 000008b0:· | 000008b0:·6174·2074·6865·7920·6172·6520·616c·6c69··at·they·are·alli | ||
| 000008c0:· | 000008c0:·676e·6564·2077·6974·6820·796f·7572·206e··gned·with·your·n | ||
| 000008d0:· | 000008d0:·6565·6473·2e0a·2020·2020·2020·3c2f·7464··eeds..······</td | ||
| 000008e0:· | 000008e0:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | ||
| 000008f0:· | 000008f0:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | ||
| 00000900:· | 00000900:·2020·2020·2020·556e·7375·6363·6573·7366········Unsuccessf | ||
| 00000910:· | 00000910:·756c·2061·7474·656d·7074·7320·746f·2064··ul·attempts·to·d | ||
| 00000920:· | 00000920:·656c·6574·6520·6120·6669·6c65·206d·6967··elete·a·file·mig | ||
| 00000930:·6 | 00000930:·6874·2062·6520·7369·676e·7320·6f66·206d··ht·be·signs·of·m | ||
| 00000940:·6 | 00000940:·616c·6963·696f·7573·2061·6374·6976·6974··alicious·activit | ||
| 00000950:· | 00000950:·6965·732e·2041·7564·6974·696e·6720·6f66··ies.·Auditing·of | ||
| 00000960:· | 00000960:·2073·7563·6820·6576·656e·7473·2068·656c···such·events·hel | ||
| 00000970:· | 00000970:·7020·696e·206d·6f6e·6974·6f72·696e·6720··p·in·monitoring· | ||
| 00000980:· | 00000980:·616e·6420·696e·7665·7374·6967·6174·696e··and·investigatin | ||
| 00000990:· | 00000990:·6720·6f66·2073·7563·6820·6163·7469·7669··g·of·such·activi | ||
| 000009a0:· | 000009a0:·7469·6573·2e0a·2020·2020·2020·3c2f·7464··ties..······</td | ||
| 000009b0:· | 000009b0:·3e0a·2020·2020·3c2f·7472·3e0a·2020·2020··>.····</tr>.···· | ||
| 000009c0:· | 000009c0:·3c74·723e·0a20·2020·2020·203c·7464·3e41··<tr>.······<td>A | ||
| 000009d0:· | 000009d0:·552d·3228·6429·3c62·722f·3e41·552d·3132··U-2(d)<br/>AU-12 | ||
| 000009e0:· | 000009e0:·2863·293c·6272·2f3e·434d·2d36·2861·293c··(c)<br/>CM-6(a)< | ||
| 000009f0:· | 000009f0:·2f74·643e·0a20·2020·2020·203c·7464·3e52··/td>.······<td>R | ||
| 00000a00:· | 00000a00:·6563·6f72·6420·4576·656e·7473·2074·6861··ecord·Events·tha | ||
| 00000a10:· | 00000a10:·7420·4d6f·6469·6679·2074·6865·2053·7973··t·Modify·the·Sys | ||
| 00000a20:· | 00000a20:·7465·6d27·7320·4d61·6e64·6174·6f72·7920··tem's·Mandatory· | ||
| 00000a30:· | 00000a30:·4163·6365·7373·2043·6f6e·7472·6f6c·7320··Access·Controls· | ||
| 00000a40:·6675·73 | 00000a40:·696e·2075·7372·2f73·6861·7265·3c2f·7464··in·usr/share</td | ||
| 00000a50:· | 00000a50:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | ||
| 00000a60:·6c6 | 00000a60:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | ||
| 00000a70:· | 00000a70:·2020·2020·2020·4966·2074·6865·203c·7474········If·the·<tt | ||
| 00000a80:· | 00000a80:·3e61·7564·6974·643c·2f74·743e·2064·6165··>auditd</tt>·dae | ||
| 00000a90:· | 00000a90:·6d6f·6e20·6973·2063·6f6e·6669·6775·7265··mon·is·configure | ||
| 00000aa0:· | 00000aa0:·6420·746f·2075·7365·2074·6865·0a3c·7474··d·to·use·the.<tt | ||
| 00000ab0:· | 00000ab0:·3e61·7567·656e·7275·6c65·733c·2f74·743e··>augenrules</tt> | ||
| 00000ac0:· | 00000ac0:·2070·726f·6772·616d·2074·6f20·7265·6164···program·to·read | ||
| 00000ad0:· | 00000ad0:·2061·7564·6974·2072·756c·6573·2064·7572···audit·rules·dur | ||
| 00000ae0:·6 | 00000ae0:·696e·6720·6461·656d·6f6e·2073·7461·7274··ing·daemon·start | ||
| 00000af0:· | 00000af0:·7570·2028·7468·650a·6465·6661·756c·7429··up·(the.default) | ||
| 00000b00:· | 00000b00:·2c20·6164·6420·7468·6520·666f·6c6c·6f77··,·add·the·follow | ||
| 00000b10:· | 00000b10:·696e·6720·6c69·6e65·2074·6f20·6120·6669··ing·line·to·a·fi | ||
| 00000b20:· | 00000b20:·6c65·2077·6974·6820·7375·6666·6978·203c··le·with·suffix·< | ||
| 00000b30:· | 00000b30:·7474·3e2e·7275·6c65·733c·2f74·743e·2069··tt>.rules</tt>·i | ||
| 00000b40:· | 00000b40:·6e20·7468·650a·6469·7265·6374·6f72·7920··n·the.directory· | ||
| 00000b50:· | 00000b50:·3c74·743e·2f65·7463·2f61·7564·6974·2f72··<tt>/etc/audit/r | ||
| 00000b60:· | 00000b60:·756c·6573·2e64·3c2f·7474·3e3a·0a3c·7072··ules.d</tt>:.<pr | ||
| 00000b70:· | 00000b70:·653e·2d77·202f·7573·722f·7368·6172·652f··e>-w·/usr/share/ | ||
| 00000b80:· | 00000b80:·7365·6c69·6e75·782f·202d·7020·7761·202d··selinux/·-p·wa·- | ||
| 00000b90:· | 00000b90:·6b20·4d41·432d·706f·6c69·6379·3c2f·7072··k·MAC-policy</pr | ||
| 00000ba0:· | 00000ba0:·653e·0a49·6620·7468·6520·3c74·743e·6175··e>.If·the·<tt>au | ||
| 00000bb0:· | 00000bb0:·6469·7464·3c2f·7474·3e20·6461·656d·6f6e··ditd</tt>·daemon | ||
| 00000bc0:· | 00000bc0:·2069·7320·636f·6e66·6967·7572·6564·2074···is·configured·t | ||
| Max diff block lines reached; 7067537/7521445 bytes (93.97%) of diff not shown. | |||
| Offset 73, 14 lines modified | Offset 73, 28 lines modified | ||
| 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all | 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all |
| 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an | 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 75 | anti-spoofing·measure. | 75 | anti-spoofing·measure. |
| 76 | ······</td> | 76 | ······</td> |
| 77 | ····</tr> | 77 | ····</tr> |
| 78 | ····<tr> | 78 | ····<tr> |
| 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> |
| 80 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 81 | ······<td·xml:lang="en-US"> | ||
| 82 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 83 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 84 | ······</td> | ||
| 85 | ······<td·xml:lang="en-US"> | ||
| 86 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 87 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 88 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 89 | the·network. | ||
| 90 | ······</td> | ||
| 91 | ····</tr> | ||
| 92 | ····<tr> | ||
| 93 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 80 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> | 94 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> |
| 81 | ······<td·xml:lang="en-US"> | 95 | ······<td·xml:lang="en-US"> |
| 82 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, | 96 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, |
| 83 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default | 97 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default |
| 84 | GRUB2·command·line·for·the·Linux·operating·system. | 98 | GRUB2·command·line·for·the·Linux·operating·system. |
| 85 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line | 99 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line |
| 86 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the | 100 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the |
| Offset 91, 28 lines modified | Offset 105, 14 lines modified | ||
| 91 | ······</td> | 105 | ······</td> |
| 92 | ······<td·xml:lang="en-US"> | 106 | ······<td·xml:lang="en-US"> |
| 93 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce | 107 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce |
| 94 | the·vulnerability·to·exploitation. | 108 | the·vulnerability·to·exploitation. |
| 95 | ······</td> | 109 | ······</td> |
| 96 | ····</tr> | 110 | ····</tr> |
| 97 | ····<tr> | 111 | ····<tr> |
| 98 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 99 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 100 | ······<td·xml:lang="en-US"> | ||
| 101 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 102 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 103 | ······</td> | ||
| 104 | ······<td·xml:lang="en-US"> | ||
| 105 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 106 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 107 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 108 | the·network. | ||
| 109 | ······</td> | ||
| 110 | ····</tr> | ||
| 111 | ····<tr> | ||
| 112 | ······<td>Req-1.3.3</td> | 112 | ······<td>Req-1.3.3</td> |
| 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> | 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> |
| 114 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless | 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless |
| 116 | capability. | 116 | capability. |
| 117 | <br·/><br·/> | 117 | <br·/><br·/> |
| Offset 127, 14 lines modified | Offset 127, 26 lines modified | ||
| 127 | attacker·to·monitor·and·record·network·traffic.·These·malicious·APs·can·also | 127 | attacker·to·monitor·and·record·network·traffic.·These·malicious·APs·can·also |
| 128 | serve·to·create·a·man-in-the-middle·attack·or·be·used·to·create·a·denial·of | 128 | serve·to·create·a·man-in-the-middle·attack·or·be·used·to·create·a·denial·of |
| 129 | service·to·valid·network·resources. | 129 | service·to·valid·network·resources. |
| 130 | ······</td> | 130 | ······</td> |
| 131 | ····</tr> | 131 | ····</tr> |
| 132 | ····<tr> | 132 | ····<tr> |
| 133 | ······<td>Req-1.4</td> | 133 | ······<td>Req-1.4</td> |
| 134 | ······<td>Ensure·firewall·rules·exist·for·all·open·ports</td> | ||
| 135 | ······<td·xml:lang="en-US"> | ||
| 136 | ········Any·ports·that·have·been·opened·on·non-loopback·addresses·need·firewall·rules·to·govern | ||
| 137 | traffic. | ||
| 138 | ······</td> | ||
| 139 | ······<td·xml:lang="en-US"> | ||
| 140 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | ||
| 141 | packets·to·these·ports. | ||
| 142 | ······</td> | ||
| 143 | ····</tr> | ||
| 144 | ····<tr> | ||
| 145 | ······<td>Req-1.4</td> | ||
| 134 | ······<td>Set·Default·firewalld·Zone·for·Incoming·Packets</td> | 146 | ······<td>Set·Default·firewalld·Zone·for·Incoming·Packets</td> |
| 135 | ······<td·xml:lang="en-US"> | 147 | ······<td·xml:lang="en-US"> |
| 136 | ········To·set·the·default·zone·to·<tt>drop</tt>·for | 148 | ········To·set·the·default·zone·to·<tt>drop</tt>·for |
| 137 | the·built-in·default·zone·which·processes·incoming·IPv4·and·IPv6·packets, | 149 | the·built-in·default·zone·which·processes·incoming·IPv4·and·IPv6·packets, |
| 138 | modify·the·following·line·in | 150 | modify·the·following·line·in |
| 139 | <tt>/etc/firewalld/firewalld.conf</tt>·to·be: | 151 | <tt>/etc/firewalld/firewalld.conf</tt>·to·be: |
| 140 | <pre>DefaultZone=drop</pre> | 152 | <pre>DefaultZone=drop</pre> |
| Offset 144, 26 lines modified | Offset 156, 14 lines modified | ||
| 144 | the·applicable·rules·in·the·table·are·examined·for·a·match.·Setting·the | 156 | the·applicable·rules·in·the·table·are·examined·for·a·match.·Setting·the |
| 145 | default·zone·to·<tt>drop</tt>·implements·proper·design·for·a·firewall,·i.e. | 157 | default·zone·to·<tt>drop</tt>·implements·proper·design·for·a·firewall,·i.e. |
| 146 | any·packets·which·are·not·explicitly·permitted·should·not·be | 158 | any·packets·which·are·not·explicitly·permitted·should·not·be |
| 147 | accepted. | 159 | accepted. |
| 148 | ······</td> | 160 | ······</td> |
| 149 | ····</tr> | 161 | ····</tr> |
| 150 | ····<tr> | 162 | ····<tr> |
| 151 | ······<td>Req-1.4</td> | ||
| 152 | ······<td>Ensure·firewall·rules·exist·for·all·open·ports</td> | ||
| 153 | ······<td·xml:lang="en-US"> | ||
| 154 | ········Any·ports·that·have·been·opened·on·non-loopback·addresses·need·firewall·rules·to·govern | ||
| 155 | traffic. | ||
| 156 | ······</td> | ||
| 157 | ······<td·xml:lang="en-US"> | ||
| 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | ||
| 159 | packets·to·these·ports. | ||
| 160 | ······</td> | ||
| 161 | ····</tr> | ||
| 162 | ····<tr> | ||
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | 164 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> |
| 165 | ······<td·xml:lang="en-US"> | 165 | ······<td·xml:lang="en-US"> |
| 166 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | 166 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> |
| 167 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> | 167 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> |
| 168 | ······</td> | 168 | ······</td> |
| 169 | ······<td·xml:lang="en-US"> | 169 | ······<td·xml:lang="en-US"> |
| Offset 173, 14 lines modified | Offset 173, 28 lines modified | ||
| 173 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | 173 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood |
| 174 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | 174 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and |
| 175 | enables·the·system·to·continue·servicing·valid·connection·requests. | 175 | enables·the·system·to·continue·servicing·valid·connection·requests. |
| 176 | ······</td> | 176 | ······</td> |
| 177 | ····</tr> | 177 | ····</tr> |
| 178 | ····<tr> | 178 | ····<tr> |
| 179 | ······<td>Req-1.4.1</td> | 179 | ······<td>Req-1.4.1</td> |
| 180 | ······<td>Install·iptables·Package</td> | ||
| 181 | ······<td·xml:lang="en-US"> | ||
| 182 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | ||
| 183 | <pre> | ||
| 184 | $·sudo·yum·install·iptables</pre> | ||
| 185 | ······</td> | ||
| 186 | ······<td·xml:lang="en-US"> | ||
| 187 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| Max diff block lines reached; 317582/323387 bytes (98.20%) of diff not shown. | |||
| Offset 34, 26 lines modified | Offset 34, 14 lines modified | ||
| 34 | ····················································································network·traffic | 34 | ····················································································network·traffic |
| 35 | ····················································································should·be·seen,·all | 35 | ····················································································should·be·seen,·all |
| 36 | ····················································································other·interfaces | 36 | ····················································································other·interfaces |
| 37 | ····················································································should·ignore | 37 | ····················································································should·ignore |
| 38 | ····················································································traffic·on·this | 38 | ····················································································traffic·on·this |
| 39 | ····················································································network·as·an·anti- | 39 | ····················································································network·as·an·anti- |
| 40 | ····················································································spoofing·measure. | 40 | ····················································································spoofing·measure. |
| 41 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 42 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 43 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 44 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 45 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 46 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 47 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 48 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 49 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 50 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 51 | ·····························already·installed·kernels: | ||
| 52 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 53 | ····················································································Routing·protocol | 41 | ····················································································Routing·protocol |
| 54 | ····················································································daemons·are | 42 | ····················································································daemons·are |
| 55 | ····················································································typically·used·on | 43 | ····················································································typically·used·on |
| 56 | ····················································································routers·to·exchange | 44 | ····················································································routers·to·exchange |
| 57 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology | 45 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology |
| 58 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with | 46 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with |
| 59 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If | 47 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If |
| Offset 61, 14 lines modified | Offset 49, 26 lines modified | ||
| 61 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not | 49 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not |
| 62 | ·····························sysctl.d:··············································required,·system | 50 | ·····························sysctl.d:··············································required,·system |
| 63 | ·····························net.ipv4.ip_forward·=·0································network·information | 51 | ·····························net.ipv4.ip_forward·=·0································network·information |
| 64 | ····················································································may·be | 52 | ····················································································may·be |
| 65 | ····················································································unnecessarily | 53 | ····················································································unnecessarily |
| 66 | ····················································································transmitted·across | 54 | ····················································································transmitted·across |
| 67 | ····················································································the·network. | 55 | ····················································································the·network. |
| 56 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 57 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 58 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 59 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 60 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 61 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 62 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 63 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 64 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 65 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 66 | ·····························already·installed·kernels: | ||
| 67 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 68 | ····················································································The·use·of·wireless | 68 | ····················································································The·use·of·wireless |
| 69 | ····················································································networking·can | 69 | ····················································································networking·can |
| 70 | ····················································································introduce·many | 70 | ····················································································introduce·many |
| 71 | ····················································································different·attack | 71 | ····················································································different·attack |
| 72 | ····················································································vectors·into·the | 72 | ····················································································vectors·into·the |
| 73 | ····················································································organization's | 73 | ····················································································organization's |
| 74 | ····················································································network.·Common | 74 | ····················································································network.·Common |
| Offset 90, 14 lines modified | Offset 90, 21 lines modified | ||
| 90 | ····················································································also·serve·to | 90 | ····················································································also·serve·to |
| 91 | ····················································································create·a·man-in- | 91 | ····················································································create·a·man-in- |
| 92 | ····················································································the-middle·attack | 92 | ····················································································the-middle·attack |
| 93 | ····················································································or·be·used·to | 93 | ····················································································or·be·used·to |
| 94 | ····················································································create·a·denial·of | 94 | ····················································································create·a·denial·of |
| 95 | ····················································································service·to·valid | 95 | ····················································································service·to·valid |
| 96 | ····················································································network·resources. | 96 | ····················································································network·resources. |
| 97 | ····················································································Without·a·firewall | ||
| 98 | ····················································································rule·configured·for | ||
| 99 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | ||
| 100 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | ||
| 101 | ·········open·ports·································································will·drop·all | ||
| 102 | ····················································································packets·to·these | ||
| 103 | ····················································································ports. | ||
| 97 | ····················································································In·firewalld·the | 104 | ····················································································In·firewalld·the |
| 98 | ····················································································default·zone·is | 105 | ····················································································default·zone·is |
| 99 | ····················································································applied·only·after | 106 | ····················································································applied·only·after |
| 100 | ····················································································all·the·applicable | 107 | ····················································································all·the·applicable |
| 101 | ····················································································rules·in·the·table | 108 | ····················································································rules·in·the·table |
| 102 | ·····························To·set·the·default·zone·to·drop·for·the·built-in·······are·examined·for·a | 109 | ·····························To·set·the·default·zone·to·drop·for·the·built-in·······are·examined·for·a |
| 103 | ·········Set·Default·········default·zone·which·processes·incoming·IPv4·and·IPv6····match.·Setting·the | 110 | ·········Set·Default·········default·zone·which·processes·incoming·IPv4·and·IPv6····match.·Setting·the |
| Offset 105, 21 lines modified | Offset 112, 14 lines modified | ||
| 105 | ·········Incoming·Packets····firewalld.conf·to·be:··································drop·implements | 112 | ·········Incoming·Packets····firewalld.conf·to·be:··································drop·implements |
| 106 | ·····························DefaultZone=drop·······································proper·design·for·a | 113 | ·····························DefaultZone=drop·······································proper·design·for·a |
| 107 | ····················································································firewall,·i.e.·any | 114 | ····················································································firewall,·i.e.·any |
| 108 | ····················································································packets·which·are | 115 | ····················································································packets·which·are |
| 109 | ····················································································not·explicitly | 116 | ····················································································not·explicitly |
| 110 | ····················································································permitted·should | 117 | ····················································································permitted·should |
| 111 | ····················································································not·be·accepted. | 118 | ····················································································not·be·accepted. |
| 112 | ····················································································Without·a·firewall | ||
| 113 | ····················································································rule·configured·for | ||
| 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | ||
| 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | ||
| 116 | ·········open·ports·································································will·drop·all | ||
| 117 | ····················································································packets·to·these | ||
| 118 | ····················································································ports. | ||
| 119 | ····················································································A·TCP·SYN·flood | 119 | ····················································································A·TCP·SYN·flood |
| 120 | ····················································································attack·can·cause·a | 120 | ····················································································attack·can·cause·a |
| 121 | ····················································································denial·of·service | 121 | ····················································································denial·of·service |
| 122 | ····················································································by·filling·a | 122 | ····················································································by·filling·a |
| 123 | ····················································································system's·TCP | 123 | ····················································································system's·TCP |
| 124 | ····················································································connection·table | 124 | ····················································································connection·table |
| 125 | ····················································································with·connections·in | 125 | ····················································································with·connections·in |
| Offset 138, 14 lines modified | Offset 138, 23 lines modified | ||
| 138 | ····················································································flood·condition·is | 138 | ····················································································flood·condition·is |
| 139 | ····················································································detected,·and | 139 | ····················································································detected,·and |
| 140 | ····················································································enables·the·system | 140 | ····················································································enables·the·system |
| 141 | ····················································································to·continue | 141 | ····················································································to·continue |
| 142 | ····················································································servicing·valid | 142 | ····················································································servicing·valid |
| 143 | ····················································································connection | 143 | ····················································································connection |
| 144 | ····················································································requests. | 144 | ····················································································requests. |
| 145 | ····················································································iptables·controls | ||
| 146 | ····················································································the·Linux·kernel | ||
| 147 | ····················································································network·packet | ||
| 148 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 149 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 150 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 151 | ····················································································set·up·firewalls | ||
| 152 | ····················································································and·IP | ||
| 153 | ····················································································masquerading,·etc. | ||
| 145 | ····················································································Loopback·traffic·is | 154 | ····················································································Loopback·traffic·is |
| 146 | ····················································································generated·between | 155 | ····················································································generated·between |
| 147 | ····················································································processes·on | 156 | ····················································································processes·on |
| 148 | ····················································································machine·and·is | 157 | ····················································································machine·and·is |
| 149 | ····················································································typically·critical | 158 | ····················································································typically·critical |
| 150 | ····················································································to·operation·of·the | 159 | ····················································································to·operation·of·the |
| 151 | ····················································································system.·The | 160 | ····················································································system.·The |
| Offset 155, 46 lines modified | Offset 164, 37 lines modified | ||
| 155 | ····················································································network·traffic | 164 | ····················································································network·traffic |
| 156 | ····················································································should·be·seen,·all | 165 | ····················································································should·be·seen,·all |
| 157 | ····················································································other·interfaces | 166 | ····················································································other·interfaces |
| 158 | ····················································································should·ignore | 167 | ····················································································should·ignore |
| 159 | ····················································································traffic·on·this | 168 | ····················································································traffic·on·this |
| Max diff block lines reached; 521404/533772 bytes (97.68%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> | 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> |
| 3 | ··<xccdf-1.2:version·time="2025-0 | 3 | ··<xccdf-1.2:version·time="2025-03-01T22:08:00">1</xccdf-1.2:version> |
| 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> | 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> |
| 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Oracle·Linux·8</xccdf-1.2:title> | 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Oracle·Linux·8</xccdf-1.2:title> |
| 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the | 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the |
| 7 | DISA·STIG·for·Oracle·Linux·8·V2R3.</xccdf-1.2:description> | 7 | DISA·STIG·for·Oracle·Linux·8·V2R3.</xccdf-1.2:description> |
| 8 | ····<xccdf-1.2:select·idref="xccdf_org.ssgproject.content_rule_accounts_have_homedir_login_defs"·selected="false"/> | 8 | ····<xccdf-1.2:select·idref="xccdf_org.ssgproject.content_rule_accounts_have_homedir_login_defs"·selected="false"/> |
| 9 | ····<xccdf-1.2:select·idref="xccdf_org.ssgproject.content_rule_accounts_logon_fail_delay"·selected="false"/> | 9 | ····<xccdf-1.2:select·idref="xccdf_org.ssgproject.content_rule_accounts_logon_fail_delay"·selected="false"/> |
| 10 | ····<xccdf-1.2:select·idref="xccdf_org.ssgproject.content_rule_accounts_max_concurrent_login_sessions"·selected="false"/> | 10 | ····<xccdf-1.2:select·idref="xccdf_org.ssgproject.content_rule_accounts_max_concurrent_login_sessions"·selected="false"/> |
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> | 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> |
| 3 | ··<xccdf-1.2:version·time="2025-0 | 3 | ··<xccdf-1.2:version·time="2025-03-01T22:08:00">1</xccdf-1.2:version> |
| 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> | 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> |
| 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·8</xccdf-1.2:title> | 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·8</xccdf-1.2:title> |
| 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the | 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the |
| 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·8·V2R2. | 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·8·V2R2. |
| 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·8,·this | 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·8,·this |
| 9 | configuration·baseline·is·applicable·to·the·operating·system·tier·of | 9 | configuration·baseline·is·applicable·to·the·operating·system·tier·of |
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> | 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> |
| 3 | ··<xccdf-1.2:version·time="2025-0 | 3 | ··<xccdf-1.2:version·time="2025-03-01T22:08:00">1</xccdf-1.2:version> |
| 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> | 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> |
| 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·9</xccdf-1.2:title> | 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·9</xccdf-1.2:title> |
| 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the | 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the |
| 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·9·V2R3. | 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·9·V2R3. |
| 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·9,·this | 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·9,·this |
| 9 | configuration·baseline·is·applicable·to·the·operating·system·tier·of | 9 | configuration·baseline·is·applicable·to·the·operating·system·tier·of |
| Offset 3, 3359 lines modified | Offset 3, 3359 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_shadow_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Verify·Group·Who·Owns·shadow·File</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_shadow_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-service_nfs_disabled_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 11 | ······<ocil:title>Disable·Network·File·System·(nfs)</ocil:title> |
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-service_nfs_disabled_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_send_redirects_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 17 | ······<ocil:title>Disable·Kernel·Parameter·for·Sending·ICMP·Redirects·on·all·IPv4·Interfaces</ocil:title> |
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_send_redirects_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-accounts_umask_etc_login_defs_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 23 | ······<ocil:title>Ensure·the·Default·Umask·is·Set·Correctly·in·login.defs</ocil:title> |
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-accounts_umask_etc_login_defs_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-file_owner | 28 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_sshd_private_key_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Verify· | 29 | ······<ocil:title>Verify·Group·Ownership·on·SSH·Server·Private·*_key·Key·Files</ocil:title> |
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-file_owner | 31 | ········<ocil:test_action_ref>ocil:ssg-file_groupownership_sshd_private_key_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_kernel_module_loading_delete_ocil:questionnaire:1"> | ||
| 41 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_var_log_audit_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>System·Audit·Logs·Must·Have·Mode·0640·or·Less·Permissive</ocil:title> | ||
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_var_log_audit_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-package_bind_removed_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 41 | ······<ocil:title>Uninstall·bind·Package</ocil:title> |
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-package_bind_removed_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-sshd_limit_user_access_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 47 | ······<ocil:title>Limit·Users'·SSH·Access</ocil:title> |
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-sshd_limit_user_access_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_sshd_pub_key_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Verify·On | 53 | ······<ocil:title>Verify·Ownership·on·SSH·Server·Public·*.pub·Key·Files</ocil:title> |
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_sshd_pub_key_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_issue_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Verify· | 59 | ······<ocil:title>Verify·permissions·on·System·Login·Banner</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-file_ | 61 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_issue_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-file_permission_user_init_files_ocil:questionnaire:1"> | ||
| 71 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_networkconfig_modification_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Record·Events·that·Modify·the·System's·Network·Environment</ocil:title> | ||
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_networkconfig_modification_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_sysadmin_actions_ocil:questionnaire:1"> | ||
| 77 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-accounts_umask_etc_profile_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Ensure·the·Default·Umask·is·Set·Correctly·in·/etc/profile</ocil:title> | ||
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-a | 73 | ········<ocil:test_action_ref>ocil:ssg-accounts_umask_etc_profile_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-selinux_policytype_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 77 | ······<ocil:title>Configure·SELinux·Policy</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-selinux_policytype_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-accounts_user_dot_user_ownership_ocil:questionnaire:1"> | ||
| 89 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_kernel_module_loading_init_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Ensure·auditd·Collects·Information·on·Kernel·Module·Loading·-·init_module</ocil:title> | ||
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-a | 85 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_kernel_module_loading_init_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-g | 88 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_files_permissions_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure· | 89 | ······<ocil:title>Ensure·System·Log·Files·Have·Correct·Permissions</ocil:title> |
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-g | 91 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_files_permissions_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_action_mail_acct_ocil:questionnaire:1"> | ||
| 101 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_cron_weekly_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Verify·Group·Who·Owns·cron.weekly</ocil:title> | ||
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_cron_weekly_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-package_telnet_removed_ocil:questionnaire:1"> | 100 | ····<ocil:questionnaire·id="ocil:ssg-package_telnet-server_removed_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 101 | ······<ocil:title>Uninstall·telnet-server·Package</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-package_telnet_removed_action:testaction:1</ocil:test_action_ref> | 103 | ········<ocil:test_action_ref>ocil:ssg-package_telnet-server_removed_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-pa | 106 | ····<ocil:questionnaire·id="ocil:ssg-package_squid_removed_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 107 | ······<ocil:title>Uninstall·squid·Package</ocil:title> |
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-pa | 109 | ········<ocil:test_action_ref>ocil:ssg-package_squid_removed_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_var_log_audit_noexec_ocil:questionnaire:1"> | ||
| 119 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_passwd_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Record·Events·that·Modify·User/Group·Information·-·/etc/passwd</ocil:title> | ||
| 120 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_usergroup_modification_passwd_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| Max diff block lines reached; 723293/735714 bytes (98.31%) of diff not shown. | |||
| Offset 3, 4135 lines modified | Offset 3, 4135 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-set_password_hashing_algorithm_systemauth_ocil:questionnaire:1"> | ||
| 11 | ···· | 10 | ····<ocil:questionnaire·id="ocil:ssg-service_iptables_enabled_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Verify·iptables·Enabled</ocil:title> | ||
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-se | 13 | ········<ocil:test_action_ref>ocil:ssg-service_iptables_enabled_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-kernel_ | 16 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Enable·module·signature·verification</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-kernel_ | 19 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_ | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_group_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Verify· | 23 | ······<ocil:title>Verify·Group·Who·Owns·Backup·group·File</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_ | 25 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_backup_etc_group_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_shared_media_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-grub2_enable_iommu_force_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>IOMMU·configuration·directive</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-grub2_enable_iommu_force_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_root_password_login_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Disable·SSH·root·Login·with·a·Password·(Insecure)</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_root_password_login_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_mail_alias_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_opasswd_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Record·Events·that·Modify·User/Group·Information·-·/etc/security/opasswd</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_usergroup_modification_opasswd_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_sha512_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Sign·kernel·modules·with·SHA-512</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_sha512_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-set_iptables_default_rule_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_max_log_file_action_stig_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Configure·auditd·max_log_file_action·Upon·Reaching·Maximum·Log·Size</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_max_log_file_action_stig_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-set_ip6tables_default_rule_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_num_logs_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Configure·auditd·Number·of·Logs·Retained</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_num_logs_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_group_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Record·Events·that·Modify·User/Group·Information·-·/etc/group</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_usergroup_modification_group_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_ | 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_devkmem_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Disable· | 71 | ······<ocil:title>Disable·/dev/kmem·virtual·device·support</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_ | 73 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_devkmem_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_group_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Verify·Group·Who·Owns·group·File</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_group_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_lcredit_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Minimum·Lowercase·Characters</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_lcredit_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_var_log_messages_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_randomize_base_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Randomize·the·address·of·the·kernel·image·(KASLR)</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_randomize_base_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-selinux_confinement_of_daemons_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Ensure·No·Daemons·are·Unconfined·by·SELinux</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-selinux_confinement_of_daemons_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-service_ntpd_enabled_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Enable·the·NTP·Daemon</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-service_ntpd_enabled_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-package_nss-tools_installed_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-account_passwords_pam_faillock_audit_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Account·Lockouts·Must·Be·Logged</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-account_passwords_pam_faillock_audit_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-file_o | 112 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_library_dirs_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Verify· | 113 | ······<ocil:title>Verify·that·Shared·Library·Files·Have·Restrictive·Permissions</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-file_o | 115 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_library_dirs_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_hourly_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Verify·Permissions·on·cron.hourly</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_cron_hourly_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| Max diff block lines reached; 867128/879528 bytes (98.59%) of diff not shown. | |||
| Offset 71, 226 lines modified | Offset 71, 226 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="machine"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 87 | ········ | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 88 | ········</cpe-lang:logical-test> | ||
| 89 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="package_ | 89 | ····<cpe-lang:platform·id="package_rsyslog"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 98 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 99 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 100 | ····<cpe-lang:platform·id=" | 94 | ····<cpe-lang:platform·id="package_ntp"> |
| 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 103 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 104 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 105 | ····<cpe-lang:platform·id=" | 99 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 108 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id=" | 104 | ····<cpe-lang:platform·id="package_postfix"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 113 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 114 | ········</cpe-lang:logical-test> | ||
| 115 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 116 | ········ | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 117 | ········</cpe-lang:logical-test> | ||
| 118 | ······</cpe-lang:logical-test> | 107 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 108 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="not_ | 109 | ····<cpe-lang:platform·id="not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw_and_system_with_kernel"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 111 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> | ||
| 124 | ········</cpe-lang:logical-test> | ||
| 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_ | 112 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 127 | ········</cpe-lang:logical-test> | 113 | ········</cpe-lang:logical-test> |
| 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | ||
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 128 | ······</cpe-lang:logical-test> | 117 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 118 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw | 119 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 121 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 133 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 122 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 134 | ········</cpe-lang:logical-test> | 123 | ········</cpe-lang:logical-test> |
| 135 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 124 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 136 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 125 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 137 | ········</cpe-lang:logical-test> | 126 | ········</cpe-lang:logical-test> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 139 | ······</cpe-lang:logical-test> | 127 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 128 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id=" | 129 | ····<cpe-lang:platform·id="package_pam"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 132 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 133 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id="package_ | 134 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 149 | ······</cpe-lang:logical-test> | 137 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 138 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id=" | 139 | ····<cpe-lang:platform·id="grub2"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 142 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 143 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id=" | 144 | ····<cpe-lang:platform·id="not_bootc"> |
| 145 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> | ||
| 147 | ······</cpe-lang:logical-test> | ||
| 148 | ····</cpe-lang:platform> | ||
| 149 | ····<cpe-lang:platform·id="not_bootc_and_not_container"> | ||
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 151 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 152 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 153 | ········</cpe-lang:logical-test> | ||
| 154 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 155 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_container:def:1"/> | ||
| 156 | ········</cpe-lang:logical-test> | ||
| 159 | ······</cpe-lang:logical-test> | 157 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 158 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id="package_chrony_or_package_ntp"> | 159 | ····<cpe-lang:platform·id="package_chrony_or_package_ntp"> |
| 162 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 160 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> | 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 163 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 164 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 168 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 171 | ······</cpe-lang:logical-test> | ||
| 172 | ····</cpe-lang:platform> | ||
| 173 | ····<cpe-lang:platform·id="package_ | 165 | ····<cpe-lang:platform·id="package_logrotate"> |
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 176 | ······</cpe-lang:logical-test> | 168 | ······</cpe-lang:logical-test> |
| 177 | ····</cpe-lang:platform> | 169 | ····</cpe-lang:platform> |
| 178 | ····<cpe-lang:platform·id=" | 170 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 179 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 181 | ······</cpe-lang:logical-test> | 173 | ······</cpe-lang:logical-test> |
| 182 | ····</cpe-lang:platform> | 174 | ····</cpe-lang:platform> |
| 183 | ····<cpe-lang:platform·id="package_iptables"> | 175 | ····<cpe-lang:platform·id="package_iptables"> |
| 184 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 176 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Max diff block lines reached; 657635/671167 bytes (97.98%) of diff not shown. | |||
| Offset 3, 5227 lines modified | Offset 3, 5227 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_minlen_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Ensure· | 11 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Minimum·Length</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_minlen_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_all_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Enable·automatic·signing·of·all·modules</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_all_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_monthly_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Verify·Owner·on·cron.monthly</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_monthly_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-configure_ssh_crypto_policy_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Configure·S | 29 | ······<ocil:title>Configure·SSH·to·use·System·Crypto·Policy</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-configure_ssh_crypto_policy_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-s | 34 | ····<ocil:questionnaire·id="ocil:ssg-service_abrtd_disabled_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Disable·Automatic·Bug·Reporting·Tool·(abrtd)</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-s | 37 | ········<ocil:test_action_ref>ocil:ssg-service_abrtd_disabled_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-chronyd_specify_remote_server_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>A·remote·time·server·for·Chrony·is·configured</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-chronyd_specify_remote_server_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_panic_timeout_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Kernel·panic·timeout</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_panic_timeout_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-grub2_disable_recovery_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Disable· | 53 | ······<ocil:title>Disable·Recovery·Booting</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-grub2_disable_recovery_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_umount2_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-· | 59 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·umount2</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_ | 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_umount2_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_shadow_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Verify·Permissions·on·shadow·File</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-package_xinetd_removed_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Uninstall·xinetd·Package</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-package_xinetd_removed_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions | 76 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_files_permissions_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Ensure·System·Log·Files·Have·Correct·Permissions</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-file_permissions | 79 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_files_permissions_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_group_ocil:questionnaire:1"> | ||
| 83 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-sudo_custom_logfile_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Ensure·Sudo·Logfile·Exists·-·sudo·logfile</ocil:title> | ||
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-sudo_custom_logfile_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-s | 88 | ····<ocil:questionnaire·id="ocil:ssg-service_iptables_enabled_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Verify·iptables·Enabled</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-s | 91 | ········<ocil:test_action_ref>ocil:ssg-service_iptables_enabled_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-s | 94 | ····<ocil:questionnaire·id="ocil:ssg-service_autofs_disabled_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Disable·the·Automounter</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-s | 97 | ········<ocil:test_action_ref>ocil:ssg-service_autofs_disabled_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_sshd_pub_key_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Verify· | 101 | ······<ocil:title>Verify·Ownership·on·SSH·Server·Public·*.pub·Key·Files</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-file_ | 103 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_sshd_pub_key_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-auditd_log_format_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Resolve·information·before·writing·to·audit·logs</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-auditd_log_format_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_ | 112 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_weekly_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Verify·Permissions·on·cron.weekly</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_ | 115 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_cron_weekly_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 118 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_cron_allow_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Verify· | 119 | ······<ocil:title>Verify·Group·Who·Owns·/etc/cron.allow·file</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-file_ | 121 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_cron_allow_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 124 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_devkmem_ocil:questionnaire:1"> |
| 125 | ······<ocil:title> | 125 | ······<ocil:title>Disable·/dev/kmem·virtual·device·support</ocil:title> |
| 126 | ······<ocil:actions> | 126 | ······<ocil:actions> |
| 127 | ········<ocil:test_action_ref>ocil:ssg- | 127 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_devkmem_action:testaction:1</ocil:test_action_ref> |
| 128 | ······</ocil:actions> | 128 | ······</ocil:actions> |
| Max diff block lines reached; 865146/877816 bytes (98.56%) of diff not shown. | |||
| Offset 71, 217 lines modified | Offset 71, 217 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="machine"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 88 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 89 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 90 | ····<cpe-lang:platform·id="aa | 89 | ····<cpe-lang:platform·id="package_rsyslog"> |
| 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 93 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 94 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 95 | ····<cpe-lang:platform·id=" | 94 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> | ||
| 97 | ······</cpe-lang:logical-test> | ||
| 98 | ····</cpe-lang:platform> | ||
| 99 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 98 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 99 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 100 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 104 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 102 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 106 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 103 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 107 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 104 | ········</cpe-lang:logical-test> | 108 | ········</cpe-lang:logical-test> |
| 105 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 109 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 106 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 110 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 107 | ········</cpe-lang:logical-test> | 111 | ········</cpe-lang:logical-test> |
| 108 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id=" | 114 | ····<cpe-lang:platform·id="package_pam"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 113 | ······</cpe-lang:logical-test> | 117 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 118 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id=" | 119 | ····<cpe-lang:platform·id="wifi-iface"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 118 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> | ||
| 119 | ········</cpe-lang:logical-test> | ||
| 120 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 121 | ········ | 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 122 | ········</cpe-lang:logical-test> | ||
| 123 | ······</cpe-lang:logical-test> | 122 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 123 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id=" | 124 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 128 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 129 | ········</cpe-lang:logical-test> | ||
| 130 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 131 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 132 | ········</cpe-lang:logical-test> | ||
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 134 | ······</cpe-lang:logical-test> | 127 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 128 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id=" | 129 | ····<cpe-lang:platform·id="grub2"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 139 | ······</cpe-lang:logical-test> | 132 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 133 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id=" | 134 | ····<cpe-lang:platform·id="not_bootc"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 135 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 137 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 138 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id=" | 139 | ····<cpe-lang:platform·id="not_bootc_and_not_container"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 142 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 143 | ········</cpe-lang:logical-test> | ||
| 144 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 145 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_container:def:1"/> | ||
| 146 | ········</cpe-lang:logical-test> | ||
| 149 | ······</cpe-lang:logical-test> | 147 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 148 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id="package_ | 149 | ····<cpe-lang:platform·id="package_logrotate"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 152 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 153 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id="aarch64_arch | 154 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 157 | ······<cpe-lang:logical-test·operator=" | 155 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 160 | ······</cpe-lang:logical-test> | 157 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 158 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id="package_ | 159 | ····<cpe-lang:platform·id="package_iptables"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 162 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 163 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id="package_ | 164 | ····<cpe-lang:platform·id="package_systemd"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 167 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 168 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id="package_ | 169 | ····<cpe-lang:platform·id="package_autofs_and_system_with_kernel"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 170 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> |
| 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 175 | ······</cpe-lang:logical-test> | 173 | ······</cpe-lang:logical-test> |
| 176 | ····</cpe-lang:platform> | 174 | ····</cpe-lang:platform> |
| 177 | ····<cpe-lang:platform·id="package_ | 175 | ····<cpe-lang:platform·id="package_chrony"> |
| 178 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 176 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 177 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 180 | ······</cpe-lang:logical-test> | 178 | ······</cpe-lang:logical-test> |
| 181 | ····</cpe-lang:platform> | 179 | ····</cpe-lang:platform> |
| 182 | ····<cpe-lang:platform·id=" | 180 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 183 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 181 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 184 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 182 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 185 | ······</cpe-lang:logical-test> | 183 | ······</cpe-lang:logical-test> |
| 186 | ····</cpe-lang:platform> | 184 | ····</cpe-lang:platform> |
| Max diff block lines reached; 629884/644133 bytes (97.79%) of diff not shown. | |||
| Offset 3, 3963 lines modified | Offset 3, 3963 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-dconf_gnome_screensaver_mode_blank_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Implement·Blank·Screensaver</ocil:title> | ||
| 11 | ······<ocil:title>Remove·NIS·Client</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-package_ypbind_removed_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-service_telnet_disabled_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Disable·telnet·Service</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-service_telnet_disabled_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-ensure_gpgcheck_never_disabled_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Ensure·gpgcheck·Enabled·for·All·dnf·Package·Repositories</ocil:title> | ||
| 24 | ······<ocil:actions> | ||
| 25 | ········<ocil:test_action_ref>ocil:ssg-ensure_gpgcheck_never_disabled_action:testaction:1</ocil:test_action_ref> | ||
| 26 | ······</ocil:actions> | ||
| 27 | ····</ocil:questionnaire> | ||
| 28 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_var_log_audit_ocil:questionnaire:1"> | ||
| 29 | ······<ocil:title>System·Audit·Logs·Must·Have·Mode·0640·or·Less·Permissive</ocil:title> | ||
| 30 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-dconf_gnome_screensaver_mode_blank_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_motd_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 17 | ······<ocil:title>Verify·permissions·on·Message·of·the·Day·Banner</ocil:title> |
| 36 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_motd_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_dictcheck_ocil:questionnaire:1"> | ||
| 41 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_accept_source_route_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv4·Interfaces·by·Default</ocil:title> | ||
| 42 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_accept_source_route_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-package_talk-server_removed_ocil:questionnaire:1"> | ||
| 47 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_audit_configuration_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Audit·Configuration·Files·Must·Be·Owned·By·Group·root</ocil:title> | ||
| 48 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-file_groupownership_audit_configuration_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_daily_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 35 | ······<ocil:title>Verify·Permissions·on·cron.daily</ocil:title> |
| 54 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_cron_daily_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_networkconfig_modification_network_scripts_ocil:questionnaire:1"> | ||
| 59 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-package_logrotate_installed_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Ensure·logrotate·is·Installed</ocil:title> | ||
| 60 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-package_logrotate_installed_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-disable_ctrlaltdel_reboot_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 47 | ······<ocil:title>Disable·Ctrl-Alt-Del·Reboot·Activation</ocil:title> |
| 66 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-disable_ctrlaltdel_reboot_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-package_xinetd_removed_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 53 | ······<ocil:title>Uninstall·xinetd·Package</ocil:title> |
| 72 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-package_xinetd_removed_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-use_pam_wheel_group_for_su_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 59 | ······<ocil:title>Enforce·Usage·of·pam_wheel·with·Group·Parameter·for·su·Authentication</ocil:title> |
| 78 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-use_pam_wheel_group_for_su_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_ | 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_setxattr_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-· | 65 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·setxattr</ocil:title> |
| 84 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_ | 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_setxattr_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-dconf_gnome_screensaver_idle_activation_enabled_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>En | 71 | ······<ocil:title>Enable·GNOME3·Screensaver·Idle·Activation</ocil:title> |
| 90 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-dconf_gnome_screensaver_idle_activation_enabled_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_allow_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 77 | ······<ocil:title>Verify·User·Who·Owns·/etc/cron.allow·file</ocil:title> |
| 96 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_allow_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_sshd_config_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 83 | ······<ocil:title>Verify·Group·Who·Owns·SSH·Server·config·file</ocil:title> |
| 102 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_sshd_config_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_rmdir_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 89 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·rmdir</ocil:title> |
| 108 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_rmdir_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-socket_systemd-journal-remote_disabled_ocil:questionnaire:1"> | ||
| 113 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_grub2_cfg_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Verify·/boot/grub2/grub.cfg·User·Ownership</ocil:title> | ||
| 114 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-file_owner_grub2_cfg_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_tmp_noexec_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 101 | ······<ocil:title>Add·noexec·Option·to·/tmp</ocil:title> |
| 120 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-mount_option_tmp_noexec_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_flush_ocil:questionnaire:1"> |
| Max diff block lines reached; 1008159/1020212 bytes (98.82%) of diff not shown. | |||
| Offset 3, 4965 lines modified | Offset 3, 4965 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-service_named_disabled_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Disable·named·Service</ocil:title> | ||
| 11 | ······<ocil:title>Verify·Owner·on·cron.weekly</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_weekly_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_grub2_cfg_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Verify·/boot/grub2/grub.cfg·Group·Ownership</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_grub2_cfg_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-directory_permissions_var_log_audit_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>System·Audit·Logs·Must·Have·Mode·0750·or·Less·Permissive</ocil:title> | ||
| 24 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-service_named_disabled_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchown_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 17 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchown</ocil:title> |
| 30 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchown_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_ungroupowned_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 23 | ······<ocil:title>Ensure·All·Files·Are·Owned·by·a·Group</ocil:title> |
| 36 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_ungroupowned_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-gid_passwd_group_same_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 29 | ······<ocil:title>All·GIDs·referenced·in·/etc/passwd·must·be·defined·in·/etc/group</ocil:title> |
| 42 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-gid_passwd_group_same_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-accounts_t | 34 | ····<ocil:questionnaire·id="ocil:ssg-account_disable_post_pw_expiration_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Set· | 35 | ······<ocil:title>Set·Account·Expiration·Following·Inactivity</ocil:title> |
| 48 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-accounts_t | 37 | ········<ocil:test_action_ref>ocil:ssg-account_disable_post_pw_expiration_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv | 40 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_accept_ra_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 41 | ······<ocil:title>Disable·Accepting·Router·Advertisements·on·all·IPv6·Interfaces·by·Default</ocil:title> |
| 54 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv | 43 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_default_accept_ra_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-sudoers_explicit_command_args_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 47 | ······<ocil:title>Explicit·arguments·in·sudo·specifications</ocil:title> |
| 60 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-sudoers_explicit_command_args_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_hourly_ocil:questionnaire:1"> | ||
| 65 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fremovexattr_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fremovexattr</ocil:title> | ||
| 66 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fremovexattr_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-service_snmpd_disabled_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 59 | ······<ocil:title>Disable·snmpd·Service</ocil:title> |
| 72 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-service_snmpd_disabled_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-package_rsyslog_installed_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 65 | ······<ocil:title>Ensure·rsyslog·is·Installed</ocil:title> |
| 78 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-package_rsyslog_installed_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_force_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 71 | ······<ocil:title>Require·modules·to·be·validly·signed</ocil:title> |
| 84 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_force_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_list_ocil:questionnaire:1"> | ||
| 89 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-account_use_centralized_automated_auth_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Use·Centralized·and·Automated·Authentication</ocil:title> | ||
| 90 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-account_use_centralized_automated_auth_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-s | 82 | ····<ocil:questionnaire·id="ocil:ssg-service_chronyd_enabled_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 83 | ······<ocil:title>The·Chronyd·service·is·enabled</ocil:title> |
| 96 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-s | 85 | ········<ocil:test_action_ref>ocil:ssg-service_chronyd_enabled_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-se | 88 | ····<ocil:questionnaire·id="ocil:ssg-service_atd_disabled_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 89 | ······<ocil:title>Disable·At·Service·(atd)</ocil:title> |
| 102 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-se | 91 | ········<ocil:test_action_ref>ocil:ssg-service_atd_disabled_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_empty_passwords_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 95 | ······<ocil:title>Disable·SSH·Access·via·Empty·Passwords</ocil:title> |
| 108 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_empty_passwords_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_umount2_ocil:questionnaire:1"> | ||
| 113 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_shadow_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Verify·Group·Who·Owns·Backup·shadow·File</ocil:title> | ||
| 114 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-file_owner_backup_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-sudo_add_noexec_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 107 | ······<ocil:title>Ensure·Privileged·Escalated·Commands·Cannot·Execute·Other·Commands·-·sudo·NOEXEC</ocil:title> |
| 120 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-sudo_add_noexec_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_cron_weekly_ocil:questionnaire:1"> | ||
| 125 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_kernel_module_loading_init_ocil:questionnaire:1"> |
| Max diff block lines reached; 996965/1009023 bytes (98.80%) of diff not shown. | |||
| Offset 71, 242 lines modified | Offset 71, 242 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_snmpd_and_system_with_kernel"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_snmpd:def:1"/> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 87 | ········ | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 88 | ········</cpe-lang:logical-test> | ||
| 89 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 89 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 98 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 99 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 100 | ····<cpe-lang:platform·id="package_rs | 95 | ····<cpe-lang:platform·id="package_rsyslog"> |
| 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | ||
| 103 | ······</cpe-lang:logical-test> | ||
| 104 | ····</cpe-lang:platform> | ||
| 105 | ····<cpe-lang:platform·id="aarch64_arch"> | ||
| 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 108 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id=" | 100 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 113 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id="package_ | 105 | ····<cpe-lang:platform·id="package_postfix"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id=" | 110 | ····<cpe-lang:platform·id="not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw_and_system_with_kernel"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 113 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 114 | ········</cpe-lang:logical-test> | ||
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 124 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 125 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 126 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 120 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 128 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 122 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 129 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 130 | ········</cpe-lang:logical-test> | 124 | ········</cpe-lang:logical-test> |
| 131 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 132 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 133 | ········</cpe-lang:logical-test> | 127 | ········</cpe-lang:logical-test> |
| 134 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id=" | 130 | ····<cpe-lang:platform·id="package_pam"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 139 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id="wifi-iface"> | 135 | ····<cpe-lang:platform·id="wifi-iface"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id=" | 140 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 149 | ········ | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 150 | ········</cpe-lang:logical-test> | ||
| 151 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 152 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_container:def:1"/> | ||
| 153 | ········</cpe-lang:logical-test> | ||
| 154 | ······</cpe-lang:logical-test> | 143 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 144 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id="not_ | 145 | ····<cpe-lang:platform·id="not_bootc"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> | ||
| 148 | ······</cpe-lang:logical-test> | ||
| 149 | ····</cpe-lang:platform> | ||
| 150 | ····<cpe-lang:platform·id="not_bootc_and_not_container"> | ||
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 152 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 159 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 153 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 160 | ········</cpe-lang:logical-test> | 154 | ········</cpe-lang:logical-test> |
| 161 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 155 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 162 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 156 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_container:def:1"/> |
| 163 | ········</cpe-lang:logical-test> | 157 | ········</cpe-lang:logical-test> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 165 | ······</cpe-lang:logical-test> | 158 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 159 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id="x86_64_arch"> | ||
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 170 | ······</cpe-lang:logical-test> | ||
| 171 | ····</cpe-lang:platform> | ||
| 172 | ····<cpe-lang:platform·id=" | 160 | ····<cpe-lang:platform·id="uefi"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 175 | ······</cpe-lang:logical-test> | 163 | ······</cpe-lang:logical-test> |
| 176 | ····</cpe-lang:platform> | 164 | ····</cpe-lang:platform> |
| 177 | ····<cpe-lang:platform·id="package_ | 165 | ····<cpe-lang:platform·id="package_logrotate"> |
| 178 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 180 | ······</cpe-lang:logical-test> | 168 | ······</cpe-lang:logical-test> |
| 181 | ····</cpe-lang:platform> | 169 | ····</cpe-lang:platform> |
| 182 | ····<cpe-lang:platform·id=" | 170 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 183 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 184 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 185 | ······</cpe-lang:logical-test> | ||
| 186 | ····</cpe-lang:platform> | ||
| 187 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 188 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| Max diff block lines reached; 758175/771396 bytes (98.29%) of diff not shown. | |||
| Offset 3, 7126 lines modified | Offset 3, 7252 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_devkmem_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Disable·/dev/kmem·virtual·device·support</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_devkmem_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_crontab_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Verify· | 17 | ······<ocil:title>Verify·Group·Who·Owns·Crontab</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_crontab_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_privileged_commands_reboot_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·reboot</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-audit_privileged_commands_reboot_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_shadow_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Verify·User·Who·Owns·shadow·File</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_openat_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-package_logrotate_installed_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Ensure·logrotate·is·Installed</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-package_logrotate_installed_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_ungroupowned_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Ensure· | 41 | ······<ocil:title>Ensure·All·Files·Are·Owned·by·a·Group</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_ungroupowned_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_ftruncate_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Enable·different·security·models</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_action:testaction:1</ocil:test_action_ref> | ||
| 50 | ······</ocil:actions> | ||
| 51 | ····</ocil:questionnaire> | ||
| 52 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_minclass_ocil:questionnaire:1"> | ||
| 53 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Minimum·Different·Categories</ocil:title> | ||
| 54 | ······<ocil:actions> | ||
| 49 | ········<ocil:test_action_ref>ocil:ssg-a | 55 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_minclass_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-account_unique_id_ocil:questionnaire:1"> | 58 | ····<ocil:questionnaire·id="ocil:ssg-account_unique_id_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Ensure·All·Accounts·on·the·System·Have·Unique·User·IDs</ocil:title> | 59 | ······<ocil:title>Ensure·All·Accounts·on·the·System·Have·Unique·User·IDs</ocil:title> |
| 54 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-account_unique_id_action:testaction:1</ocil:test_action_ref> | 61 | ········<ocil:test_action_ref>ocil:ssg-account_unique_id_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-grub2_password_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 65 | ······<ocil:title>Set·Boot·Loader·Password·in·grub2</ocil:title> |
| 60 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-grub2_password_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-grub2_rng_core_default_quality_argument_ocil:questionnaire:1"> | ||
| 65 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-service_vsftpd_disabled_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Disable·vsftpd·Service</ocil:title> | ||
| 66 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-service_vsftpd_disabled_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-s | 76 | ····<ocil:questionnaire·id="ocil:ssg-ensure_logrotate_activated_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 77 | ······<ocil:title>Ensure·Logrotate·Runs·Periodically</ocil:title> |
| 72 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-s | 79 | ········<ocil:test_action_ref>ocil:ssg-ensure_logrotate_activated_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_fs_protected_hardlinks_ocil:questionnaire:1"> | ||
| 77 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_max_log_file_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Configure·auditd·Max·Log·File·Size</ocil:title> | ||
| 78 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_max_log_file_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_crontab_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 89 | ······<ocil:title>Verify·Permissions·on·crontab</ocil:title> |
| 84 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_crontab_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-package_bind_removed_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 95 | ······<ocil:title>Uninstall·bind·Package</ocil:title> |
| 90 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-package_bind_removed_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-auditd_audispd_syslog_plugin_activated_ocil:questionnaire:1"> | ||
| 95 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_retry_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Authentication·Retry·Prompts·Permitted·Per-Session</ocil:title> | ||
| 96 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-a | 103 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_retry_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdriverauthmode_ocil:questionnaire:1"> | 106 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdriverauthmode_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Ensure·Rsyslog·Authenticates·Off-Loaded·Audit·Records</ocil:title> | 107 | ······<ocil:title>Ensure·Rsyslog·Authenticates·Off-Loaded·Audit·Records</ocil:title> |
| 102 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdriverauthmode_action:testaction:1</ocil:test_action_ref> | 109 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdriverauthmode_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-fi | 112 | ····<ocil:questionnaire·id="ocil:ssg-configure_ssh_crypto_policy_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 113 | ······<ocil:title>Configure·SSH·to·use·System·Crypto·Policy</ocil:title> |
| 108 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-fi | 115 | ········<ocil:test_action_ref>ocil:ssg-configure_ssh_crypto_policy_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_pwhistory_remember_system_auth_ocil:questionnaire:1"> | ||
| 113 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-service_rdisc_disabled_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Disable·Network·Router·Discovery·Daemon·(rdisc)</ocil:title> | ||
| 114 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-service_rdisc_disabled_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| Max diff block lines reached; 1000273/1012074 bytes (98.83%) of diff not shown. | |||
| Offset 71, 242 lines modified | Offset 71, 242 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_snmpd_and_system_with_kernel"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_snmpd:def:1"/> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 87 | ········ | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 88 | ········</cpe-lang:logical-test> | ||
| 89 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 89 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 98 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 99 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 100 | ····<cpe-lang:platform·id="package_rs | 95 | ····<cpe-lang:platform·id="package_rsyslog"> |
| 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> | ||
| 103 | ······</cpe-lang:logical-test> | ||
| 104 | ····</cpe-lang:platform> | ||
| 105 | ····<cpe-lang:platform·id="aarch64_arch"> | ||
| 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 108 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id=" | 100 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 113 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id="package_ | 105 | ····<cpe-lang:platform·id="package_postfix"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id=" | 110 | ····<cpe-lang:platform·id="not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw_and_system_with_kernel"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 113 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 114 | ········</cpe-lang:logical-test> | ||
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 124 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 125 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 126 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 120 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 128 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 122 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 129 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 130 | ········</cpe-lang:logical-test> | 124 | ········</cpe-lang:logical-test> |
| 131 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 132 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 133 | ········</cpe-lang:logical-test> | 127 | ········</cpe-lang:logical-test> |
| 134 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id=" | 130 | ····<cpe-lang:platform·id="package_pam"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 139 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id="wifi-iface"> | 135 | ····<cpe-lang:platform·id="wifi-iface"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id=" | 140 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 149 | ········ | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 150 | ········</cpe-lang:logical-test> | ||
| 151 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 152 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_container:def:1"/> | ||
| 153 | ········</cpe-lang:logical-test> | ||
| 154 | ······</cpe-lang:logical-test> | 143 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 144 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id="not_ | 145 | ····<cpe-lang:platform·id="not_bootc"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> | ||
| 148 | ······</cpe-lang:logical-test> | ||
| 149 | ····</cpe-lang:platform> | ||
| 150 | ····<cpe-lang:platform·id="not_bootc_and_not_container"> | ||
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 152 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 159 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 153 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 160 | ········</cpe-lang:logical-test> | 154 | ········</cpe-lang:logical-test> |
| 161 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 155 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 162 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 156 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_container:def:1"/> |
| 163 | ········</cpe-lang:logical-test> | 157 | ········</cpe-lang:logical-test> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 165 | ······</cpe-lang:logical-test> | 158 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 159 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id="x86_64_arch"> | ||
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 170 | ······</cpe-lang:logical-test> | ||
| 171 | ····</cpe-lang:platform> | ||
| 172 | ····<cpe-lang:platform·id=" | 160 | ····<cpe-lang:platform·id="uefi"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 175 | ······</cpe-lang:logical-test> | 163 | ······</cpe-lang:logical-test> |
| 176 | ····</cpe-lang:platform> | 164 | ····</cpe-lang:platform> |
| 177 | ····<cpe-lang:platform·id="package_ | 165 | ····<cpe-lang:platform·id="package_logrotate"> |
| 178 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 180 | ······</cpe-lang:logical-test> | 168 | ······</cpe-lang:logical-test> |
| 181 | ····</cpe-lang:platform> | 169 | ····</cpe-lang:platform> |
| 182 | ····<cpe-lang:platform·id=" | 170 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 183 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 184 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 185 | ······</cpe-lang:logical-test> | ||
| 186 | ····</cpe-lang:platform> | ||
| 187 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 188 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| Max diff block lines reached; 757646/770823 bytes (98.29%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-kylinserver10-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-kylinserver10-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-kylinserver10-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-kylinserver10-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-kylinserver10-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-kylinserver10-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-kylinserver10-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-kylinserver10-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-kylinserver10-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-kylinserver10-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-kylinserver10-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-kylinserver10-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-kylinserver10-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-kylinserver10-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:Kylin:Kylin:V10_SP1:ga:server"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:Kylin:Kylin:V10_SP1:ga:server"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Kylin·V10·SP1</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Kylin·V10·SP1</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml">oval:ssg-installed_OS_is_kylinserver10:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml">oval:ssg-installed_OS_is_kylinserver10:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:Kylin:Kylin:V10_SP2:ga:server"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:Kylin:Kylin:V10_SP2:ga:server"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">Kylin·V10·SP2</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">Kylin·V10·SP2</cpe-dict:title> |
| Offset 35, 15 lines modified | Offset 35, 15 lines modified | ||
| 35 | ······</cpe-dict:cpe-item> | 35 | ······</cpe-dict:cpe-item> |
| 36 | ······<cpe-dict:cpe-item·name="cpe:/o:Kylin:Kylin:V10_SP3:ga:server"> | 36 | ······<cpe-dict:cpe-item·name="cpe:/o:Kylin:Kylin:V10_SP3:ga:server"> |
| 37 | ········<cpe-dict:title·xml:lang="en-us">Kylin·V10·SP3</cpe-dict:title> | 37 | ········<cpe-dict:title·xml:lang="en-us">Kylin·V10·SP3</cpe-dict:title> |
| 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml">oval:ssg-installed_OS_is_kylinserver10:def:1</cpe-dict:check> | 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml">oval:ssg-installed_OS_is_kylinserver10:def:1</cpe-dict:check> |
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ····</cpe-dict:cpe-list> | 40 | ····</cpe-dict:cpe-list> |
| 41 | ··</ds:component> | 41 | ··</ds:component> |
| 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-kylinserver10-xccdf.xml"·timestamp="2025-0 | 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-kylinserver10-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_KYLINSERVER10"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_KYLINSERVER10"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 44 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 44 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Kylin·Server·10</xccdf-1.2:title> | 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Kylin·Server·10</xccdf-1.2:title> |
| 46 | ······<xccdf-1.2:description> | 46 | ······<xccdf-1.2:description> |
| 47 | ········This·guide·presents·a·catalog·of·security-relevant | 47 | ········This·guide·presents·a·catalog·of·security-relevant |
| 48 | configuration·settings·for·Kylin·Server·10.·It·is·a·rendering·of | 48 | configuration·settings·for·Kylin·Server·10.·It·is·a·rendering·of |
| 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 112, 96 lines modified | Offset 112, 96 lines modified | ||
| 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 118 | ······<cpe-lang:platform-specification> | 118 | ······<cpe-lang:platform-specification> |
| 119 | ········<cpe-lang:platform·id=" | 119 | ········<cpe-lang:platform·id="machine"> |
| 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 122 | ··········</cpe-lang:logical-test> | ||
| 123 | ········</cpe-lang:platform> | ||
| 124 | ········<cpe-lang:platform·id="grub2_and_system_with_kernel"> | ||
| 125 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 122 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 127 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 123 | ··········</cpe-lang:logical-test> | 128 | ··········</cpe-lang:logical-test> |
| 124 | ········</cpe-lang:platform> | 129 | ········</cpe-lang:platform> |
| 125 | ········<cpe-lang:platform·id="package_rsyslog"> | 130 | ········<cpe-lang:platform·id="package_rsyslog"> |
| 126 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> | 132 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 128 | ··········</cpe-lang:logical-test> | 133 | ··········</cpe-lang:logical-test> |
| 129 | ········</cpe-lang:platform> | 134 | ········</cpe-lang:platform> |
| 130 | ········<cpe-lang:platform·id="package_ | 135 | ········<cpe-lang:platform·id="package_pam"> |
| 131 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 137 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 138 | ··········</cpe-lang:logical-test> | ||
| 139 | ········</cpe-lang:platform> | ||
| 140 | ········<cpe-lang:platform·id="package_shadow-utils"> | ||
| 141 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 142 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 133 | ··········</cpe-lang:logical-test> | 143 | ··········</cpe-lang:logical-test> |
| 134 | ········</cpe-lang:platform> | 144 | ········</cpe-lang:platform> |
| 135 | ········<cpe-lang:platform·id="uefi"> | 145 | ········<cpe-lang:platform·id="uefi"> |
| 136 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 146 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> | 147 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 138 | ··········</cpe-lang:logical-test> | 148 | ··········</cpe-lang:logical-test> |
| 139 | ········</cpe-lang:platform> | 149 | ········</cpe-lang:platform> |
| 140 | ········<cpe-lang:platform·id="package_dnf"> | 150 | ········<cpe-lang:platform·id="package_dnf"> |
| 141 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 142 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> | 152 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 143 | ··········</cpe-lang:logical-test> | 153 | ··········</cpe-lang:logical-test> |
| 144 | ········</cpe-lang:platform> | 154 | ········</cpe-lang:platform> |
| 145 | ········<cpe-lang:platform·id="package_audit"> | 155 | ········<cpe-lang:platform·id="package_autofs_and_system_with_kernel"> |
| 146 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 147 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 148 | ··········</cpe-lang:logical-test> | ||
| 149 | ········</cpe-lang:platform> | ||
| 150 | ········<cpe-lang:platform·id="package_firewalld"> | ||
| 151 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 156 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 157 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> |
| 158 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 153 | ··········</cpe-lang:logical-test> | 159 | ··········</cpe-lang:logical-test> |
| 154 | ········</cpe-lang:platform> | 160 | ········</cpe-lang:platform> |
| 155 | ········<cpe-lang:platform·id="package_ | 161 | ········<cpe-lang:platform·id="package_chrony"> |
| 156 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 162 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 163 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 158 | ··········</cpe-lang:logical-test> | 164 | ··········</cpe-lang:logical-test> |
| 159 | ········</cpe-lang:platform> | 165 | ········</cpe-lang:platform> |
| 160 | ········<cpe-lang:platform·id="package_ | 166 | ········<cpe-lang:platform·id="package_audit"> |
| 161 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 167 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 162 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 168 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 163 | ··········</cpe-lang:logical-test> | 169 | ··········</cpe-lang:logical-test> |
| 164 | ········</cpe-lang:platform> | 170 | ········</cpe-lang:platform> |
| 165 | ········<cpe-lang:platform·id=" | 171 | ········<cpe-lang:platform·id="package_bash"> |
| 166 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 172 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 167 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 173 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 168 | ··········</cpe-lang:logical-test> | 174 | ··········</cpe-lang:logical-test> |
| 169 | ········</cpe-lang:platform> | 175 | ········</cpe-lang:platform> |
| 170 | ········<cpe-lang:platform·id=" | 176 | ········<cpe-lang:platform·id="package_firewalld"> |
| 171 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 177 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 172 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 178 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 173 | ··········</cpe-lang:logical-test> | 179 | ··········</cpe-lang:logical-test> |
| 174 | ········</cpe-lang:platform> | 180 | ········</cpe-lang:platform> |
| 175 | ········<cpe-lang:platform·id=" | 181 | ········<cpe-lang:platform·id="non-uefi"> |
| 176 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 182 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 177 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 183 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| 178 | ··········</cpe-lang:logical-test> | 184 | ··········</cpe-lang:logical-test> |
| 179 | ········</cpe-lang:platform> | 185 | ········</cpe-lang:platform> |
| 180 | ········<cpe-lang:platform·id=" | 186 | ········<cpe-lang:platform·id="system_with_kernel"> |
| 181 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 187 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 182 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 188 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 183 | ··········</cpe-lang:logical-test> | 189 | ··········</cpe-lang:logical-test> |
| 184 | ········</cpe-lang:platform> | 190 | ········</cpe-lang:platform> |
| 185 | ········<cpe-lang:platform·id=" | 191 | ········<cpe-lang:platform·id="package_sudo"> |
| 186 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 192 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 187 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 193 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 188 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 189 | ··········</cpe-lang:logical-test> | 194 | ··········</cpe-lang:logical-test> |
| 190 | ········</cpe-lang:platform> | 195 | ········</cpe-lang:platform> |
| 191 | ········<cpe-lang:platform·id="package_gdm"> | 196 | ········<cpe-lang:platform·id="package_gdm"> |
| 192 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 197 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 193 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 194 | ··········</cpe-lang:logical-test> | 199 | ··········</cpe-lang:logical-test> |
| 195 | ········</cpe-lang:platform> | 200 | ········</cpe-lang:platform> |
| Max diff block lines reached; 494369/507345 bytes (97.44%) of diff not shown. | |||
| Offset 3, 1621 lines modified | Offset 3, 1698 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-package_tftp | 10 | ····<ocil:questionnaire·id="ocil:ssg-package_tftp_removed_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Remove·tftp·Daemon</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-package_tftp | 13 | ········<ocil:test_action_ref>ocil:ssg-package_tftp_removed_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-sudo_restrict_privilege_elevation_to_authorized_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-grub2_password_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Set·Boot·Loader·Password·in·grub2</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-grub2_password_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-service_chronyd_or_ntpd_enabled_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_faillock_deny_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Lock·Accounts·After·Failed·Password·Attempts</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-accounts_passwords_pam_faillock_deny_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_sshd_private_key_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Verify·Permissions·on·SSH·Server·Private·*_key·Key·Files</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_sshd_private_key_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-ensure_gpgcheck_globally_activated_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_mail_alias_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Configure·System·to·Forward·All·Mail·For·The·Root·Account</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-postfix_client_configure_mail_alias_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-s | 40 | ····<ocil:questionnaire·id="ocil:ssg-sudo_custom_logfile_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>En | 41 | ······<ocil:title>Ensure·Sudo·Logfile·Exists·-·sudo·logfile</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-s | 43 | ········<ocil:test_action_ref>ocil:ssg-sudo_custom_logfile_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_passwd_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Verify·Group·Who·Owns·passwd·File</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-s | 52 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_empty_passwords_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Disable·SSH·Access·via·Empty·Passwords</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-s | 55 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_empty_passwords_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-package_ntp_installed_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Install·the·ntp·service</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-package_ntp_installed_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-require_emergency_target_auth_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Require·Authentication·for·Emergency·Systemd·Target</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-require_emergency_target_auth_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-set_ | 70 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_secure_redirects_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Configure·Kernel·Parameter·for·Accepting·Secure·Redirects·By·Default</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-set_ | 73 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_secure_redirects_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_root_login_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Disable·SSH·Root·Login</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_root_login_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-package_rsync_removed_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Uninstall·rsync·Package</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-package_rsync_removed_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_logging_configured_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Ensure· | 89 | ······<ocil:title>Ensure·logging·is·configured</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_logging_configured_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-no_netrc_files_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Verify· | 95 | ······<ocil:title>Verify·No·netrc·Files·Exist</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-no_netrc_files_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-sudo_add_use_pty_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Ensure· | 101 | ······<ocil:title>Ensure·Only·Users·Logged·In·To·Real·tty·Can·Execute·Sudo·-·sudo·use_pty</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-sudo_add_use_pty_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_max_auth_tries_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_shadow_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Verify·Group·Who·Owns·shadow·File</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-s | 112 | ····<ocil:questionnaire·id="ocil:ssg-service_dhcpd_disabled_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>D | 113 | ······<ocil:title>Disable·DHCP·Service</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-service_dhcpd_disabled_action:testaction:1</ocil:test_action_ref> | ||
| 116 | ······</ocil:actions> | ||
| 117 | ····</ocil:questionnaire> | ||
| 118 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_max_auth_tries_ocil:questionnaire:1"> | ||
| 119 | ······<ocil:title>Set·SSH·authentication·attempt·limit</ocil:title> | ||
| 120 | ······<ocil:actions> | ||
| 115 | ········<ocil:test_action_ref>ocil:ssg-s | 121 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_max_auth_tries_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_group_ocil:questionnaire:1"> | 124 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_group_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Verify·User·Who·Owns·group·File</ocil:title> | 125 | ······<ocil:title>Verify·User·Who·Owns·group·File</ocil:title> |
| Max diff block lines reached; 217827/229833 bytes (94.78%) of diff not shown. | |||
| Offset 71, 96 lines modified | Offset 71, 96 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="machine"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id="package_rsyslog"> | 89 | ····<cpe-lang:platform·id="package_rsyslog"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 87 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id="package_ | 94 | ····<cpe-lang:platform·id="package_pam"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | ||
| 98 | ····</cpe-lang:platform> | ||
| 99 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="uefi"> | 104 | ····<cpe-lang:platform·id="uefi"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 107 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 108 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="package_dnf"> | 109 | ····<cpe-lang:platform·id="package_dnf"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id="package_audit"> | 114 | ····<cpe-lang:platform·id="package_autofs_and_system_with_kernel"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 107 | ······</cpe-lang:logical-test> | ||
| 108 | ····</cpe-lang:platform> | ||
| 109 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 112 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id="package_ | 120 | ····<cpe-lang:platform·id="package_chrony"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 117 | ······</cpe-lang:logical-test> | 123 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 124 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id="package_ | 125 | ····<cpe-lang:platform·id="package_audit"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 122 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id=" | 130 | ····<cpe-lang:platform·id="package_bash"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id=" | 135 | ····<cpe-lang:platform·id="package_firewalld"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 132 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id=" | 140 | ····<cpe-lang:platform·id="non-uefi"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| 137 | ······</cpe-lang:logical-test> | 143 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 144 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id=" | 145 | ····<cpe-lang:platform·id="system_with_kernel"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 142 | ······</cpe-lang:logical-test> | 148 | ······</cpe-lang:logical-test> |
| 143 | ····</cpe-lang:platform> | 149 | ····</cpe-lang:platform> |
| 144 | ····<cpe-lang:platform·id=" | 150 | ····<cpe-lang:platform·id="package_sudo"> |
| 145 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 148 | ······</cpe-lang:logical-test> | 153 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 154 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id="package_gdm"> | 155 | ····<cpe-lang:platform·id="package_gdm"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 153 | ······</cpe-lang:logical-test> | 158 | ······</cpe-lang:logical-test> |
| 154 | ····</cpe-lang:platform> | 159 | ····</cpe-lang:platform> |
| 155 | ····<cpe-lang:platform·id="non-uefi"> | ||
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> | ||
| 158 | ······</cpe-lang:logical-test> | ||
| 159 | ····</cpe-lang:platform> | ||
| 160 | ··</cpe-lang:platform-specification> | 160 | ··</cpe-lang:platform-specification> |
| 161 | ··<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP1:ga:server"/> | 161 | ··<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP1:ga:server"/> |
| 162 | ··<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP2:ga:server"/> | 162 | ··<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP2:ga:server"/> |
| 163 | ··<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP3:ga:server"/> | 163 | ··<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP3:ga:server"/> |
| 164 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.76</xccdf-1.2:version> | 164 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.76</xccdf-1.2:version> |
| 165 | ··<xccdf-1.2:metadata> | 165 | ··<xccdf-1.2:metadata> |
| 166 | ····<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> | 166 | ····<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> |
| Offset 802, 21 lines modified | Offset 802, 17 lines modified | ||
| 802 | ··············<xccdf-1.2:reference·href="https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04162018.pdf">PR.IP-3</xccdf-1.2:reference> | 802 | ··············<xccdf-1.2:reference·href="https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04162018.pdf">PR.IP-3</xccdf-1.2:reference> |
| 803 | ··············<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">Req-11.5</xccdf-1.2:reference> | 803 | ··············<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">Req-11.5</xccdf-1.2:reference> |
| 804 | ··············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000445-GPOS-00199</xccdf-1.2:reference> | 804 | ··············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000445-GPOS-00199</xccdf-1.2:reference> |
| 805 | ··············<xccdf-1.2:reference·href="https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf">R76</xccdf-1.2:reference> | 805 | ··············<xccdf-1.2:reference·href="https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf">R76</xccdf-1.2:reference> |
| 806 | ··············<xccdf-1.2:reference·href="https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf">R79</xccdf-1.2:reference> | 806 | ··············<xccdf-1.2:reference·href="https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf">R79</xccdf-1.2:reference> |
| 807 | ··············<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">11.5.2</xccdf-1.2:reference> | 807 | ··············<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">11.5.2</xccdf-1.2:reference> |
| 808 | ··············<xccdf-1.2:rationale>The·AIDE·package·must·be·installed·if·it·is·to·be·available·for·integrity·checking.</xccdf-1.2:rationale> | 808 | ··············<xccdf-1.2:rationale>The·AIDE·package·must·be·installed·if·it·is·to·be·available·for·integrity·checking.</xccdf-1.2:rationale> |
| 809 | ··············<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_aide_installed">[[packages]] | ||
| 810 | name·=·"aide" | ||
| 811 | version·=·"*"</xccdf-1.2:fix> | ||
| 809 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_aide_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_aide | ||
| 810 | class·install_aide·{ | ||
| 811 | ··package·{·'aide': | ||
| 812 | ····ensure·=>·'installed', | ||
| 813 | ··} | ||
| 814 | }</xccdf-1.2:fix> | ||
| 815 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_aide_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Gather·the·package·facts | 812 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_aide_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Gather·the·package·facts |
| 816 | ··package_facts: | 813 | ··package_facts: |
| Max diff block lines reached; 244684/256640 bytes (95.34%) of diff not shown. | |||
| Offset 19, 23 lines modified | Offset 19, 23 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:apple:macos:10.15"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:apple:macos:10.15"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Apple·macOS·10.15</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Apple·macOS·10.15</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-macos1015-cpe-oval.xml">oval:ssg-installed_OS_is_macos1015:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-macos1015-cpe-oval.xml">oval:ssg-installed_OS_is_macos1015:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-xccdf.xml"·timestamp="2025-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of | 40 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 563, 15 lines modified | Offset 563, 15 lines modified | ||
| 563 | ··············<xccdf-1.2:check-content-ref·href="ssg-macos1015-ocil.xml"·name="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"/> | 563 | ··············<xccdf-1.2:check-content-ref·href="ssg-macos1015-ocil.xml"·name="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"/> |
| 564 | ············</xccdf-1.2:check> | 564 | ············</xccdf-1.2:check> |
| 565 | ··········</xccdf-1.2:Rule> | 565 | ··········</xccdf-1.2:Rule> |
| 566 | ········</xccdf-1.2:Group> | 566 | ········</xccdf-1.2:Group> |
| 567 | ······</xccdf-1.2:Group> | 567 | ······</xccdf-1.2:Group> |
| 568 | ····</xccdf-1.2:Benchmark> | 568 | ····</xccdf-1.2:Benchmark> |
| 569 | ··</ds:component> | 569 | ··</ds:component> |
| 570 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-oval.xml"·timestamp="2025-0 | 570 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-oval.xml"·timestamp="2025-03-01T22:08:00"> |
| 571 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 571 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 572 | ······<oval-def:generator> | 572 | ······<oval-def:generator> |
| 573 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 573 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 574 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> | 574 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> |
| 575 | ········<oval:schema_version>5.11</oval:schema_version> | 575 | ········<oval:schema_version>5.11</oval:schema_version> |
| 576 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> | 576 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> |
| 577 | ······</oval-def:generator> | 577 | ······</oval-def:generator> |
| Offset 600, 15 lines modified | Offset 600, 15 lines modified | ||
| 600 | ··········<ind:filepath>/etc/security/audit_control</ind:filepath> | 600 | ··········<ind:filepath>/etc/security/audit_control</ind:filepath> |
| 601 | ··········<ind:pattern·operation="pattern·match">^policy:.*,ahlt.*$</ind:pattern> | 601 | ··········<ind:pattern·operation="pattern·match">^policy:.*,ahlt.*$</ind:pattern> |
| 602 | ··········<ind:instance·datatype="int">1</ind:instance> | 602 | ··········<ind:instance·datatype="int">1</ind:instance> |
| 603 | ········</ind:textfilecontent54_object> | 603 | ········</ind:textfilecontent54_object> |
| 604 | ······</oval-def:objects> | 604 | ······</oval-def:objects> |
| 605 | ····</oval-def:oval_definitions> | 605 | ····</oval-def:oval_definitions> |
| 606 | ··</ds:component> | 606 | ··</ds:component> |
| 607 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-ocil.xml"·timestamp="2025-0 | 607 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-ocil.xml"·timestamp="2025-03-01T22:08:00"> |
| 608 | ····<ocil:ocil> | 608 | ····<ocil:ocil> |
| 609 | ······<ocil:generator> | 609 | ······<ocil:generator> |
| 610 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 610 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 611 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 611 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 612 | ········<ocil:schema_version>2.0</ocil:schema_version> | 612 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 613 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 613 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 614 | ······</ocil:generator> | 614 | ······</ocil:generator> |
| Offset 659, 15 lines modified | Offset 659, 15 lines modified | ||
| 659 | The·output·should·return·process·information·for | 659 | The·output·should·return·process·information·for |
| 660 | com.apple.auditd | 660 | com.apple.auditd |
| 661 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> | 661 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> |
| 662 | ········</ocil:boolean_question> | 662 | ········</ocil:boolean_question> |
| 663 | ······</ocil:questions> | 663 | ······</ocil:questions> |
| 664 | ····</ocil:ocil> | 664 | ····</ocil:ocil> |
| 665 | ··</ds:component> | 665 | ··</ds:component> |
| 666 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"·timestamp="2025-0 | 666 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"·timestamp="2025-03-01T22:08:00"> |
| 667 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 667 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 668 | ······<oval-def:generator> | 668 | ······<oval-def:generator> |
| 669 | ········<oval:product_name>build_cpe.py·from·SCAP·Security·Guide</oval:product_name> | 669 | ········<oval:product_name>build_cpe.py·from·SCAP·Security·Guide</oval:product_name> |
| 670 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> | 670 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> |
| 671 | ········<oval:schema_version>5.11</oval:schema_version> | 671 | ········<oval:schema_version>5.11</oval:schema_version> |
| 672 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> | 672 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> |
| 673 | ······</oval-def:generator> | 673 | ······</oval-def:generator> |
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.1"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.1"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.10"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.10"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4.10</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4.10</cpe-dict:title> |
| Offset 111, 15 lines modified | Offset 111, 15 lines modified | ||
| 111 | ······</cpe-dict:cpe-item> | 111 | ······</cpe-dict:cpe-item> |
| 112 | ······<cpe-dict:cpe-item·name="cpe:/o:redhat:openshift_container_platform_node:4"> | 112 | ······<cpe-dict:cpe-item·name="cpe:/o:redhat:openshift_container_platform_node:4"> |
| 113 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4·Node</cpe-dict:title> | 113 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4·Node</cpe-dict:title> |
| 114 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4_node:def:1</cpe-dict:check> | 114 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4_node:def:1</cpe-dict:check> |
| 115 | ······</cpe-dict:cpe-item> | 115 | ······</cpe-dict:cpe-item> |
| 116 | ····</cpe-dict:cpe-list> | 116 | ····</cpe-dict:cpe-list> |
| 117 | ··</ds:component> | 117 | ··</ds:component> |
| 118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-xccdf.xml"·timestamp="2025-0 | 118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 119 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 119 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 120 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 120 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 121 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> | 121 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> |
| 122 | ······<xccdf-1.2:description> | 122 | ······<xccdf-1.2:description> |
| 123 | ········This·guide·presents·a·catalog·of·security-relevant | 123 | ········This·guide·presents·a·catalog·of·security-relevant |
| 124 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of | 124 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of |
| 125 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 125 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 189, 53 lines modified | Offset 189, 63 lines modified | ||
| 189 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 189 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 190 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 190 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 191 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 191 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 192 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 192 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 193 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 193 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 194 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 194 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 195 | ······<cpe-lang:platform-specification> | 195 | ······<cpe-lang:platform-specification> |
| 196 | ········<cpe-lang:platform·id="ocp4-on-a | 196 | ········<cpe-lang:platform·id="ocp4-on-azure"> |
| 197 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 197 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_a | 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_azure:def:1"/> |
| 199 | ··········</cpe-lang:logical-test> | 199 | ··········</cpe-lang:logical-test> |
| 200 | ········</cpe-lang:platform> | 200 | ········</cpe-lang:platform> |
| 201 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4. | 201 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.12_or_ocp4.13"> |
| 202 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 202 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 203 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 203 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 204 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 204 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 205 | ············</cpe-lang:logical-test> | 205 | ············</cpe-lang:logical-test> |
| 206 | ············<cpe-lang:logical-test·operator="OR"·negate="false"> | 206 | ············<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 207 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 207 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_12:def:1"/> |
| 208 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 208 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_13:def:1"/> |
| 209 | ············</cpe-lang:logical-test> | 209 | ············</cpe-lang:logical-test> |
| 210 | ··········</cpe-lang:logical-test> | 210 | ··········</cpe-lang:logical-test> |
| 211 | ········</cpe-lang:platform> | 211 | ········</cpe-lang:platform> |
| 212 | ········<cpe-lang:platform·id="ocp4.16"> | ||
| 213 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 214 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_16:def:1"/> | ||
| 215 | ··········</cpe-lang:logical-test> | ||
| 216 | ········</cpe-lang:platform> | ||
| 217 | ········<cpe-lang:platform·id="ocp4-n | 212 | ········<cpe-lang:platform·id="ocp4-on-gcp"> |
| 218 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 213 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 219 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_n | 214 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_gcp:def:1"/> |
| 220 | ··········</cpe-lang:logical-test> | 215 | ··········</cpe-lang:logical-test> |
| 221 | ········</cpe-lang:platform> | 216 | ········</cpe-lang:platform> |
| 222 | ········<cpe-lang:platform·id="ocp4-on-hypershift"> | 217 | ········<cpe-lang:platform·id="ocp4-on-hypershift"> |
| 223 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 218 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 224 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | 219 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> |
| 225 | ··········</cpe-lang:logical-test> | 220 | ··········</cpe-lang:logical-test> |
| 226 | ········</cpe-lang:platform> | 221 | ········</cpe-lang:platform> |
| 227 | ········<cpe-lang:platform·id="ocp4-n | 222 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.10_or_ocp4.6_or_ocp4.7_or_ocp4.8_or_ocp4.9"> |
| 228 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 223 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 224 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 229 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 225 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 226 | ············</cpe-lang:logical-test> | ||
| 227 | ············<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 228 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_10:def:1"/> | ||
| 229 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 230 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 231 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 232 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 233 | ············</cpe-lang:logical-test> | ||
| 230 | ··········</cpe-lang:logical-test> | 234 | ··········</cpe-lang:logical-test> |
| 231 | ········</cpe-lang:platform> | 235 | ········</cpe-lang:platform> |
| 232 | ········<cpe-lang:platform·id="ocp4-on- | 236 | ········<cpe-lang:platform·id="ocp4-on-aws"> |
| 233 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 237 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 234 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_ | 238 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_aws:def:1"/> |
| 239 | ··········</cpe-lang:logical-test> | ||
| 240 | ········</cpe-lang:platform> | ||
| 241 | ········<cpe-lang:platform·id="ocp4.6_or_ocp4.7"> | ||
| 242 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 243 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 244 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 235 | ··········</cpe-lang:logical-test> | 245 | ··········</cpe-lang:logical-test> |
| 236 | ········</cpe-lang:platform> | 246 | ········</cpe-lang:platform> |
| 237 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.10_or_ocp4.11_or_ocp4.12_or_ocp4.13_or_ocp4.14_or_ocp4.15_or_ocp4.16_or_ocp4.17_or_ocp4.9"> | 247 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.10_or_ocp4.11_or_ocp4.12_or_ocp4.13_or_ocp4.14_or_ocp4.15_or_ocp4.16_or_ocp4.17_or_ocp4.9"> |
| 238 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 248 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 239 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 249 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 240 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 250 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 241 | ············</cpe-lang:logical-test> | 251 | ············</cpe-lang:logical-test> |
| Offset 248, 138 lines modified | Offset 258, 128 lines modified | ||
| 248 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_15:def:1"/> | 258 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_15:def:1"/> |
| 249 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_16:def:1"/> | 259 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_16:def:1"/> |
| 250 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_17:def:1"/> | 260 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_17:def:1"/> |
| 251 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | 261 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> |
| 252 | ············</cpe-lang:logical-test> | 262 | ············</cpe-lang:logical-test> |
| 253 | ··········</cpe-lang:logical-test> | 263 | ··········</cpe-lang:logical-test> |
| 254 | ········</cpe-lang:platform> | 264 | ········</cpe-lang:platform> |
| 255 | ········<cpe-lang:platform·id="ocp4.6_or_ocp4.7_or_ocp4.8"> | ||
| 256 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 257 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 258 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 259 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 260 | ··········</cpe-lang:logical-test> | ||
| 261 | ········</cpe-lang:platform> | ||
| 262 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6"> | 265 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6"> |
| 263 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 266 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 264 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 267 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 265 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 268 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 266 | ············</cpe-lang:logical-test> | 269 | ············</cpe-lang:logical-test> |
| 267 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | 270 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 268 | ··········</cpe-lang:logical-test> | 271 | ··········</cpe-lang:logical-test> |
| 269 | ········</cpe-lang:platform> | 272 | ········</cpe-lang:platform> |
| 270 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4. | 273 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.8_or_ocp4.9"> |
| 271 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 274 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 272 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 275 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 273 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 276 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| Max diff block lines reached; 914768/927951 bytes (98.58%) of diff not shown. | |||
| Offset 3, 2541 lines modified | Offset 3, 2541 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-secrets_no_environment_variables_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Do·Not·Use·Environment·Variables·with·Secrets</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-secrets_no_environment_variables_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-general_apply_scc_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Apply·Security·Context·to·Your·Pods·and·Containers</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-general_apply_scc_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-controller_insecure_port_disabled_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Ensure·Controller·insecure·port·argument·is·unset</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-controller_insecure_port_disabled_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 28 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_ovn_cni_server_sock_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Verify· | 29 | ······<ocil:title>Verify·User·Who·Owns·The·OVNKubernetes·Socket</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-file_ | 31 | ········<ocil:test_action_ref>ocil:ssg-file_owner_ovn_cni_server_sock_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-routes_protected_by_tls_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-api_server_kubelet_certificate_authority_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Configure·the·kubelet·Certificate·Authority·for·the·API·Server</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-r | 37 | ········<ocil:test_action_ref>ocil:ssg-api_server_kubelet_certificate_authority_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_var_log_oauth_audit_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_integrity_notification_enabled_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Ensure·the·notification·is·enabled·for·file·integrity·operator</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-file_ | 43 | ········<ocil:test_action_ref>ocil:ssg-file_integrity_notification_enabled_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-i | 46 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_var_log_oauth_apiserver_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Ensure·/var/log/oauth-apiserver·Located·On·Separate·Partition</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-i | 49 | ········<ocil:test_action_ref>ocil:ssg-partition_for_var_log_oauth_apiserver_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-directory_permissions_var_log_ocp_audit_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-container_security_operator_exists_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Make·sure·the·Container·Security·Operator·is·installed</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-container_security_operator_exists_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-master_taint_noschedule_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Verify·that·Control·Plane·Nodes·are·not·schedulable·for·workloads</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-master_taint_noschedule_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-api_server_tls_cert_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Configure·the·Certificate·for·the·API·Server</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-api_server_tls_cert_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-configure_egress_ip_node_assignable_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Check·Egress·IPs·Assignable·to·Nodes</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-configure_egress_ip_node_assignable_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-directory_permissions_var_log_kube_audit_ocil:questionnaire:1"> | ||
| 77 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-scansettingbinding_exists_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Ensure·that·Compliance·Operator·is·scanning·the·cluster</ocil:title> | ||
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-scansettingbinding_exists_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-i | 82 | ····<ocil:questionnaire·id="ocil:ssg-imagestream_sets_schedule_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>All·configured·ImageStreams·are·configured·to·periodically·check·for·updates</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-i | 85 | ········<ocil:test_action_ref>ocil:ssg-imagestream_sets_schedule_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-directory_access_var_log_oauth_audit_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_kubelet_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Verify·Permissions·on·The·Kubelet·Configuration·File</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_kubelet_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-configure_ | 94 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_configure_tls_cert_pre_4_9_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure· | 95 | ······<ocil:title>Ensure·That·The·kubelet·Client·Certificate·Is·Correctly·Set</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-configure_ | 97 | ········<ocil:test_action_ref>ocil:ssg-kubelet_configure_tls_cert_pre_4_9_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-resource_requests_quota_cluster_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_configure_tls_key_pre_4_9_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Ensure·That·The·kubelet·Server·Key·Is·Correctly·Set</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-kubelet_configure_tls_key_pre_4_9_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-api_server_encryption_provider_cipher_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Configure·the·Encryption·Provider·Cipher</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-api_server_encryption_provider_cipher_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-api_server_oauth_https_serving_cert_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Ensure·th | 113 | ······<ocil:title>Ensure·the·openshift-oauth-apiserver·service·uses·TLS</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-api_server_oauth_https_serving_cert_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-file_per | 118 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_ovs_conf_db_lock_s390x_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Verify· | 119 | ······<ocil:title>Verify·Group·Who·Owns·The·Open·vSwitch·Configuration·Database·Lock</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-file_per | 121 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_ovs_conf_db_lock_s390x_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| Max diff block lines reached; 851654/865048 bytes (98.45%) of diff not shown. | |||
| Offset 72, 53 lines modified | Offset 72, 63 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="ocp4-on-a | 79 | ····<cpe-lang:platform·id="ocp4-on-azure"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_a | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_azure:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4. | 84 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.12_or_ocp4.13"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 86 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 87 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 87 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 88 | ········</cpe-lang:logical-test> | 88 | ········</cpe-lang:logical-test> |
| 89 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | 89 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 90 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 90 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_12:def:1"/> |
| 91 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 91 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_13:def:1"/> |
| 92 | ········</cpe-lang:logical-test> | 92 | ········</cpe-lang:logical-test> |
| 93 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 94 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 95 | ····<cpe-lang:platform·id="ocp4.16"> | ||
| 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_16:def:1"/> | ||
| 98 | ······</cpe-lang:logical-test> | ||
| 99 | ····</cpe-lang:platform> | ||
| 100 | ····<cpe-lang:platform·id="ocp4-n | 95 | ····<cpe-lang:platform·id="ocp4-on-gcp"> |
| 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_n | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_gcp:def:1"/> |
| 103 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 104 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 105 | ····<cpe-lang:platform·id="ocp4-on-hypershift"> | 100 | ····<cpe-lang:platform·id="ocp4-on-hypershift"> |
| 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> |
| 108 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id="ocp4-n | 105 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.10_or_ocp4.6_or_ocp4.7_or_ocp4.8_or_ocp4.9"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 108 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 109 | ········</cpe-lang:logical-test> | ||
| 110 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 111 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_10:def:1"/> | ||
| 112 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 113 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 114 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 115 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 116 | ········</cpe-lang:logical-test> | ||
| 113 | ······</cpe-lang:logical-test> | 117 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 118 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id="ocp4-on- | 119 | ····<cpe-lang:platform·id="ocp4-on-aws"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_ | 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_aws:def:1"/> |
| 122 | ······</cpe-lang:logical-test> | ||
| 123 | ····</cpe-lang:platform> | ||
| 124 | ····<cpe-lang:platform·id="ocp4.6_or_ocp4.7"> | ||
| 125 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 118 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.10_or_ocp4.11_or_ocp4.12_or_ocp4.13_or_ocp4.14_or_ocp4.15_or_ocp4.16_or_ocp4.17_or_ocp4.9"> | 130 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.10_or_ocp4.11_or_ocp4.12_or_ocp4.13_or_ocp4.14_or_ocp4.15_or_ocp4.16_or_ocp4.17_or_ocp4.9"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 132 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 133 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 124 | ········</cpe-lang:logical-test> | 134 | ········</cpe-lang:logical-test> |
| Offset 131, 138 lines modified | Offset 141, 128 lines modified | ||
| 131 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_15:def:1"/> | 141 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_15:def:1"/> |
| 132 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_16:def:1"/> | 142 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_16:def:1"/> |
| 133 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_17:def:1"/> | 143 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_17:def:1"/> |
| 134 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | 144 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> |
| 135 | ········</cpe-lang:logical-test> | 145 | ········</cpe-lang:logical-test> |
| 136 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 137 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 138 | ····<cpe-lang:platform·id="ocp4.6_or_ocp4.7_or_ocp4.8"> | ||
| 139 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 143 | ······</cpe-lang:logical-test> | ||
| 144 | ····</cpe-lang:platform> | ||
| 145 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6"> | 148 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 150 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 148 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 151 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 149 | ········</cpe-lang:logical-test> | 152 | ········</cpe-lang:logical-test> |
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 151 | ······</cpe-lang:logical-test> | 154 | ······</cpe-lang:logical-test> |
| 152 | ····</cpe-lang:platform> | 155 | ····</cpe-lang:platform> |
| 153 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4. | 156 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.8_or_ocp4.9"> |
| 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 158 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 156 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 159 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 157 | ········</cpe-lang:logical-test> | 160 | ········</cpe-lang:logical-test> |
| 158 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | 161 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 159 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_10:def:1"/> | ||
| 160 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 161 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 162 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | 162 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> |
| 163 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | 163 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> |
| 164 | ········</cpe-lang:logical-test> | 164 | ········</cpe-lang:logical-test> |
| 165 | ······</cpe-lang:logical-test> | 165 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 166 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id="ocp4-on-sdn"> | ||
| 167 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift_and_not_ocp4-on-hypershift-hosted"> | ||
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 169 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 170 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | ||
| 171 | ········</cpe-lang:logical-test> | ||
| 172 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 173 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 174 | ········</cpe-lang:logical-test> | ||
| 175 | ······</cpe-lang:logical-test> | ||
| 176 | ····</cpe-lang:platform> | ||
| 177 | ····<cpe-lang:platform·id="not_s390x_arch_and_ocp4-node"> | ||
| 178 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_nod | 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_openshiftsdn:def:1"/> |
| 181 | ······</cpe-lang:logical-test> | ||
| 182 | ····</cpe-lang:platform> | ||
| 183 | ····<cpe-lang:platform·id="ocp4.6_or_ocp4.7"> | ||
| 184 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 185 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 186 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 187 | ······</cpe-lang:logical-test> | 170 | ······</cpe-lang:logical-test> |
| Max diff block lines reached; 10791/23904 bytes (45.14%) of diff not shown. | |||
| Offset 3, 2817 lines modified | Offset 3, 2817 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-s | 10 | ····<ocil:questionnaire·id="ocil:ssg-service_rsyncd_disabled_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Ensure·rsyncd·service·is·disabled</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-s | 13 | ········<ocil:test_action_ref>ocil:ssg-service_rsyncd_disabled_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_accept_ra_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Disable·Accepting·Router·Advertisements·on·all·IPv6·Interfaces·by·Default</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_default_accept_ra_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_accept_redirects_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_sha512_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Sign·kernel·modules·with·SHA-512</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_sha512_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_removexattr_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_acpi_custom_method_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Do·not·allow·ACPI·methods·to·be·inserted/replaced·at·run·time</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_acpi_custom_method_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_dccp_disabled_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-chronyd_specify_remote_server_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>A·remote·time·server·for·Chrony·is·configured</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-chronyd_specify_remote_server_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_secure_redirects_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·Secure·ICMP·Redirects·on·all·IPv4·Interfaces</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_secure_redirects_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-service_squid_disabled_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Disable·Squid</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-service_squid_disabled_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_weekly_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Verify·Owner·on·cron.weekly</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_weekly_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-service_snmpd_disabled_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Disable·snmpd·Service</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-service_snmpd_disabled_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_strictmodes_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Enable·Use·of·Strict·Mode·Checking</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_strictmodes_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-sudo_remove_no_authenticate_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Ensure· | 71 | ······<ocil:title>Ensure·Users·Re-Authenticate·for·Privilege·Escalation·-·sudo·!authenticate</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-sudo_remove_no_authenticate_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_page_table_isolation_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Remove·the·kernel·mapping·in·user·mode</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_page_table_isolation_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-service_sshd_disabled_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Disable· | 83 | ······<ocil:title>Disable·SSH·Server·If·Possible</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-service_sshd_disabled_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_motd_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Verify·ownership·of·Message·of·the·Day·Banner</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_motd_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_daily_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Verify·Permissions·on·cron.daily</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_cron_daily_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_tcp_syncookies_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_tcp_syncookies_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-service_rsyncd_disabled_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_dmesg_restrict_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Restrict·unprivileged·access·to·the·kernel·syslog</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_dmesg_restrict_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-no_empty_passwords_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Prevent·Login·to·Accounts·With·Empty·Password</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-no_empty_passwords_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_at_allow_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Verify·Permissions·on·/etc/at.allow·file</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_at_allow_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 124 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_settimeofday_ocil:questionnaire:1"> |
| 125 | ······<ocil:title> | 125 | ······<ocil:title>Record·attempts·to·alter·time·through·settimeofday</ocil:title> |
| Max diff block lines reached; 904792/917354 bytes (98.63%) of diff not shown. | |||
| Offset 71, 228 lines modified | Offset 71, 228 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="package_snmpd_and_system_with_kernel"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 82 | ········</cpe-lang:logical-test> | ||
| 83 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 84 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_snmpd:def:1"/> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 89 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="aa | 95 | ····<cpe-lang:platform·id="package_rsyslog"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-p | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 100 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="package_ | 105 | ····<cpe-lang:platform·id="package_postfix"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 112 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id=" | 110 | ····<cpe-lang:platform·id="not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw_and_system_with_kernel"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 113 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 114 | ········</cpe-lang:logical-test> | ||
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 120 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 122 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 124 | ········</cpe-lang:logical-test> | 124 | ········</cpe-lang:logical-test> |
| 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 127 | ········</cpe-lang:logical-test> | 127 | ········</cpe-lang:logical-test> |
| 128 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id="package_pam"> | ||
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 133 | ······</cpe-lang:logical-test> | ||
| 134 | ····</cpe-lang:platform> | ||
| 130 | ····<cpe-lang:platform·id="wifi-iface"> | 135 | ····<cpe-lang:platform·id="wifi-iface"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 133 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 140 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 143 | ······</cpe-lang:logical-test> | ||
| 144 | ····</cpe-lang:platform> | ||
| 145 | ····<cpe-lang:platform·id="not_bootc"> | ||
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> | ||
| 148 | ······</cpe-lang:logical-test> | ||
| 149 | ····</cpe-lang:platform> | ||
| 135 | ····<cpe-lang:platform·id="not_bootc_and_not_container"> | 150 | ····<cpe-lang:platform·id="not_bootc_and_not_container"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 152 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 138 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> | 153 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 139 | ········</cpe-lang:logical-test> | 154 | ········</cpe-lang:logical-test> |
| 140 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 155 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 141 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_container:def:1"/> | 156 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_container:def:1"/> |
| 142 | ········</cpe-lang:logical-test> | 157 | ········</cpe-lang:logical-test> |
| 143 | ······</cpe-lang:logical-test> | 158 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 159 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id=" | 160 | ····<cpe-lang:platform·id="package_logrotate"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 148 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 149 | ········</cpe-lang:logical-test> | ||
| 150 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 151 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 152 | ········</cpe-lang:logical-test> | ||
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 163 | ······</cpe-lang:logical-test> | ||
| 164 | ····</cpe-lang:platform> | ||
| 165 | ····<cpe-lang:platform·id="aarch64_arch"> | ||
| 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 154 | ······</cpe-lang:logical-test> | 168 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 169 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id="package_dnf"> | 170 | ····<cpe-lang:platform·id="package_dnf"> |
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> | 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 159 | ······</cpe-lang:logical-test> | 173 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 174 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id=" | 175 | ····<cpe-lang:platform·id="package_iptables"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 176 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-p | 177 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 164 | ······</cpe-lang:logical-test> | 178 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 179 | ····</cpe-lang:platform> |
| 166 | ····<cpe-lang:platform·id="package_ | 180 | ····<cpe-lang:platform·id="package_systemd"> |
| 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 181 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 182 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 169 | ······</cpe-lang:logical-test> | 183 | ······</cpe-lang:logical-test> |
| 170 | ····</cpe-lang:platform> | 184 | ····</cpe-lang:platform> |
| 171 | ····<cpe-lang:platform·id="package_ | 185 | ····<cpe-lang:platform·id="package_chrony"> |
| 172 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 186 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Max diff block lines reached; 706959/720264 bytes (98.15%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS:ga:server"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS:ga:server"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP1</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP1</cpe-dict:title> |
| Offset 35, 15 lines modified | Offset 35, 15 lines modified | ||
| 35 | ······</cpe-dict:cpe-item> | 35 | ······</cpe-dict:cpe-item> |
| 36 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server"> | 36 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server"> |
| 37 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP2</cpe-dict:title> | 37 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP2</cpe-dict:title> |
| 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> | 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> |
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ····</cpe-dict:cpe-list> | 40 | ····</cpe-dict:cpe-list> |
| 41 | ··</ds:component> | 41 | ··</ds:component> |
| 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-xccdf.xml"·timestamp="2025-0 | 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 44 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 44 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> | 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> |
| 46 | ······<xccdf-1.2:description> | 46 | ······<xccdf-1.2:description> |
| 47 | ········This·guide·presents·a·catalog·of·security-relevant | 47 | ········This·guide·presents·a·catalog·of·security-relevant |
| 48 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of | 48 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of |
| 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 112, 172 lines modified | Offset 112, 172 lines modified | ||
| 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 118 | ······<cpe-lang:platform-specification> | 118 | ······<cpe-lang:platform-specification> |
| 119 | ········<cpe-lang:platform·id=" | 119 | ········<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 122 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 122 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 123 | ··········</cpe-lang:logical-test> | 123 | ··········</cpe-lang:logical-test> |
| 124 | ········</cpe-lang:platform> | 124 | ········</cpe-lang:platform> |
| 125 | ········<cpe-lang:platform·id="package_rsyslog"> | 125 | ········<cpe-lang:platform·id="package_rsyslog"> |
| 126 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 126 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> | 127 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 128 | ··········</cpe-lang:logical-test> | 128 | ··········</cpe-lang:logical-test> |
| 129 | ········</cpe-lang:platform> | 129 | ········</cpe-lang:platform> |
| 130 | ········<cpe-lang:platform·id="package_ | 130 | ········<cpe-lang:platform·id="package_ntp"> |
| 131 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 132 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 133 | ··········</cpe-lang:logical-test> | ||
| 134 | ········</cpe-lang:platform> | ||
| 135 | ········<cpe-lang:platform·id="ipv6_enabled"> | ||
| 136 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 137 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> | ||
| 133 | ··········</cpe-lang:logical-test> | 138 | ··········</cpe-lang:logical-test> |
| 134 | ········</cpe-lang:platform> | 139 | ········</cpe-lang:platform> |
| 135 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 140 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 136 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 142 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 138 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 143 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 139 | ············</cpe-lang:logical-test> | 144 | ············</cpe-lang:logical-test> |
| 140 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 145 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 141 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 146 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 142 | ············</cpe-lang:logical-test> | 147 | ············</cpe-lang:logical-test> |
| 143 | ··········</cpe-lang:logical-test> | 148 | ··········</cpe-lang:logical-test> |
| 144 | ········</cpe-lang:platform> | 149 | ········</cpe-lang:platform> |
| 145 | ········<cpe-lang:platform·id=" | 150 | ········<cpe-lang:platform·id="package_pam"> |
| 146 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 152 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 148 | ··········</cpe-lang:logical-test> | 153 | ··········</cpe-lang:logical-test> |
| 149 | ········</cpe-lang:platform> | 154 | ········</cpe-lang:platform> |
| 150 | ········<cpe-lang:platform·id="wifi-iface"> | 155 | ········<cpe-lang:platform·id="wifi-iface"> |
| 151 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 156 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> | 157 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 153 | ··········</cpe-lang:logical-test> | 158 | ··········</cpe-lang:logical-test> |
| 154 | ········</cpe-lang:platform> | 159 | ········</cpe-lang:platform> |
| 155 | ········<cpe-lang:platform·id=" | 160 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 156 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 158 | ············ | 162 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 159 | ············</cpe-lang:logical-test> | ||
| 160 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 161 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_container:def:1"/> | ||
| 162 | ············</cpe-lang:logical-test> | ||
| 163 | ··········</cpe-lang:logical-test> | 163 | ··········</cpe-lang:logical-test> |
| 164 | ········</cpe-lang:platform> | 164 | ········</cpe-lang:platform> |
| 165 | ········<cpe-lang:platform·id=" | 165 | ········<cpe-lang:platform·id="grub2"> |
| 166 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 167 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 168 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 167 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 170 | ··········</cpe-lang:logical-test> | 168 | ··········</cpe-lang:logical-test> |
| 171 | ········</cpe-lang:platform> | 169 | ········</cpe-lang:platform> |
| 172 | ········<cpe-lang:platform·id="not_ | 170 | ········<cpe-lang:platform·id="not_bootc_and_not_container"> |
| 173 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 171 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 172 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 175 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 173 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 176 | ············</cpe-lang:logical-test> | 174 | ············</cpe-lang:logical-test> |
| 177 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 175 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 178 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 176 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_container:def:1"/> |
| 179 | ············</cpe-lang:logical-test> | 177 | ············</cpe-lang:logical-test> |
| 180 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 181 | ··········</cpe-lang:logical-test> | ||
| 182 | ········</cpe-lang:platform> | ||
| 183 | ········<cpe-lang:platform·id="package_dnf"> | ||
| 184 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 185 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> | ||
| 186 | ··········</cpe-lang:logical-test> | 178 | ··········</cpe-lang:logical-test> |
| 187 | ········</cpe-lang:platform> | 179 | ········</cpe-lang:platform> |
| 188 | ········<cpe-lang:platform·id=" | 180 | ········<cpe-lang:platform·id="uefi"> |
| 189 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 181 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 190 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 182 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 191 | ··········</cpe-lang:logical-test> | 183 | ··········</cpe-lang:logical-test> |
| 192 | ········</cpe-lang:platform> | 184 | ········</cpe-lang:platform> |
| 193 | ········<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld | 185 | ········<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> |
| 194 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 186 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 195 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 187 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 196 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 188 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 197 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | ||
| 198 | ··········</cpe-lang:logical-test> | ||
| 199 | ········</cpe-lang:platform> | ||
| 200 | ········<cpe-lang:platform·id="package_firewalld"> | ||
| 201 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| Max diff block lines reached; 1013490/1026485 bytes (98.73%) of diff not shown. | |||
| Offset 3, 5596 lines modified | Offset 3, 5418 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_cron_hourly_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Verify·Group·Who·Owns·cron.hourly</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_cron_hourly_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-selinux_confinement_of_daemons_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Ensure·No·Daemons·are·Unconfined·by·SELinux</ocil:title> | ||
| 17 | ······<ocil:title>Set·Password·Maximum·Age</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-accounts_maximum_age_login_defs_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-accounts_no_uid_except_zero_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Verify·Only·Root·Has·UID·0</ocil:title> | ||
| 24 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-selinux_confinement_of_daemons_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_monthly_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Verify· | 17 | ······<ocil:title>Verify·Owner·on·cron.monthly</ocil:title> |
| 30 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-file_ | 19 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_monthly_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_successful_file_modification_setxattr_ocil:questionnaire:1"> | ||
| 35 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_accept_source_route_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·all·IPv6·Interfaces</ocil:title> | ||
| 36 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_all_accept_source_route_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_gshadow_ocil:questionnaire:1"> | ||
| 41 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_warn_age_login_defs_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Set·Password·Warning·Age</ocil:title> | ||
| 42 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_warn_age_login_defs_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_gshadow_ocil:questionnaire:1"> | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_gshadow_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Verify· | 35 | ······<ocil:title>Verify·Group·Who·Owns·Backup·gshadow·File</ocil:title> |
| 48 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_gshadow_action:testaction:1</ocil:test_action_ref> | 37 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_backup_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-set_password_hashing_algorithm_systemauth_ocil:questionnaire:1"> | ||
| 53 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-account_temp_expire_date_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Assign·Expiration·Date·to·Temporary·Accounts</ocil:title> | ||
| 54 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-account_temp_expire_date_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-package_telnet_removed_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 47 | ······<ocil:title>Remove·telnet·Clients</ocil:title> |
| 60 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-package_telnet_removed_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_daily_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 53 | ······<ocil:title>Verify·Permissions·on·cron.daily</ocil:title> |
| 66 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_cron_daily_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_opasswd_ocil:questionnaire:1"> | ||
| 71 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_dcredit_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Minimum·Digit·Characters</ocil:title> | ||
| 72 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-a | 61 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_dcredit_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_successful_file_modification_chmod_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 65 | ······<ocil:title>Record·Successful·Permission·Changes·to·Files·-·chmod</ocil:title> |
| 78 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_successful_file_modification_chmod_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-se | 70 | ····<ocil:questionnaire·id="ocil:ssg-selinux_policytype_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 71 | ······<ocil:title>Configure·SELinux·Policy</ocil:title> |
| 84 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-se | 73 | ········<ocil:test_action_ref>ocil:ssg-selinux_policytype_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-s | 76 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_loglevel_verbose_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 77 | ······<ocil:title>Set·SSH·Daemon·LogLevel·to·VERBOSE</ocil:title> |
| 90 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-s | 79 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_loglevel_verbose_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_redirects_ocil:questionnaire:1"> | ||
| 95 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_motd_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Verify·permissions·on·Message·of·the·Day·Banner</ocil:title> | ||
| 96 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_motd_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_successful_file_modification_fremovexattr_ocil:questionnaire:1"> | ||
| 101 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-package_aide_installed_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Install·AIDE</ocil:title> | ||
| 102 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-package_aide_installed_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_dictcheck_ocil:questionnaire:1"> | ||
| 107 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_group_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Verify·User·Who·Owns·Backup·group·File</ocil:title> | ||
| 108 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-file_owner_backup_etc_group_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_shadow_ocil:questionnaire:1"> | ||
| 113 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-service_crond_enabled_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Enable·cron·Service</ocil:title> | ||
| 114 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-service_crond_enabled_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_passwd_ocil:questionnaire:1"> | ||
| 119 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_gshadow_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Record·Events·that·Modify·User/Group·Information·-·/etc/gshadow</ocil:title> | ||
| Max diff block lines reached; 530727/542463 bytes (97.84%) of diff not shown. | |||
| Offset 71, 172 lines modified | Offset 71, 172 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id="package_rsyslog"> | 84 | ····<cpe-lang:platform·id="package_rsyslog"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 87 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id="package_ | 89 | ····<cpe-lang:platform·id="package_ntp"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | ||
| 93 | ····</cpe-lang:platform> | ||
| 94 | ····<cpe-lang:platform·id="ipv6_enabled"> | ||
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 99 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 101 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 97 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 102 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 98 | ········</cpe-lang:logical-test> | 103 | ········</cpe-lang:logical-test> |
| 99 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 104 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 100 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 105 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 101 | ········</cpe-lang:logical-test> | 106 | ········</cpe-lang:logical-test> |
| 102 | ······</cpe-lang:logical-test> | 107 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 108 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 109 | ····<cpe-lang:platform·id="package_pam"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="wifi-iface"> | 114 | ····<cpe-lang:platform·id="wifi-iface"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 112 | ······</cpe-lang:logical-test> | 117 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 118 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id=" | 119 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 117 | ········ | 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 118 | ········</cpe-lang:logical-test> | ||
| 119 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 120 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_container:def:1"/> | ||
| 121 | ········</cpe-lang:logical-test> | ||
| 122 | ······</cpe-lang:logical-test> | 122 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 123 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id=" | 124 | ····<cpe-lang:platform·id="grub2"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 129 | ······</cpe-lang:logical-test> | 127 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 128 | ····</cpe-lang:platform> |
| 131 | ····<cpe-lang:platform·id="not_ | 129 | ····<cpe-lang:platform·id="not_bootc_and_not_container"> |
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 131 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 134 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 132 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 135 | ········</cpe-lang:logical-test> | 133 | ········</cpe-lang:logical-test> |
| 136 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 134 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 137 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 135 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_container:def:1"/> |
| 138 | ········</cpe-lang:logical-test> | 136 | ········</cpe-lang:logical-test> |
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 140 | ······</cpe-lang:logical-test> | ||
| 141 | ····</cpe-lang:platform> | ||
| 142 | ····<cpe-lang:platform·id="package_dnf"> | ||
| 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> | ||
| 145 | ······</cpe-lang:logical-test> | 137 | ······</cpe-lang:logical-test> |
| 146 | ····</cpe-lang:platform> | 138 | ····</cpe-lang:platform> |
| 147 | ····<cpe-lang:platform·id=" | 139 | ····<cpe-lang:platform·id="uefi"> |
| 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 150 | ······</cpe-lang:logical-test> | 142 | ······</cpe-lang:logical-test> |
| 151 | ····</cpe-lang:platform> | 143 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld | 144 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 145 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | ||
| 157 | ······</cpe-lang:logical-test> | ||
| 158 | ····</cpe-lang:platform> | ||
| 159 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 162 | ······</cpe-lang:logical-test> | 148 | ······</cpe-lang:logical-test> |
| 163 | ····</cpe-lang:platform> | 149 | ····</cpe-lang:platform> |
| 164 | ····<cpe-lang:platform·id="package_ | 150 | ····<cpe-lang:platform·id="package_dnf"> |
| 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 167 | ······</cpe-lang:logical-test> | 153 | ······</cpe-lang:logical-test> |
| 168 | ····</cpe-lang:platform> | 154 | ····</cpe-lang:platform> |
| 169 | ····<cpe-lang:platform·id="package_iptables"> | 155 | ····<cpe-lang:platform·id="package_iptables"> |
| 170 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 172 | ······</cpe-lang:logical-test> | 158 | ······</cpe-lang:logical-test> |
| 173 | ····</cpe-lang:platform> | 159 | ····</cpe-lang:platform> |
| 174 | ····<cpe-lang:platform·id="package_ | 160 | ····<cpe-lang:platform·id="package_chrony"> |
| 175 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 177 | ······</cpe-lang:logical-test> | 163 | ······</cpe-lang:logical-test> |
| 178 | ····</cpe-lang:platform> | 164 | ····</cpe-lang:platform> |
| 165 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 166 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 168 | ······</cpe-lang:logical-test> | ||
| 169 | ····</cpe-lang:platform> | ||
| 179 | ····<cpe-lang:platform·id="g | 170 | ····<cpe-lang:platform·id="package_audit"> |
| 180 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 181 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 182 | ······</cpe-lang:logical-test> | 173 | ······</cpe-lang:logical-test> |
| 183 | ····</cpe-lang:platform> | 174 | ····</cpe-lang:platform> |
| 184 | ····<cpe-lang:platform·id="package_ | 175 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 185 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 176 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 186 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 177 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 187 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 178 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| Max diff block lines reached; 431294/444458 bytes (97.04%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:15.0"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:15.0"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·15.0</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·15.0</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap15:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap15:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.1"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.1"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.1</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.1</cpe-dict:title> |
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.3"> | 40 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.3"> |
| 41 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.3</cpe-dict:title> | 41 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.3</cpe-dict:title> |
| 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap42:def:1</cpe-dict:check> | 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap42:def:1</cpe-dict:check> |
| 43 | ······</cpe-dict:cpe-item> | 43 | ······</cpe-dict:cpe-item> |
| 44 | ····</cpe-dict:cpe-list> | 44 | ····</cpe-dict:cpe-list> |
| 45 | ··</ds:component> | 45 | ··</ds:component> |
| 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-xccdf.xml"·timestamp="2025-0 | 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 48 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 48 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> | 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> |
| 50 | ······<xccdf-1.2:description> | 50 | ······<xccdf-1.2:description> |
| 51 | ········This·guide·presents·a·catalog·of·security-relevant | 51 | ········This·guide·presents·a·catalog·of·security-relevant |
| 52 | configuration·settings·for·openSUSE.·It·is·a·rendering·of | 52 | configuration·settings·for·openSUSE.·It·is·a·rendering·of |
| 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 116, 163 lines modified | Offset 116, 163 lines modified | ||
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 122 | ······<cpe-lang:platform-specification> | 122 | ······<cpe-lang:platform-specification> |
| 123 | ········<cpe-lang:platform·id=" | 123 | ········<cpe-lang:platform·id="machine"> |
| 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 126 | ··········</cpe-lang:logical-test> | 126 | ··········</cpe-lang:logical-test> |
| 127 | ········</cpe-lang:platform> | 127 | ········</cpe-lang:platform> |
| 128 | ········<cpe-lang:platform·id="a | 128 | ········<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 131 | ··········</cpe-lang:logical-test> | 132 | ··········</cpe-lang:logical-test> |
| 132 | ········</cpe-lang:platform> | 133 | ········</cpe-lang:platform> |
| 133 | ········<cpe-lang:platform·id="package_rsyslog"> | 134 | ········<cpe-lang:platform·id="package_rsyslog"> |
| 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 135 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> | 136 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 136 | ··········</cpe-lang:logical-test> | 137 | ··········</cpe-lang:logical-test> |
| 137 | ········</cpe-lang:platform> | 138 | ········</cpe-lang:platform> |
| 139 | ········<cpe-lang:platform·id="package_postfix"> | ||
| 140 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 141 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 142 | ··········</cpe-lang:logical-test> | ||
| 143 | ········</cpe-lang:platform> | ||
| 138 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 144 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 145 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 140 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 146 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 141 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 147 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 142 | ············</cpe-lang:logical-test> | 148 | ············</cpe-lang:logical-test> |
| 143 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 149 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 144 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 150 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 145 | ············</cpe-lang:logical-test> | 151 | ············</cpe-lang:logical-test> |
| 146 | ··········</cpe-lang:logical-test> | 152 | ··········</cpe-lang:logical-test> |
| 147 | ········</cpe-lang:platform> | 153 | ········</cpe-lang:platform> |
| 148 | ········<cpe-lang:platform·id=" | 154 | ········<cpe-lang:platform·id="package_pam"> |
| 149 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 155 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 151 | ············ | 156 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 152 | ············</cpe-lang:logical-test> | ||
| 153 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 154 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_container:def:1"/> | ||
| 155 | ············</cpe-lang:logical-test> | ||
| 156 | ··········</cpe-lang:logical-test> | 157 | ··········</cpe-lang:logical-test> |
| 157 | ········</cpe-lang:platform> | 158 | ········</cpe-lang:platform> |
| 158 | ········<cpe-lang:platform·id=" | 159 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 160 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 161 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 162 | ··········</cpe-lang:logical-test> | ||
| 163 | ········</cpe-lang:platform> | ||
| 164 | ········<cpe-lang:platform·id="not_bootc_and_not_container"> | ||
| 159 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 165 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 160 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 166 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 161 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 167 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 162 | ············</cpe-lang:logical-test> | 168 | ············</cpe-lang:logical-test> |
| 163 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 169 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 164 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 170 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_container:def:1"/> |
| 165 | ············</cpe-lang:logical-test> | 171 | ············</cpe-lang:logical-test> |
| 166 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 167 | ··········</cpe-lang:logical-test> | 172 | ··········</cpe-lang:logical-test> |
| 168 | ········</cpe-lang:platform> | 173 | ········</cpe-lang:platform> |
| 169 | ········<cpe-lang:platform·id=" | 174 | ········<cpe-lang:platform·id="package_logrotate"> |
| 170 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 175 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 176 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 172 | ··········</cpe-lang:logical-test> | 177 | ··········</cpe-lang:logical-test> |
| 173 | ········</cpe-lang:platform> | 178 | ········</cpe-lang:platform> |
| 174 | ········<cpe-lang:platform·id=" | 179 | ········<cpe-lang:platform·id="aarch64_arch"> |
| 175 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 180 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 176 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 177 | ··········</cpe-lang:logical-test> | ||
| 178 | ········</cpe-lang:platform> | ||
| 179 | ········<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 180 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 181 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 181 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 182 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 183 | ··········</cpe-lang:logical-test> | ||
| 184 | ········</cpe-lang:platform> | ||
| 185 | ········<cpe-lang:platform·id="package_shadow-utils"> | ||
| 186 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 187 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 188 | ··········</cpe-lang:logical-test> | ||
| 189 | ········</cpe-lang:platform> | ||
| 190 | ········<cpe-lang:platform·id="package_postfix"> | ||
| 191 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 192 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 193 | ··········</cpe-lang:logical-test> | 182 | ··········</cpe-lang:logical-test> |
| 194 | ········</cpe-lang:platform> | 183 | ········</cpe-lang:platform> |
| 195 | ········<cpe-lang:platform·id="package_iptables"> | 184 | ········<cpe-lang:platform·id="package_iptables"> |
| 196 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 185 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 197 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 186 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 198 | ··········</cpe-lang:logical-test> | 187 | ··········</cpe-lang:logical-test> |
| 199 | ········</cpe-lang:platform> | 188 | ········</cpe-lang:platform> |
| Max diff block lines reached; 1183339/1195421 bytes (98.99%) of diff not shown. | |||
| Offset 3, 3097 lines modified | Offset 3, 3097 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-accounts_umask_etc_profile_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Ensure·the·Default·Umask·is·Set·Correctly·in·/etc/profile</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-accounts_umask_etc_profile_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_admin_space_left_action_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-dir_perms_world_writable_sticky_bits_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Verify·that·All·World-Writable·Directories·Have·Sticky·Bits·Set</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-dir_perms_world_writable_sticky_bits_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_systemmap_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Verify·Permissions·on·System.map·Files</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_systemmap_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_panic_timeout_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Kernel·panic·timeout</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_panic_timeout_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_files_ | 34 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_files_permissions_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Ensure·Log·Files· | 35 | ······<ocil:title>Ensure·System·Log·Files·Have·Correct·Permissions</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_files_ | 37 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_files_permissions_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-s | 40 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_max_auth_tries_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Set·SSH·authentication·attempt·limit</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-s | 43 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_max_auth_tries_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-dir_ownership_binary_dirs_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Verify·that·System·Executable·Have·Root·Ownership</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-dir_ownership_binary_dirs_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-service_ip6tables_enabled_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-grub2_nosmep_argument_absent_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Ensure·SMEP·is·not·disabled·during·boot</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-grub2_nosmep_argument_absent_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_binfmt_misc_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Disable·kernel·support·for·MISC·binaries</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_binfmt_misc_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-grub2_nosmep_argument_absent_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_sshd_private_key_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Verify·Permissions·on·SSH·Server·Private·*_key·Key·Files</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_sshd_private_key_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-account | 70 | ····<ocil:questionnaire·id="ocil:ssg-account_unique_name_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Ensure·All·Accounts·on·the·System·Have·Unique·Names</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-account | 73 | ········<ocil:test_action_ref>ocil:ssg-account_unique_name_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-account_passwords_pam_faillock_dir_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Account·Lockouts·Must·Persist</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-account_passwords_pam_faillock_dir_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-dir_perms_world_writable_sticky_bits_ocil:questionnaire:1"> | ||
| 83 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-package_cron_installed_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Install·the·cron·service</ocil:title> | ||
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-package_cron_installed_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_watch_localtime_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Record·Attempts·to·Alter·the·localtime·File</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_watch_localtime_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-set_iptables_default_rule_forward_ocil:questionnaire:1"> | ||
| 95 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-accounts_polyinstantiated_tmp_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Configure·Polyinstantiation·of·/tmp·Directories</ocil:title> | ||
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-accounts_polyinstantiated_tmp_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_page_poisoning_no_sanity_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-set_iptables_default_rule_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Set·Default·iptables·Policy·for·Incoming·Packets</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-set_iptables_default_rule_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_legacy_ptys_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Disable·legacy·(BSD)·PTY·support</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_legacy_ptys_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-account_passwords_pam_faillock_audit_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_x11_forwarding_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Enable·Encrypted·X11·Forwarding</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_x11_forwarding_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-s | 118 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_pam_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Enable·PAM</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-s | 121 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_pam_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| Max diff block lines reached; 643634/655759 bytes (98.15%) of diff not shown. | |||
| Offset 71, 163 lines modified | Offset 71, 163 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="machine"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id="a | 83 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="package_rsyslog"> | 89 | ····<cpe-lang:platform·id="package_rsyslog"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 97 | ······</cpe-lang:logical-test> | ||
| 98 | ····</cpe-lang:platform> | ||
| 93 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 99 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 101 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 96 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 102 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 97 | ········</cpe-lang:logical-test> | 103 | ········</cpe-lang:logical-test> |
| 98 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 104 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 99 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 105 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 100 | ········</cpe-lang:logical-test> | 106 | ········</cpe-lang:logical-test> |
| 101 | ······</cpe-lang:logical-test> | 107 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 108 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id=" | 109 | ····<cpe-lang:platform·id="package_pam"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 106 | ········ | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 107 | ········</cpe-lang:logical-test> | ||
| 108 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 109 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_container:def:1"/> | ||
| 110 | ········</cpe-lang:logical-test> | ||
| 111 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 112 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 113 | ····<cpe-lang:platform·id=" | 114 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 117 | ······</cpe-lang:logical-test> | ||
| 118 | ····</cpe-lang:platform> | ||
| 119 | ····<cpe-lang:platform·id="not_bootc_and_not_container"> | ||
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 115 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 121 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 116 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 122 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 117 | ········</cpe-lang:logical-test> | 123 | ········</cpe-lang:logical-test> |
| 118 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 124 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 119 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 125 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_container:def:1"/> |
| 120 | ········</cpe-lang:logical-test> | 126 | ········</cpe-lang:logical-test> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 122 | ······</cpe-lang:logical-test> | 127 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 128 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id=" | 129 | ····<cpe-lang:platform·id="package_logrotate"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 132 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 133 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id=" | 134 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 132 | ······</cpe-lang:logical-test> | ||
| 133 | ····</cpe-lang:platform> | ||
| 134 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 135 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 138 | ······</cpe-lang:logical-test> | ||
| 139 | ····</cpe-lang:platform> | ||
| 140 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 143 | ······</cpe-lang:logical-test> | ||
| 144 | ····</cpe-lang:platform> | ||
| 145 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 148 | ······</cpe-lang:logical-test> | 137 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 138 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id="package_iptables"> | 139 | ····<cpe-lang:platform·id="package_iptables"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 153 | ······</cpe-lang:logical-test> | 142 | ······</cpe-lang:logical-test> |
| 154 | ····</cpe-lang:platform> | 143 | ····</cpe-lang:platform> |
| 155 | ····<cpe-lang:platform·id="package_sudo"> | ||
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> | ||
| 158 | ······</cpe-lang:logical-test> | ||
| 159 | ····</cpe-lang:platform> | ||
| 160 | ····<cpe-lang:platform·id="package_systemd"> | 144 | ····<cpe-lang:platform·id="package_systemd"> |
| 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 145 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 163 | ······</cpe-lang:logical-test> | 147 | ······</cpe-lang:logical-test> |
| 164 | ····</cpe-lang:platform> | 148 | ····</cpe-lang:platform> |
| 165 | ····<cpe-lang:platform·id="package_ | 149 | ····<cpe-lang:platform·id="package_chrony"> |
| 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 170 | ······</cpe-lang:logical-test> | 152 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 153 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id=" | 154 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 155 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 157 | ······</cpe-lang:logical-test> | ||
| 158 | ····</cpe-lang:platform> | ||
| 159 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 160 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 163 | ······</cpe-lang:logical-test> | ||
| 164 | ····</cpe-lang:platform> | ||
| 165 | ····<cpe-lang:platform·id="package_audit"> | ||
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 175 | ······</cpe-lang:logical-test> | 168 | ······</cpe-lang:logical-test> |
| Max diff block lines reached; 481673/493409 bytes (97.62%) of diff not shown. | |||
| Offset 71, 353 lines modified | Offset 71, 353 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="package_usbguard"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_usbguard:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="not_osbuild_and_system_with_kernel"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_osbuild:def:1"/> |
| 87 | ········</cpe-lang:logical-test> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 87 | ······</cpe-lang:logical-test> | 89 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 90 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id=" | 91 | ····<cpe-lang:platform·id="machine"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 92 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 92 | ········ | 93 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 93 | ······ | 94 | ······</cpe-lang:logical-test> |
| 95 | ····</cpe-lang:platform> | ||
| 96 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> | ||
| 97 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 94 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-se | 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | ||
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 99 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 100 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 101 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="package_rs | 102 | ····<cpe-lang:platform·id="package_rsyslog"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 103 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_rs | 104 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 105 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 106 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 107 | ····<cpe-lang:platform·id="package_polkit"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 108 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-p | 109 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_polkit:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 110 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 111 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id=" | 112 | ····<cpe-lang:platform·id="os_linux_rhel_gt_or_eq_8_7_and_os_linux_rhel_ne_9_0"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 113 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_gt_or_eq_8_7:def:1"/> | ||
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_ne_9_0:def:1"/> |
| 112 | ······</cpe-lang:logical-test> | 116 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 117 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id=" | 118 | ····<cpe-lang:platform·id="mount_home"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 117 | ······</cpe-lang:logical-test> | 121 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 122 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id="package_ | 123 | ····<cpe-lang:platform·id="package_ntp"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 122 | ······</cpe-lang:logical-test> | 126 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 127 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id=" | 128 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 131 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 132 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id=" | 133 | ····<cpe-lang:platform·id="mount_var-tmp"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-tmp:def:1"/> |
| 132 | ······</cpe-lang:logical-test> | 136 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 137 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id="os_linux_ | 138 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ | 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_ne_9_0:def:1"/> | ||
| 138 | ······</cpe-lang:logical-test> | 141 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 142 | ····</cpe-lang:platform> |
| 140 | ····<cpe-lang:platform·id=" | 143 | ····<cpe-lang:platform·id="package_postfix"> |
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 146 | ······</cpe-lang:logical-test> | ||
| 147 | ····</cpe-lang:platform> | ||
| 148 | ····<cpe-lang:platform·id="not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw_and_system_with_kernel"> | ||
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 150 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 151 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 152 | ········</cpe-lang:logical-test> | ||
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 143 | ······</cpe-lang:logical-test> | 156 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 157 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 158 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 160 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 148 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 161 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 149 | ········</cpe-lang:logical-test> | 162 | ········</cpe-lang:logical-test> |
| 150 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 163 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 151 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 164 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 152 | ········</cpe-lang:logical-test> | 165 | ········</cpe-lang:logical-test> |
| 153 | ······</cpe-lang:logical-test> | 166 | ······</cpe-lang:logical-test> |
| 154 | ····</cpe-lang:platform> | 167 | ····</cpe-lang:platform> |
| 155 | ····<cpe-lang:platform·id=" | 168 | ····<cpe-lang:platform·id="rhcos4-rhel9"> |
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 171 | ······</cpe-lang:logical-test> | ||
| 172 | ····</cpe-lang:platform> | ||
| 173 | ····<cpe-lang:platform·id="package_pam"> | ||
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-p | 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 176 | ······</cpe-lang:logical-test> | ||
| 177 | ····</cpe-lang:platform> | ||
| 178 | ····<cpe-lang:platform·id="wifi-iface"> | ||
| 179 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> | ||
| 181 | ······</cpe-lang:logical-test> | ||
| 182 | ····</cpe-lang:platform> | ||
| 183 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 184 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 185 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 186 | ······</cpe-lang:logical-test> | ||
| 187 | ····</cpe-lang:platform> | ||
| 188 | ····<cpe-lang:platform·id="package_libreswan"> | ||
| 189 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 190 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> | ||
| 191 | ······</cpe-lang:logical-test> | ||
| 192 | ····</cpe-lang:platform> | ||
| 193 | ····<cpe-lang:platform·id="mount_tmp"> | ||
| 194 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| Max diff block lines reached; 37741/50948 bytes (74.08%) of diff not shown. | |||
| Offset 3, 4820 lines modified | Offset 3, 4820 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-set_password_hashing_algorithm_systemauth_ocil:questionnaire:1"> | ||
| 11 | ···· | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_unauthorized_world_writable_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Ensure·No·World-Writable·Files·Exist</ocil:title> | ||
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_unauthorized_world_writable_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-smartcard_configure_ca_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Configure·Smart·Card·Certificate·Authority·Validation</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-smartcard_configure_ca_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_nodev_removable_partitions_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-ssh_private_keys_have_passcode_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>OpenSSH·Service·Must·Use·Passcode·for·Their·Private·Keys</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-ssh_private_keys_have_passcode_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_ | 28 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_shadow_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Verify·User·Who·Owns· | 29 | ······<ocil:title>Verify·User·Who·Owns·Backup·shadow·File</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_ | 31 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_backup_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-se | 34 | ····<ocil:questionnaire·id="ocil:ssg-ensure_firewall_rules_for_open_ports_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Ensure·a | 35 | ······<ocil:title>Ensure·firewall·rules·exist·for·all·open·ports</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-se | 37 | ········<ocil:test_action_ref>ocil:ssg-ensure_firewall_rules_for_open_ports_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-se | 40 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_log_martians_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Enable·Kernel·Paremeter·to·Log·Martian·Packets·on·all·IPv4·Interfaces·by·Default</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-se | 43 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_log_martians_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_space_left_percentage_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Configure·auditd·space_left·on·Low·Disk·Space</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_space_left_percentage_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-file_permission_user_init_files_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_source_route_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·all·IPv4·Interfaces</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_accept_source_route_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-package_avahi-autoipd_removed_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-auditd_audispd_configure_sufficiently_large_partition_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Configure·a·Sufficiently·Large·Partition·for·Audit·Logs</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-p | 61 | ········<ocil:test_action_ref>ocil:ssg-auditd_audispd_configure_sufficiently_large_partition_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_max_sessions_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Set·SSH·MaxSessions·limit</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_max_sessions_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-e | 70 | ····<ocil:questionnaire·id="ocil:ssg-service_named_disabled_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Disable·named·Service</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-e | 73 | ········<ocil:test_action_ref>ocil:ssg-service_named_disabled_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-no_host_based_files_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Re | 77 | ······<ocil:title>Remove·Host-Based·Authentication·Files</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-no_host_based_files_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_binary_dirs_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Verify·that·System·Executables·Have·Restrictive·Permissions</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_binary_dirs_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_issue_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Verify·ownership·of·System·Login·Banner</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_issue_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_at_allow_ocil:questionnaire:1"> | ||
| 95 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_send_redirects_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Disable·Kernel·Parameter·for·Sending·ICMP·Redirects·on·all·IPv4·Interfaces·by·Default</ocil:title> | ||
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_send_redirects_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_source_route_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-service_auditd_enabled_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Enable·auditd·Service</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-s | 103 | ········<ocil:test_action_ref>ocil:ssg-service_auditd_enabled_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_space_left_action_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_set_warn_age_existing_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Set·Existing·Passwords·Warning·Age</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-a | 109 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_set_warn_age_existing_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_gshadow_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Verify·Group·Who·Owns·Backup·gshadow·File</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_backup_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_accept_source_route_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchown_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchown</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchown_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 996425/1009182 bytes (98.74%) of diff not shown. | |||